
$ rpki-client -vvf rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
File: 28D273356F90D13FC143833120BC59A454646F71.mft (raw, json)
Hash identifier: HJXGG2qCQvXQDN2eBU9KSGcwitA/F1Iqv3Lwr8zK+kk=
Subject key identifier: 68:A9:77:57:1D:2C:27:68:B8:C8:67:DB:C9:9C:3B:C1:A2:3B:8F:69
Authority key identifier: 28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
Certificate issuer: /CN=28D273356F90D13FC143833120BC59A454646F71
Certificate serial: 5B20E54390EB854668677B457E41931EEFFCFBE8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
Manifest number: 87
Signing time: Fri 26 Jun 2026 19:14:21 +0000
Manifest this update: Fri 26 Jun 2026 19:09:21 +0000
Manifest next update: Sat 27 Jun 2026 19:30:21 +0000
Files and hashes: 1: 323830343a393434383a3a2f33322d3332203d3e20323734383333.roa (hash: 3+OUWvJ2paVgdIryDuKrx561qJe0osctthIg1n2by6E=)
2: 28D273356F90D13FC143833120BC59A454646F71.crl (hash: zQCQV7DuQ64aJy2StGvAfLibweMtc7W6vzNFZQePc+0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 27 Jun 2026 19:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:20:e5:43:90:eb:85:46:68:67:7b:45:7e:41:93:1e:ef:fc:fb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D273356F90D13FC143833120BC59A454646F71
Validity
Not Before: Jun 26 19:09:21 2026 GMT
Not After : Jun 27 19:30:21 2026 GMT
Subject: CN=68A977571D2C2768B8C867DBC99C3BC1A23B8F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:f6:7e:18:e8:df:08:14:81:72:2a:d3:87:
96:fc:03:ef:ac:37:70:3d:e8:82:d5:17:83:10:2b:
81:84:b7:be:60:d3:ad:67:e9:ba:c0:22:e9:3c:0c:
25:97:8f:62:c3:19:25:bd:b8:67:8c:e7:69:8b:f1:
3d:c6:a2:18:05:59:1f:e5:25:9a:51:89:b0:e2:3f:
2c:3b:df:67:a7:01:05:d0:73:e8:9e:c6:2a:a2:21:
42:a6:0e:61:65:46:aa:82:b4:f8:a9:30:0c:62:7a:
2e:0f:4c:6b:d9:36:ff:47:a2:5f:00:7b:f4:0e:fd:
c7:9a:be:1c:a6:c1:45:95:5b:36:04:92:27:1f:d0:
4f:d7:60:e7:3c:ef:de:3b:cf:5e:b3:31:6e:6c:ad:
52:28:a8:a2:eb:55:e0:b4:f5:e1:16:47:17:f7:08:
67:86:de:c5:a5:a9:17:66:94:0d:5e:a0:57:71:ff:
d5:97:6f:46:f7:a7:1e:d6:4d:92:80:24:f3:1e:29:
97:ab:94:df:c0:6f:1f:61:5b:e7:d2:fe:fc:26:1f:
c3:cf:c9:54:d7:66:ed:05:8c:f7:e1:78:dd:de:3c:
a8:f2:25:d9:55:31:b5:73:95:08:d8:8e:27:41:77:
87:b1:6f:4f:06:67:d3:6f:a3:6a:a1:44:7a:9a:69:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:77:57:1D:2C:27:68:B8:C8:67:DB:C9:9C:3B:C1:A2:3B:8F:69
X509v3 Authority Key Identifier:
keyid:28:D2:73:35:6F:90:D1:3F:C1:43:83:31:20:BC:59:A4:54:64:6F:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D273356F90D13FC143833120BC59A454646F71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CXYzYMc2MsmsMSLmMTAf3acvTeydsk77WfX9YHbdqDV/0/28D273356F90D13FC143833120BC59A454646F71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:25:01:7b:94:ec:ae:31:b1:e9:ea:83:13:9a:5e:87:92:
a9:64:d8:9a:9e:27:31:86:84:00:70:06:4e:12:f0:64:b7:0f:
32:1b:7b:27:19:29:52:7c:27:94:28:0c:e7:91:aa:0e:d8:8c:
e0:7d:8e:d9:3d:ff:87:ed:95:8f:1d:c6:44:79:ee:4d:ff:47:
8e:5f:5c:de:08:38:44:a0:71:3c:4a:33:ec:b8:e3:4f:f3:5c:
07:fa:dc:e8:31:4b:04:d7:b8:de:09:61:91:f0:10:7d:d7:7b:
13:22:f2:9f:a9:dd:60:a3:b7:68:4e:06:87:db:2d:00:09:01:
86:5d:4b:70:16:e4:24:32:2c:a3:90:15:15:c4:3b:e0:5d:a6:
88:d1:e1:a0:43:c9:8b:ed:61:00:59:8d:a9:6f:7b:58:fc:dd:
30:0b:cc:ac:74:e9:dd:09:8f:36:36:f9:2d:b0:98:29:77:68:
ae:72:f5:7d:05:74:48:f7:51:d4:8b:02:d6:8f:8f:c7:70:37:
7e:de:b1:51:7a:24:a6:03:dd:71:ec:ae:42:70:b6:69:4f:5e:
b0:e7:4c:fe:9f:5f:64:d7:26:d9:30:6c:84:cd:9b:d4:1b:c7:
77:90:24:3a:97:65:0b:ae:89:08:b8:ec:b1:09:8a:10:b1:84:
03:ee:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:15:45 2026 by rpki-client