
$ rpki-client -vvvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
File: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json)
Hash identifier: VyPkoOM4a4lEa55Tg2lXWx0vE73zNEc1Arn8jYQNWvQ=
Subject key identifier: 2F:99:AD:43:E0:F7:DC:B8:D7:0A:27:5A:93:26:D1:A9:73:4E:48:39
Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Certificate serial: 3547E5F3E15BD5BDBAA4756DD4A334AC017908FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
Manifest number: 02A1
Signing time: Sun 23 Aug 2026 14:33:00 +0000
Manifest this update: Sun 23 Aug 2026 14:28:00 +0000
Manifest next update: Mon 24 Aug 2026 18:15:00 +0000
Files and hashes: 1: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: crA8QF6SL3DxsHKwch4/HWDtNk4isPssfccRPXZ4lNE=)
2: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: ktGx59JETujExjo30VVMt5PUSTyoY0psMj+P78eLE/Q=)
3: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: /ILQ+Wc0oiRnA22r/ip6dLhyn605yUUJbLwNkL1/IrI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 18:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:47:e5:f3:e1:5b:d5:bd:ba:a4:75:6d:d4:a3:34:ac:01:79:08:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38
Validity
Not Before: Aug 23 14:28:00 2026 GMT
Not After : Aug 24 18:15:00 2026 GMT
Subject: CN=2F99AD43E0F7DCB8D70A275A9326D1A9734E4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:f0:d3:fd:42:18:8f:f3:7b:c2:ec:32:80:
a0:e1:6a:a9:14:d6:06:7b:08:52:ec:b2:53:6d:9f:
e9:0f:45:34:3e:e9:f3:e0:69:65:6c:a4:9d:b3:21:
b0:3a:c9:2a:65:94:02:79:34:96:fd:18:70:c9:71:
cc:8a:c2:29:39:fa:af:1e:73:61:8e:68:51:67:79:
59:24:b2:73:2f:52:f0:9b:47:ab:81:d3:8a:46:54:
ef:2c:28:1e:07:cb:e6:d1:5e:83:26:b1:a5:74:00:
2f:81:57:f8:ea:ec:34:51:89:bc:a9:5d:3d:c5:77:
d4:2a:6e:cc:c5:92:a5:c4:34:3e:62:3f:19:46:4d:
bb:bd:f9:6c:d4:e4:70:ec:08:00:5e:9d:30:b9:80:
00:6e:e5:fe:0a:fb:bf:cc:4a:23:cd:c4:4d:f5:96:
fd:36:7b:e8:ef:0f:8f:c2:63:42:17:65:1d:c0:2c:
06:b9:9c:05:51:fd:f2:be:1b:54:54:85:38:28:f9:
b6:90:ab:44:d3:30:cc:53:d6:2b:83:bc:e4:9c:61:
21:3a:c1:53:73:99:d7:13:86:73:fa:b3:de:2a:39:
08:6e:14:3f:37:b4:cc:7e:16:a1:74:54:96:63:7b:
1b:9f:51:78:77:ab:81:ea:90:34:bb:65:a9:1a:07:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:AD:43:E0:F7:DC:B8:D7:0A:27:5A:93:26:D1:A9:73:4E:48:39
X509v3 Authority Key Identifier:
keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:c3:cc:a4:67:c1:7f:2a:0c:25:3f:53:37:11:80:db:d0:
db:41:35:c6:98:8e:4e:d2:d8:e8:3c:e2:14:eb:49:ec:50:bf:
fa:b2:20:45:bc:bf:11:39:8a:10:43:59:f0:a5:25:5e:c5:d7:
04:a5:a3:49:6e:7a:7b:e9:f0:77:ec:8b:c6:03:b2:c2:38:9a:
3d:b8:c0:e7:85:1d:94:57:44:96:64:f5:b2:13:a1:79:da:98:
4a:a4:dd:39:e6:3f:27:b3:e6:ba:b3:bf:11:3d:61:18:98:40:
43:60:c3:c0:23:f5:6e:76:b9:43:03:41:16:bd:89:95:a2:43:
35:cd:43:c9:3d:72:5c:ce:21:06:e5:43:49:73:db:d3:0c:56:
9b:ee:cd:f5:e1:58:6e:7a:29:a5:6f:d9:80:2b:0b:53:c5:2b:
c4:b8:a0:23:e3:0c:0d:93:68:38:68:e4:3d:23:36:1f:9c:b6:
4c:07:31:ea:f1:87:4f:3f:7f:f0:47:8e:8e:91:0d:57:54:b6:
df:c4:2d:14:e7:bf:cf:29:e9:4d:4f:83:f5:0f:4a:7b:0b:92:
48:83:06:95:c9:9d:61:f8:1c:a4:34:70:d2:95:2e:6b:23:d4:
10:29:d4:c2:38:c0:83:8b:c1:95:79:fa:fe:37:a8:3c:9b:50:
05:17:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:13:32 2026 by rpki-client