
$ rpki-client -vvvf rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/72421AFD6451B44A58EC8A2969E57551966DE496.mft
File: 72421AFD6451B44A58EC8A2969E57551966DE496.mft (raw, json)
Hash identifier: LVpnzSbTL8BGC2vUWVkUFJjIYV86/wL3FYEa8vO4Y4o=
Subject key identifier: 42:2B:6A:A2:2C:B5:18:2C:E0:68:D9:F2:41:00:FF:B8:D5:FB:5C:65
Authority key identifier: 72:42:1A:FD:64:51:B4:4A:58:EC:8A:29:69:E5:75:51:96:6D:E4:96
Certificate issuer: /CN=72421AFD6451B44A58EC8A2969E57551966DE496
Certificate serial: 35B5336AB42C9F258374892CEF9C77CAB06F4864
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72421AFD6451B44A58EC8A2969E57551966DE496.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/72421AFD6451B44A58EC8A2969E57551966DE496.mft
Manifest number: 2C
Signing time: Sat 22 Aug 2026 11:32:33 +0000
Manifest this update: Sat 22 Aug 2026 11:27:33 +0000
Manifest next update: Sun 23 Aug 2026 12:45:33 +0000
Files and hashes: 1: 323830343a393330343a3a2f33322d313238203d3e20323734373439.roa (hash: MG6SUYGh/cJLEvL495wpXbxnJeXLbuA6DvUtkIxsz0Q=)
2: 72421AFD6451B44A58EC8A2969E57551966DE496.crl (hash: +mq7dTbLOVTuAdtvdl0lgMu5vHnfDkNApPETP2ALAR8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/72421AFD6451B44A58EC8A2969E57551966DE496.crl
rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/72421AFD6451B44A58EC8A2969E57551966DE496.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72421AFD6451B44A58EC8A2969E57551966DE496.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 12:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b5:33:6a:b4:2c:9f:25:83:74:89:2c:ef:9c:77:ca:b0:6f:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72421AFD6451B44A58EC8A2969E57551966DE496
Validity
Not Before: Aug 22 11:27:33 2026 GMT
Not After : Aug 23 12:45:33 2026 GMT
Subject: CN=422B6AA22CB5182CE068D9F24100FFB8D5FB5C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:4b:58:94:08:26:2c:24:e3:a5:dc:c8:5c:
51:c9:19:e8:93:c8:0a:41:c5:92:6e:61:be:b1:5c:
d7:16:bb:50:2b:dd:cb:e2:58:ed:ca:7d:21:87:c6:
2e:86:80:78:e9:8d:f2:f9:ae:40:08:c7:8a:75:2c:
2a:4d:7e:3d:dc:e6:47:52:4e:39:e7:4d:6d:83:9b:
68:ef:96:11:1b:d1:e8:0e:76:83:eb:5a:65:fa:57:
62:05:87:cb:f0:93:82:ec:8a:06:e0:f3:f4:17:a7:
af:02:7f:7f:1b:7d:0e:3e:bd:71:b5:de:fc:91:77:
4f:54:8b:df:9a:38:6f:4e:ad:a9:d8:e3:4d:df:a0:
47:ca:0a:98:11:dd:f1:02:9d:ea:42:84:db:46:a5:
ce:0b:7b:f5:28:23:c3:56:f8:97:03:c3:5e:91:c1:
dd:b7:61:19:66:e4:55:ce:f1:97:70:84:ae:a6:3b:
4e:65:b1:39:8a:a9:8f:42:84:72:86:14:48:a3:aa:
5a:ff:c8:d7:08:ee:26:69:a0:e1:eb:c4:e6:b9:f7:
6d:2d:4a:5b:46:d5:f3:f0:b3:40:1c:1c:8e:f7:5d:
67:20:f0:2d:e6:01:b9:cf:ba:11:98:a7:e2:dd:83:
1b:8d:31:32:54:c0:ca:4f:d9:50:d2:24:28:05:29:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:6A:A2:2C:B5:18:2C:E0:68:D9:F2:41:00:FF:B8:D5:FB:5C:65
X509v3 Authority Key Identifier:
keyid:72:42:1A:FD:64:51:B4:4A:58:EC:8A:29:69:E5:75:51:96:6D:E4:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/72421AFD6451B44A58EC8A2969E57551966DE496.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72421AFD6451B44A58EC8A2969E57551966DE496.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/72421AFD6451B44A58EC8A2969E57551966DE496.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dc:8d:9e:e0:bb:75:3b:7a:f3:e7:99:0c:ec:cb:3e:67:64:
74:cb:47:81:dc:6a:16:0d:91:df:79:66:cf:23:70:34:4c:c4:
69:54:75:22:92:5c:1a:28:9d:88:eb:e8:8b:e4:c4:7e:a4:3c:
64:23:6d:c6:45:fc:9f:ee:4a:e9:ae:12:0b:47:c9:bd:04:e8:
e4:8d:d4:0d:a5:db:00:42:6c:9b:24:3e:e9:82:9f:62:3e:60:
56:b0:c9:18:8e:3d:15:ea:3c:db:d9:ac:05:f8:af:4c:79:06:
37:59:0d:af:64:d3:35:22:02:21:39:f2:76:7a:c0:20:cf:9a:
21:fa:55:d5:e9:a3:85:3f:66:7c:0a:91:e3:d9:1d:3f:3f:40:
99:91:3f:aa:e7:9e:4a:90:65:3e:7a:de:c8:60:8c:fe:31:58:
15:90:df:70:7d:54:6b:5c:ad:3b:62:e0:9c:7e:5a:93:83:ef:
63:98:e6:cb:54:6c:1f:f8:8c:7a:61:bf:65:93:5d:c7:a6:37:
d8:20:d1:06:73:31:ef:9e:1c:17:f7:50:78:a3:25:b0:0c:71:
de:76:b6:aa:d7:ca:9c:6d:82:86:a6:85:e6:e0:e3:d8:1e:d9:
d0:46:75:9e:c1:35:13:5f:9d:97:e5:f5:8a:d0:c9:55:c1:3a:
d1:73:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:07:29 2026 by rpki-client