
$ rpki-client -vvvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.mft
File: 704337C4217BBD58936864A322995C0D657BB548.mft (raw, json)
Hash identifier: PnOfyHRFXssF23UtD5HmT+aeewW1m7gIB+QwU+Bst5M=
Subject key identifier: C0:71:B6:61:BA:54:AF:8E:21:80:F5:CA:59:BB:F2:34:67:68:98:B4
Authority key identifier: 70:43:37:C4:21:7B:BD:58:93:68:64:A3:22:99:5C:0D:65:7B:B5:48
Certificate issuer: /CN=704337C4217BBD58936864A322995C0D657BB548
Certificate serial: 5019963640A238EE4314B76889BC7819DEA3380E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704337C4217BBD58936864A322995C0D657BB548.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.mft
Manifest number: 11
Signing time: Sun 01 Nov 2026 17:37:51 +0000
Manifest this update: Sun 01 Nov 2026 17:32:51 +0000
Manifest next update: Mon 02 Nov 2026 18:36:51 +0000
Files and hashes: 1: AS61850.asa (hash: WLce0c+BJbsDekzSUHVyfCXmLtn6FbU33dmUhFy43QY=)
2: 704337C4217BBD58936864A322995C0D657BB548.crl (hash: 9rWmJDk7IVprer+7y7TfSM+iIEi4Sdog3OPNK++QuX0=)
3: 3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (hash: GPGwYi983K0VkYsZk2W7C+eLNQscAkDPQcrmYf0NxD4=)
4: 323830343a316134383a3a2f33322d3438203d3e203631383530.roa (hash: ZUKXDELc7I4iiarO2f53dbq6Ryu9A2ahPqk84JooN/w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.crl
rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704337C4217BBD58936864A322995C0D657BB548.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 18:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:19:96:36:40:a2:38:ee:43:14:b7:68:89:bc:78:19:de:a3:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704337C4217BBD58936864A322995C0D657BB548
Validity
Not Before: Nov 1 17:32:51 2026 GMT
Not After : Nov 2 18:36:51 2026 GMT
Subject: CN=C071B661BA54AF8E2180F5CA59BBF234676898B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:d6:d9:1a:16:22:88:ab:7f:0f:92:50:34:
c8:52:59:71:6c:86:a1:e2:d0:fe:cc:bb:32:d2:21:
34:11:f3:ea:ea:dd:2a:40:42:34:df:35:49:78:fb:
e9:c0:e4:90:9d:31:66:5b:0e:ba:34:ab:8d:c2:8b:
76:7e:10:70:8d:df:0e:be:4c:f1:58:0d:90:2f:f1:
14:fa:a0:0d:9c:46:65:a9:4e:28:a4:0c:25:06:2f:
bf:af:a9:df:33:6b:c9:90:53:7b:31:3b:ea:f1:81:
1a:78:cc:8a:5c:6c:54:69:15:3a:ee:b9:86:64:1a:
ab:c1:0e:37:66:ba:fa:d1:33:48:1f:cb:6c:9f:e2:
bf:a2:e2:39:bd:10:3b:ea:97:12:69:c3:f9:84:39:
c9:05:40:42:c7:ce:b0:e7:06:11:e4:70:d2:90:ac:
2f:52:13:6b:15:e1:15:40:e6:ba:ed:18:4b:ad:7f:
ea:ac:9d:87:fd:bd:01:3a:83:86:e9:c1:59:ef:65:
a5:e0:b9:e4:37:9a:7a:de:06:e8:d5:3c:38:20:ed:
29:10:90:38:ae:c2:34:f9:0c:c5:5a:6b:f0:0e:29:
9a:a7:99:ac:82:11:de:6a:6b:ad:20:63:eb:ab:81:
92:be:96:d7:eb:86:68:ba:26:0a:c6:5c:98:32:7b:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:B6:61:BA:54:AF:8E:21:80:F5:CA:59:BB:F2:34:67:68:98:B4
X509v3 Authority Key Identifier:
keyid:70:43:37:C4:21:7B:BD:58:93:68:64:A3:22:99:5C:0D:65:7B:B5:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704337C4217BBD58936864A322995C0D657BB548.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/704337C4217BBD58936864A322995C0D657BB548.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3c:11:31:39:4b:df:49:53:a2:13:09:38:54:55:e8:03:b9:
b4:7a:47:cf:f5:be:76:f3:d9:eb:3c:53:48:6d:49:83:e7:74:
8d:35:36:ca:c2:16:ae:e1:ef:8f:90:b8:16:2d:94:f5:be:68:
61:2b:f1:46:04:03:52:8b:5a:41:3f:9e:05:77:06:b6:b0:21:
3f:63:61:62:a6:ed:80:ae:bc:f7:6f:12:24:45:8b:5a:da:a9:
44:21:86:9b:37:14:5c:04:90:13:33:66:b7:20:e9:5d:d9:d6:
04:ec:ef:57:e4:97:4e:cf:b6:43:6e:bc:f8:ad:32:93:87:08:
2f:91:14:b8:67:59:20:ea:6d:0c:f0:9f:f5:0e:d4:32:b1:8f:
f9:f1:d2:81:52:c2:2a:c1:06:30:2e:a0:e6:71:a1:c3:04:8e:
a3:a7:6c:6b:ed:12:e2:e7:4c:71:87:55:68:6a:7e:5f:b1:7e:
1c:60:43:d9:c1:01:b9:58:a6:76:77:a8:e6:15:49:05:81:91:
d9:88:25:37:6a:5d:24:36:b6:4d:3c:97:94:43:2c:83:24:3f:
80:07:ed:c6:2a:eb:fe:46:c1:9e:56:36:e9:43:f2:2a:e0:b7:
55:18:4a:a6:ef:4f:0d:61:28:9c:4f:54:72:83:8f:b2:d5:9b:
01:0d:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:07:01 2026 by rpki-client