
$ rpki-client -vvvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
File: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft (raw, json)
Hash identifier: cjx+mGxZ3vNHCoXUt235gH1u5llVPvE/cfc3tOfjNys=
Subject key identifier: D0:CF:14:EF:93:DB:E3:9E:34:93:AD:06:AE:26:77:39:62:02:68:88
Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70
Certificate issuer: /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
Certificate serial: 500388F837324D48DC674605C13F54F7FB394F4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
Manifest number: 01EC
Signing time: Mon 02 Nov 2026 04:22:25 +0000
Manifest this update: Mon 02 Nov 2026 04:17:25 +0000
Manifest next update: Tue 03 Nov 2026 06:34:25 +0000
Files and hashes: 1: 3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (hash: cczSmnq9Y6o9hIoNmERg6XnLqbDdPZ49+pOk6JcseNA=)
2: 323830343a393063303a3a2f33322d3438203d3e203532383535.roa (hash: wa8hgAwFuvz5yoNVE0dEAX2YZaMFiHumdjyoojtqyf8=)
3: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl (hash: jXuISSln3jTZi1K8gSdNZTpwmUdwhpLCuartRsOvR3g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl
rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 06:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:03:88:f8:37:32:4d:48:dc:67:46:05:c1:3f:54:f7:fb:39:4f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
Validity
Not Before: Nov 2 04:17:25 2026 GMT
Not After : Nov 3 06:34:25 2026 GMT
Subject: CN=D0CF14EF93DBE39E3493AD06AE26773962026888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:42:bd:20:2e:d5:80:ae:aa:1c:50:7c:d3:
0c:ba:fd:7d:7f:c9:8e:76:2d:11:47:12:7c:03:a9:
ed:cb:65:61:ef:b0:4f:d1:c5:6e:2a:f1:55:d1:a8:
fa:7a:b9:af:0c:bc:fd:18:67:ab:0c:26:89:21:f6:
96:f5:8e:6c:cc:03:a5:91:48:c1:4c:5e:02:d5:9e:
24:60:a3:7b:09:73:62:f7:78:86:70:c6:9a:95:18:
90:a2:88:f0:15:c1:c4:e6:e8:56:44:db:cd:68:12:
10:26:f7:06:7f:6c:a1:a4:61:09:2d:7f:d7:af:a3:
a0:68:64:7c:c5:d7:34:3c:de:5d:bd:41:37:38:8e:
0a:f4:2a:3f:51:3f:ba:58:bb:20:f1:a5:2c:49:45:
99:d6:47:43:33:55:d0:e5:d8:65:4b:fe:9b:8e:da:
7d:1d:f6:85:05:d0:14:9a:26:04:52:b2:39:de:e7:
cd:dc:d5:9d:be:dd:e2:19:0b:a5:0f:5b:fd:21:6d:
ea:fc:f7:a5:f0:97:4d:b5:fa:4e:25:c3:a6:c9:a1:
9b:ee:9c:71:61:ca:d1:dc:d2:87:28:46:4d:7d:d2:
31:68:68:9d:3e:af:ce:b4:2e:bf:96:2a:eb:11:6f:
4f:1d:1a:e8:f2:a9:0a:de:27:cd:8b:c6:d2:15:a4:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CF:14:EF:93:DB:E3:9E:34:93:AD:06:AE:26:77:39:62:02:68:88
X509v3 Authority Key Identifier:
keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:0e:bd:ab:00:b9:65:d9:d7:51:0c:b8:52:19:0e:92:8c:
42:2d:44:11:4b:79:96:1f:41:a0:d9:76:91:25:29:7e:5c:22:
9b:3a:d8:79:37:7a:ca:23:92:11:d8:83:0b:3f:97:4a:2f:53:
fc:a6:d8:3c:e8:83:f7:ae:48:db:54:40:74:61:64:9d:a3:05:
9e:01:dc:67:ea:36:b9:00:24:e2:45:45:3a:ad:c4:ba:56:2c:
70:85:9b:07:c6:d6:9d:a5:5c:40:98:af:18:59:2e:dc:0c:e9:
71:0e:41:7f:1e:f0:ec:c4:82:25:13:2d:61:cf:40:89:b2:95:
83:3c:3b:83:04:f4:cb:da:14:f0:3a:20:0e:eb:92:a8:09:27:
29:b7:14:37:46:23:79:97:e5:db:8f:aa:3b:65:9c:54:02:45:
68:d9:f9:f5:3c:18:a1:9a:0a:02:9b:6f:a2:e2:49:78:0d:6e:
0c:aa:7a:32:d8:85:1b:11:0f:3f:f7:bc:9b:3e:c6:1a:4f:1d:
55:44:e4:7f:da:6a:3d:91:72:78:47:f4:44:d2:aa:ce:e6:40:
ec:c1:2f:c3:de:bd:dd:1a:03:20:fc:23:42:e6:9a:f4:6c:df:
ea:2a:52:1f:d7:61:88:59:1c:1e:9f:d7:5e:8f:02:6e:cd:4d:
9e:52:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:30:49 2026 by rpki-client