
$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft
File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json)
Hash identifier: iA/YsoNl+RrDDAK7Prog+KQncI8kzri/Vpi5u8IEjkY=
Subject key identifier: 7D:87:37:DE:41:87:40:7C:96:C1:BE:86:60:AD:D0:3E:33:A4:1C:96
Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11
Certificate serial: 5B58DA6303665B19CA56AC6A2474E629285E4A02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft
Manifest number: 03D1
Signing time: Thu 09 Apr 2026 04:59:11 +0000
Manifest this update: Thu 09 Apr 2026 04:54:11 +0000
Manifest next update: Fri 10 Apr 2026 06:32:11 +0000
Files and hashes: 1: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: SyGQEuGbpuMMAdPM+aDEtUpyIBx9bgPpackF0EiyYHY=)
2: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: lbYnRXKmnTUjhA+nAcmzKv46cEpdFXAE4Rl5JmwXVzE=)
3: A653D5055FC338B089E2C732382682788F082F11.crl (hash: b08E7Dx6UdEzt0gDRqXRyuYbM3UZW3/qog1+BVNmYhs=)
4: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: JZfHG4TWpEne2/1cim/ruMkXasZKNq75zP9QTA5/QY0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl
rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 06:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:58:da:63:03:66:5b:19:ca:56:ac:6a:24:74:e6:29:28:5e:4a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A653D5055FC338B089E2C732382682788F082F11
Validity
Not Before: Apr 9 04:54:11 2026 GMT
Not After : Apr 10 06:32:11 2026 GMT
Subject: CN=7D8737DE4187407C96C1BE8660ADD03E33A41C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:0b:7c:a0:cb:9d:a6:fb:89:9d:45:2d:a3:
88:a5:83:9a:19:e6:6c:2a:08:73:ef:75:dd:a6:50:
49:d8:df:f9:26:3a:01:59:0a:5e:7e:1e:98:32:c8:
2c:d7:dc:4d:13:f3:27:69:d7:5d:75:5a:a8:0d:ed:
29:0d:85:66:6a:9f:34:b2:18:6f:04:f4:1a:7d:7e:
28:4d:ac:6d:94:a2:79:c3:0d:16:57:b7:a4:29:a1:
86:b0:27:ad:dc:fd:e9:b3:57:b4:65:ad:67:42:43:
25:24:4b:fe:1e:6f:f1:95:3b:5c:f7:41:78:8a:68:
52:a3:69:ed:f9:80:2d:88:ad:0f:81:7c:c4:f4:04:
7c:15:a6:8f:a2:0d:f7:0d:28:a8:48:c6:41:85:2d:
8d:65:3b:bf:1e:ca:bf:27:c9:b6:b6:f6:b8:b1:58:
fd:fb:24:92:34:ea:70:a4:35:1f:57:b8:d9:58:87:
c4:6b:00:6f:4a:42:f2:0d:c8:64:09:6f:e3:6f:c0:
4d:b8:ad:78:0d:e3:fb:ea:43:d6:4b:c0:74:31:58:
b0:ad:86:9d:52:0a:1e:3f:ec:7c:e2:d3:cc:ad:20:
1e:0e:d7:c3:12:69:d8:eb:ac:14:fe:3d:ad:9a:1a:
07:19:89:26:27:15:e8:25:26:b4:be:aa:7e:80:e2:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:37:DE:41:87:40:7C:96:C1:BE:86:60:AD:D0:3E:33:A4:1C:96
X509v3 Authority Key Identifier:
keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:ae:77:f1:6c:cc:88:7f:d9:4e:12:2c:f7:02:e1:c4:e8:
f8:9b:af:b8:2b:cc:85:b1:40:5a:3c:f5:b5:aa:ad:8a:6c:32:
9d:33:ee:70:d3:a0:93:a3:b6:84:e8:53:6d:ca:08:6d:4d:3e:
81:04:1e:48:25:59:41:8a:c5:65:07:0f:24:1f:7a:85:e1:19:
df:bc:d3:3f:75:56:f8:ed:69:5e:93:f7:48:74:69:fe:6b:26:
49:66:9e:99:4b:df:05:85:b3:b7:e8:75:33:b7:46:a7:28:f3:
7b:01:c4:91:fd:8c:9d:e4:be:ed:87:53:a1:98:8e:0f:f0:c6:
cb:4d:4e:f5:f0:1e:b6:fb:b2:46:34:2f:6f:e9:fe:49:46:2a:
4d:f0:c8:16:0a:ef:42:d4:53:0a:95:f7:08:29:c5:8d:81:61:
d1:c9:a0:50:d2:ec:17:14:5a:1c:77:92:fa:89:29:99:38:82:
93:94:a0:1f:af:82:e8:6c:c5:8b:04:9e:52:17:79:c4:1e:d8:
b2:84:06:ab:5d:5b:3e:88:8c:3a:b6:b2:95:c1:cc:59:08:2a:
24:59:f0:ad:fd:f9:bc:7c:89:f5:4f:23:18:13:d6:ce:2d:3e:
5e:3d:ec:48:b4:8a:c1:95:73:db:d9:cf:28:08:1d:04:c8:5c:
2b:bc:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:13:47 2026 by rpki-client