
$ rpki-client -vvf rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft
File: 20EE210B8D6A04962173004DC68629DBF033EFB8.mft (raw, json)
Hash identifier: HG3E8l74xjOPBLBnWCmGCCfXKVCGnzbq+LQcNvmcMwQ=
Subject key identifier: B4:28:46:A7:BB:3B:21:38:D7:94:F5:38:E5:9A:31:42:04:A2:87:2F
Authority key identifier: 20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8
Certificate issuer: /CN=20EE210B8D6A04962173004DC68629DBF033EFB8
Certificate serial: 540FEE656ABF73970C3B38582CCE36808BF2DCB8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft
Manifest number: 8C
Signing time: Sun 24 May 2026 01:46:32 +0000
Manifest this update: Sun 24 May 2026 01:41:32 +0000
Manifest next update: Mon 25 May 2026 02:33:32 +0000
Files and hashes: 1: 3133382e39342e3139362e302f32322d3234203d3e203631353831.roa (hash: sa9CbGsjToh5xSwiAq3+53EFajZd3ZS2Vu0qf9Bn+cw=)
2: 323830343a323339383a3a2f33322d3336203d3e203631353831.roa (hash: sDW1u1G3xwoJJb5WrMBGlB/ArTK4PNi5MA7borCfA0g=)
3: 20EE210B8D6A04962173004DC68629DBF033EFB8.crl (hash: pLiU6MkC6j7q5re2CYOiO3IpMjMa1t6hMohjZQ9423k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl
rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 02:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0f:ee:65:6a:bf:73:97:0c:3b:38:58:2c:ce:36:80:8b:f2:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20EE210B8D6A04962173004DC68629DBF033EFB8
Validity
Not Before: May 24 01:41:32 2026 GMT
Not After : May 25 02:33:32 2026 GMT
Subject: CN=B42846A7BB3B2138D794F538E59A314204A2872F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:4f:4e:74:f1:bd:f6:b9:3e:35:d6:af:ed:
d2:09:f8:a2:62:92:71:42:8d:b0:f4:75:57:56:04:
a5:b6:62:4f:09:24:a7:7f:69:3f:85:c4:0f:cc:ce:
1b:07:5b:7f:8e:9e:30:2e:b0:ef:d4:62:a9:38:b9:
b0:9e:04:8b:4a:29:8f:0b:08:c8:fd:1e:61:4a:67:
90:44:60:ed:62:30:22:f2:45:1d:88:76:c1:3b:ff:
8d:24:0a:db:6a:f7:52:bb:ce:32:41:61:ad:1d:98:
29:2b:41:f9:91:ba:8e:c0:cd:0b:08:72:a3:d1:e4:
a4:9f:bd:f8:50:4e:9d:16:fd:f9:a0:27:3e:28:d8:
ba:04:06:3f:0e:a3:86:e3:93:ed:40:50:c8:c9:94:
c6:b1:e3:fc:31:f3:fc:6d:c0:a4:46:23:bc:91:09:
86:c4:29:fb:43:78:a3:f3:48:14:97:7d:d2:e8:64:
77:f0:62:1b:df:18:d4:44:61:e9:54:95:84:5b:d1:
84:c6:68:6f:8a:be:5d:0c:78:62:cf:73:20:f4:ef:
a0:d1:61:ab:da:b0:e9:92:c3:89:07:50:b8:46:a0:
fb:27:ae:9a:61:80:23:76:1e:62:f9:86:39:12:a0:
ae:b9:70:af:bc:64:84:e8:b6:e5:9a:1e:30:18:03:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:46:A7:BB:3B:21:38:D7:94:F5:38:E5:9A:31:42:04:A2:87:2F
X509v3 Authority Key Identifier:
keyid:20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8b:b4:d8:74:25:8b:00:d3:90:82:15:4c:92:88:0b:41:da:
14:64:1d:86:0a:cf:48:bf:44:be:11:c5:6b:80:27:0c:79:1d:
15:aa:37:0e:51:61:4e:43:2c:be:44:d4:27:b9:7d:60:8e:2d:
f7:7b:66:c7:72:5f:5c:01:3f:06:f9:6c:8e:9f:4b:12:60:a2:
05:fb:8d:4b:ac:fa:27:b1:d0:7f:47:b3:b3:af:73:a8:09:09:
99:ac:02:99:94:2b:1f:b6:13:15:44:d7:8e:8e:b7:1c:3b:68:
33:9e:ff:e5:a3:69:55:a6:d2:34:3d:6a:a2:f7:1c:77:62:d0:
4a:c1:30:98:0d:ca:09:1e:50:a8:33:28:96:97:73:40:28:c8:
f3:38:1b:0a:93:71:b4:e2:18:c3:bf:b0:8a:83:64:da:ed:02:
88:bf:a4:3d:99:e1:a9:67:58:7f:c2:32:54:ca:e0:8d:b6:83:
b6:34:1e:f5:1a:14:1f:31:ea:a0:52:df:4c:72:a6:9b:8a:a4:
13:4a:10:e6:b3:9d:4a:d6:ef:e8:81:de:e7:68:64:a1:34:31:
c9:b5:77:05:2e:73:5e:f5:f2:1e:7e:48:83:41:f0:4a:c8:f1:
4e:62:8e:80:6b:4c:2a:41:aa:ca:dc:00:cd:28:cf:ab:12:a9:
b1:c3:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:49 2026 by rpki-client