
$ rpki-client -vvvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
File: EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft (raw, json)
Hash identifier: Ids3O47naVgPRnTIXObvwX+7TQkZbJxKRnsrWQQU8VA=
Subject key identifier: DA:22:EC:7F:70:8B:14:C2:EB:D1:A4:2C:4B:20:2A:F1:A7:8D:EF:0E
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Certificate issuer: /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial: 73F63456FDD9493039B58F709E4379FA472DAE60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
Manifest number: 019F
Signing time: Sat 22 Aug 2026 22:19:34 +0000
Manifest this update: Sat 22 Aug 2026 22:14:34 +0000
Manifest next update: Sun 23 Aug 2026 22:53:34 +0000
Files and hashes: 1: 3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (hash: x8UabOroN6QkGpYnEDPdNa/H+X5n/UmweHIEJlXFBNo=)
2: EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl (hash: kKZITKvAqiXMj8mxfopKKIRo6CVYY4pbl46EDXbEn28=)
3: 3137302e3233312e3231362e302f32322d3332203d3e20323633393133.roa (hash: jOmxRKVBVLYE1Ex15DY+LrGk3Oyb+DJa9ko+jW5/phw=)
4: 323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (hash: TZ7t9yRt6nYqnrU57K9fhiYScA6XfbXu+v9COLg47bY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f6:34:56:fd:d9:49:30:39:b5:8f:70:9e:43:79:fa:47:2d:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Validity
Not Before: Aug 22 22:14:34 2026 GMT
Not After : Aug 23 22:53:34 2026 GMT
Subject: CN=DA22EC7F708B14C2EBD1A42C4B202AF1A78DEF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:70:dc:d8:f1:51:07:79:62:2f:11:dc:42:
66:d6:a6:1c:4c:da:25:06:78:2a:48:e4:12:65:50:
00:b5:a2:53:01:ca:6a:a0:4c:2d:72:48:11:17:4e:
20:71:dd:06:80:f6:ab:cf:7e:fa:dc:02:56:bd:5c:
19:04:c4:ab:2e:93:a2:a2:2c:b5:cf:4f:0d:f0:e3:
5f:60:e3:94:01:56:0f:15:ad:fd:15:26:1b:32:f4:
47:87:63:8e:7b:82:aa:2d:ed:27:8e:36:7c:eb:99:
d9:b7:1c:5e:56:4d:1b:e5:8c:c9:66:dc:db:e7:43:
4b:9f:9d:a4:8d:90:68:d8:29:d6:30:b3:b8:84:13:
21:71:75:3f:ea:9f:70:94:14:01:4e:57:01:ae:1b:
ba:b6:e6:a8:fa:73:cd:8b:ac:de:a0:6f:e2:5c:c6:
47:33:17:cc:b9:ec:1d:17:2a:63:2a:4a:db:e0:03:
a7:1b:70:47:39:1c:9a:c4:a8:f7:df:84:82:1e:09:
d3:c6:f6:c9:17:a7:4e:89:52:60:de:6d:f8:b4:b0:
e6:bd:94:cf:71:0a:cc:a4:4e:9f:28:60:91:96:84:
73:50:94:aa:48:06:66:4d:5c:49:bd:4f:5c:5e:b8:
bb:78:d3:2b:fa:98:00:1d:f3:23:c8:11:14:26:22:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:EC:7F:70:8B:14:C2:EB:D1:A4:2C:4B:20:2A:F1:A7:8D:EF:0E
X509v3 Authority Key Identifier:
keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e4:8c:62:2a:ac:97:65:45:a3:91:62:71:2b:e8:d0:dc:1e:
14:43:12:6a:6d:7a:b3:0f:10:05:66:96:32:7c:b6:88:84:54:
5f:ba:02:3d:ed:2b:dd:32:05:ea:e7:f6:df:4a:f0:37:de:e1:
44:fe:9b:0a:c2:ea:5e:b9:4e:29:b5:06:c1:34:32:c2:a4:b0:
51:9b:71:e1:9f:d6:7b:22:a3:f4:5d:69:e6:4a:13:18:76:84:
19:bc:9e:0c:93:e4:1b:38:a1:85:86:cf:21:1a:74:16:1c:30:
2b:ff:35:fa:a7:50:f5:90:f7:59:47:f3:80:f1:dd:4b:97:8b:
9c:a2:11:03:2d:9e:d2:f7:cc:ec:85:9e:d0:fd:5e:59:ac:f7:
67:65:bf:84:af:fe:a6:e7:23:9f:6c:da:a4:82:21:79:3f:e2:
5c:f1:19:61:04:db:c1:bb:3b:64:b4:b5:d2:0f:23:66:0a:fd:
8e:0f:f6:21:a4:94:6d:c7:f5:92:39:da:4f:58:09:79:1c:ff:
4a:8c:3d:86:a7:a1:28:ee:ed:68:62:7f:86:91:f7:98:f8:a1:
2c:f6:99:e0:7e:b0:c3:fb:50:ca:ac:c6:3f:fb:0a:2e:04:b3:
5c:d4:c9:76:96:44:82:bb:10:10:09:a3:27:2e:e3:21:f8:c8:
37:84:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:18:21 2026 by rpki-client