
$ rpki-client -vvvf rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/D7E574F810348257D696DAFA7D51D291657A39B7.mft
File: D7E574F810348257D696DAFA7D51D291657A39B7.mft (raw, json)
Hash identifier: lz9yw6TCdQXpTShRPMEEdryuzmmzI1amOUT72ifpRN4=
Subject key identifier: CD:D7:06:A9:1A:CB:09:7C:CD:4A:7F:9D:AB:8A:AF:10:D9:93:B1:7B
Authority key identifier: D7:E5:74:F8:10:34:82:57:D6:96:DA:FA:7D:51:D2:91:65:7A:39:B7
Certificate issuer: /CN=D7E574F810348257D696DAFA7D51D291657A39B7
Certificate serial: 195C449AF63CD0284845ED0FAEE74622E02EC378
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7E574F810348257D696DAFA7D51D291657A39B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/D7E574F810348257D696DAFA7D51D291657A39B7.mft
Manifest number: 4E
Signing time: Mon 24 Aug 2026 10:59:15 +0000
Manifest this update: Mon 24 Aug 2026 10:54:15 +0000
Manifest next update: Tue 25 Aug 2026 13:36:15 +0000
Files and hashes: 1: 323830343a383031383a3a2f33322d3438203d3e20323731373239.roa (hash: igjAWzlfpQ3+8HLa2o2EB9YwzmyAcdPmTMPTq3NDES0=)
2: 3138362e3230382e38382e302f32322d3234203d3e20323731373239.roa (hash: H7y/1wUIckK/j/xAIFVrglN2sS7CjmXHM0rSSTpmthU=)
3: D7E574F810348257D696DAFA7D51D291657A39B7.crl (hash: 3eAGajWo4vpZ4ArkWLg0SsqPOA2NOdWGv0t91pY6lRE=)
4: 323830343a383031383a3a2f33322d3336203d3e20323731373239.roa (hash: 2Gy6qZqRGGmm93GxZMScJ5k93ZvS/6cwABEiNki8AvU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/D7E574F810348257D696DAFA7D51D291657A39B7.crl
rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/D7E574F810348257D696DAFA7D51D291657A39B7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7E574F810348257D696DAFA7D51D291657A39B7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 13:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5c:44:9a:f6:3c:d0:28:48:45:ed:0f:ae:e7:46:22:e0:2e:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7E574F810348257D696DAFA7D51D291657A39B7
Validity
Not Before: Aug 24 10:54:15 2026 GMT
Not After : Aug 25 13:36:15 2026 GMT
Subject: CN=CDD706A91ACB097CCD4A7F9DAB8AAF10D993B17B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:72:22:8d:c7:dd:59:64:80:0f:5a:40:ce:
34:de:89:e8:e8:54:65:3c:c8:69:a0:f6:d9:98:2a:
11:15:66:ee:64:d6:fe:b5:b0:39:48:d8:19:c5:27:
51:03:f3:29:e0:92:69:73:10:d2:27:80:ac:47:f0:
1c:fc:d0:1c:81:92:ff:93:1e:b3:3e:e7:08:cc:ab:
d5:69:ae:0c:63:44:ef:a6:b9:4c:09:41:cb:f3:da:
44:3f:36:39:54:d3:ce:0b:3d:f3:ec:b3:7f:97:b8:
04:22:27:82:3c:a4:a5:36:a4:9d:2e:e1:14:46:22:
7c:04:e8:33:57:16:5d:94:d5:c0:d5:24:99:ee:b6:
4b:d0:6b:29:fd:25:9e:4a:96:07:18:e9:49:40:5a:
03:b7:d0:17:78:aa:cd:46:0d:c5:54:3e:f9:d9:8b:
42:b1:ea:4c:04:37:93:ae:04:96:f4:71:11:6d:15:
27:76:9c:31:43:95:b7:a4:32:4f:ca:a8:78:8d:bb:
65:10:33:58:2f:ab:8e:eb:93:f7:2c:4b:e8:76:5b:
13:45:64:24:31:39:74:0f:69:00:2f:45:d7:a3:4a:
b9:51:c2:ab:5a:f4:16:a3:12:05:73:77:fc:75:d5:
b7:b8:f6:9c:83:b8:7e:c8:05:6b:79:cb:35:03:53:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:06:A9:1A:CB:09:7C:CD:4A:7F:9D:AB:8A:AF:10:D9:93:B1:7B
X509v3 Authority Key Identifier:
keyid:D7:E5:74:F8:10:34:82:57:D6:96:DA:FA:7D:51:D2:91:65:7A:39:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/D7E574F810348257D696DAFA7D51D291657A39B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7E574F810348257D696DAFA7D51D291657A39B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXp5dwyvhWrvh4p5Wry97fVLwB6tA2JbqGmoYREpohfV/0/D7E574F810348257D696DAFA7D51D291657A39B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:ce:b5:40:c5:93:74:62:d6:f7:48:e7:72:8d:7b:fd:00:
cc:d9:7a:13:85:1b:72:72:04:89:78:78:01:7c:07:09:20:cb:
85:54:59:71:2a:ae:cd:25:b5:59:68:ba:ae:d3:55:60:bb:29:
b5:13:a5:1a:92:4e:d3:d9:69:38:9a:c7:d8:02:38:e9:f6:12:
01:2c:90:8a:1c:2a:5e:26:48:d7:79:3c:ff:ac:ab:fd:6d:dc:
28:63:15:74:a3:92:36:f5:ff:5e:7f:e9:c8:15:40:54:0a:82:
28:a2:31:96:91:4e:ff:97:29:7b:ce:e7:df:63:ae:43:9f:da:
dd:04:32:4d:db:db:4a:f3:36:dc:06:da:92:b1:f4:3c:f8:6f:
54:71:a3:42:0f:b1:84:18:c7:93:6a:8e:05:e0:7e:9b:f2:dd:
70:8c:5b:ae:bb:1f:c4:62:45:7d:32:d4:26:08:3e:41:af:6b:
0b:eb:de:b0:28:b7:12:7a:6a:39:c1:ff:86:3c:2f:a1:0e:75:
81:fc:ba:a9:dc:b9:8b:f4:5c:92:9a:2a:e2:f6:16:43:5c:ca:
eb:dd:b5:59:03:5c:24:d5:61:3e:4c:ad:9f:97:10:81:d5:7d:
da:41:d5:55:fd:39:51:2f:ed:99:cf:ce:72:d8:8a:0d:41:85:
d5:60:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:47:07 2026 by rpki-client