
$ rpki-client -vvvf rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
File: 658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft (raw, json)
Hash identifier: lPqhqpaiKjLTs0JBZYQ9SeJCekU4t3zGkAA3UYVetTo=
Subject key identifier: 1E:AE:2E:BB:D6:41:79:67:65:47:CC:18:58:20:2D:C2:D4:24:11:15
Authority key identifier: 65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A
Certificate issuer: /CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
Certificate serial: 3E8FDD6B58920D5F01169DC87FA7FF24678AF571
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
Manifest number: 35
Signing time: Sun 23 Aug 2026 12:23:47 +0000
Manifest this update: Sun 23 Aug 2026 12:18:47 +0000
Manifest next update: Mon 24 Aug 2026 15:01:47 +0000
Files and hashes: 1: 658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl (hash: xtKnZx366TbpB7SRK7ZexRw2pIEqf/NWdh5TxPWSjdA=)
2: 3138362e3235312e3136342e302f32322d3232203d3e203533323237.roa (hash: IY/hvH0ONWMSjMI1IOJmLuJBCYcAS5bF4/AU0P5evN4=)
3: 323830343a336133383a3a2f33322d3332203d3e203533323237.roa (hash: bRDPra+POf8HhEsdE9+2Z7PmCUnzejGeqMu9ijS39tQ=)
4: 3138362e3235312e3136302e302f32322d3232203d3e203533323237.roa (hash: Es/8bHl3jFSgHejn+hXstXZvpRtBRP+YR52qU58Mrew=)
5: 3138362e3235312e3136302e302f32312d3231203d3e203533323237.roa (hash: Ti4iN6XTwr6/Ua78ohnLtCffVNaDsgOBnDRg0jKU1nM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl
rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8f:dd:6b:58:92:0d:5f:01:16:9d:c8:7f:a7:ff:24:67:8a:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
Validity
Not Before: Aug 23 12:18:47 2026 GMT
Not After : Aug 24 15:01:47 2026 GMT
Subject: CN=1EAE2EBBD64179676547CC1858202DC2D4241115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:97:f2:ef:69:fe:9f:b3:89:18:7d:02:95:
84:89:10:58:f6:35:86:e6:f7:23:ec:3a:2c:8e:19:
fd:38:a3:e6:66:09:3b:7a:90:db:00:33:cb:ff:7d:
bf:44:05:5f:32:55:eb:71:2c:18:9e:0c:61:1e:86:
06:0d:60:db:c0:4c:54:2d:eb:84:ce:93:d3:93:02:
8b:86:bb:39:8f:e3:50:df:5c:ba:07:36:a2:7e:89:
54:f7:5b:0c:8d:c1:05:c1:6f:e4:47:e1:fe:a5:ce:
14:a6:7c:0a:fd:7e:d1:c1:92:91:9b:dd:45:c7:66:
37:44:f1:2c:5d:63:c8:c3:8a:20:aa:a3:8a:50:6f:
38:24:a8:b6:13:b7:00:09:a2:04:bc:87:89:d9:79:
b4:1c:b2:4b:2d:24:f0:d2:e0:73:3e:9e:04:29:97:
56:1f:d6:61:80:26:f3:4f:51:78:81:e3:2b:10:5c:
17:78:06:94:ff:69:6d:da:3c:d2:0a:db:cc:fd:3d:
81:ae:a0:6d:80:67:2b:5c:af:77:76:89:c7:0f:9a:
16:3e:cd:d7:f4:16:93:0c:98:88:53:6b:6c:8c:06:
6b:4c:6e:37:61:c3:24:70:5f:0e:f3:0a:42:79:a3:
af:a2:49:82:eb:78:0e:de:09:b1:49:16:1d:ef:49:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:2E:BB:D6:41:79:67:65:47:CC:18:58:20:2D:C2:D4:24:11:15
X509v3 Authority Key Identifier:
keyid:65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:12:2a:b6:aa:8a:34:df:a7:59:dd:46:5d:86:1d:cf:09:
88:bf:0d:01:a7:c2:2e:52:6e:44:97:0c:61:75:6a:40:55:c6:
e3:77:0a:62:85:9d:9c:cb:15:4f:aa:49:b1:ac:5b:bd:a8:e8:
97:d1:04:81:04:48:98:d0:e9:f5:1d:fa:72:ec:fe:70:95:1c:
39:06:04:a0:0f:42:f6:28:ef:0e:a1:96:7f:4e:c0:59:8b:09:
aa:ac:bf:14:d5:c4:0e:48:fd:da:39:07:e3:e0:05:f1:f1:c1:
e3:fa:ff:9e:a9:3d:42:dd:3c:d0:df:f5:ac:ec:b6:b1:40:eb:
05:46:45:c7:80:10:fb:0d:69:b5:41:e6:c7:a6:34:a8:0f:e4:
0f:60:26:d2:2b:15:0b:a0:b4:6a:83:d9:39:8e:12:3d:a3:90:
8a:13:45:c1:d7:4c:5a:c9:b4:ac:d9:6f:13:b8:e5:89:d3:cf:
96:fa:75:01:bd:ad:ca:6d:50:2d:2b:ac:89:4e:d2:9e:fa:71:
f3:f5:5e:b9:fb:63:26:01:d2:d2:45:57:a2:5c:54:99:ea:ab:
bd:e6:33:1b:36:cd:f7:3c:01:33:47:5a:9b:1c:a3:dc:23:12:
dc:e5:c7:de:25:88:80:e8:36:72:02:97:2e:ce:47:bc:5e:23:
16:ec:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:09:58 2026 by rpki-client