
$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File: CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier: rDp2Lc/ovVI3MkxNJJmRGmlakYMk3EGtY0XMo4bneYk=
Subject key identifier: B7:97:C7:47:31:A3:4E:95:65:DA:01:3A:8B:15:92:10:52:4C:56:D8
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer: /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial: 1BD29E01E4F8C346E3D66B456A35AB0236EAC297
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number: 040D
Signing time: Sat 23 May 2026 18:40:21 +0000
Manifest this update: Sat 23 May 2026 18:35:21 +0000
Manifest next update: Sun 24 May 2026 22:16:21 +0000
Files and hashes: 1: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: paJ2NQ9DRq4kCrP3orNXj7GgnFYcC+nsR7wMP3Z9Wj8=)
2: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: /nXIP4z7stQqUbA4CtzR/0RQ1Bfe0cFNMuYXsa2oqtA=)
3: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: B/ne4K5tLESFKRfav/ymKsVXsaMu1WMVkkcjdTzABYA=)
4: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: JOM2RK2HIV3sZi+0HaFOEuSlTllD9yuwgdkYR/MQ8Kk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 24 May 2026 22:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d2:9e:01:e4:f8:c3:46:e3:d6:6b:45:6a:35:ab:02:36:ea:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Validity
Not Before: May 23 18:35:21 2026 GMT
Not After : May 24 22:16:21 2026 GMT
Subject: CN=B797C74731A34E9565DA013A8B159210524C56D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:a7:7b:da:a2:68:14:0a:2b:5a:1b:f8:ab:
39:78:7a:14:4b:1b:2a:13:d3:63:5c:64:cf:b3:cd:
f4:cc:10:86:68:2e:fe:38:47:08:49:2a:7f:ea:99:
bb:b7:b5:73:66:69:4e:61:d2:c5:c3:0a:88:a3:71:
ca:bd:a8:e0:f3:b5:3d:67:af:82:1d:fe:9e:4c:6a:
13:c2:ce:f0:0a:68:dd:0b:95:0d:81:07:82:b6:c0:
b9:fc:d9:e5:d1:95:4d:11:00:88:86:6e:04:de:a4:
20:18:d3:08:50:d4:f7:3d:64:1f:5f:41:1e:86:2a:
d9:a8:7f:91:c6:e4:41:f1:c9:cf:cb:a7:01:03:8c:
74:01:f0:4d:05:fc:37:13:e5:29:7d:5a:ef:57:d9:
08:67:52:4b:e7:2e:9f:1c:7d:1a:0a:25:c7:17:47:
c1:20:9f:db:54:ff:1f:b3:da:54:6e:87:10:60:05:
28:a4:52:76:9c:7d:04:da:11:cf:e5:6f:78:c6:dc:
a2:c8:0e:41:fc:9b:c5:32:c7:17:57:6a:8f:1e:cf:
f5:e8:bc:f6:d8:b6:64:15:6c:4a:91:ee:2b:b5:02:
64:5e:ea:8d:32:84:64:70:18:36:62:5d:94:88:18:
08:db:8d:f7:fb:f9:28:9a:0c:b8:57:e5:f0:db:0e:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:C7:47:31:A3:4E:95:65:DA:01:3A:8B:15:92:10:52:4C:56:D8
X509v3 Authority Key Identifier:
keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d4:a5:62:c6:4b:c0:11:17:cf:fa:f8:68:e1:8b:33:3f:62:
55:f5:13:29:a4:eb:f5:39:57:57:ab:6e:62:fa:5b:cd:28:72:
3d:bc:47:fe:0b:db:96:49:13:29:5c:49:14:ce:45:71:1b:2b:
c7:16:b9:5d:3e:49:12:d0:a6:1a:eb:8b:01:4a:ad:15:f2:09:
7f:86:dc:57:cc:81:c7:01:96:6c:c1:83:bb:32:42:c6:7c:1e:
8d:0d:e6:5c:4f:5e:ec:ab:78:fa:d2:5d:9f:5d:8e:09:f2:87:
ed:35:bc:e6:f3:6a:d6:a3:9e:ad:fd:d0:c2:76:72:62:49:de:
96:99:00:e7:b3:6b:27:e2:ee:68:36:75:0a:07:87:c5:23:e6:
e5:19:d7:22:69:9e:75:7f:66:27:00:29:9a:c7:13:bf:76:bf:
00:49:a2:48:c3:08:06:d9:ec:4d:12:52:d8:14:94:58:13:08:
70:7b:ce:5a:ab:b1:b9:3b:16:17:8c:6c:83:a9:74:a5:46:70:
6d:03:a9:1a:63:15:cf:8f:e0:4a:a2:7d:8a:df:ef:79:cf:90:
65:d8:bb:5b:e4:9c:82:9f:5f:29:3e:f2:4a:da:22:85:da:fa:
9f:37:c4:03:c8:31:63:24:ea:37:1e:3d:5d:e1:1b:d0:09:60:
be:cc:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:11:59 2026 by rpki-client