
$ rpki-client -vvvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
File: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft (raw, json)
Hash identifier: DxEzpJLAx9oNMFKbsmxzC4y+DB/oHnRWqtYR5PQ8rC4=
Subject key identifier: A8:D1:F0:9D:10:BD:2F:DD:6C:93:FC:B5:94:B7:58:E4:36:EC:B5:0C
Authority key identifier: 42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88
Certificate issuer: /CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88
Certificate serial: 3728F684DC1E1AFF32A73CFCD45CB1FAF82F946F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
Manifest number: 9E
Signing time: Thu 15 Oct 2026 07:31:36 +0000
Manifest this update: Thu 15 Oct 2026 07:26:36 +0000
Manifest next update: Fri 16 Oct 2026 09:48:36 +0000
Files and hashes: 1: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: S+1YM580MYl2/Ez26cZdvbOuNQSh+xfPKBssmmPx6uY=)
2: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: 8bTI6STV9myie2O7jjWabFesGEs4DvpRnx5NUft7YyM=)
3: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl (hash: 1EKzz7tW2SrbYZd3gNAUwSuVSZd3CsR7c0/3HKXL83s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl
rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 09:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:28:f6:84:dc:1e:1a:ff:32:a7:3c:fc:d4:5c:b1:fa:f8:2f:94:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88
Validity
Not Before: Oct 15 07:26:36 2026 GMT
Not After : Oct 16 09:48:36 2026 GMT
Subject: CN=A8D1F09D10BD2FDD6C93FCB594B758E436ECB50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:49:c3:19:ca:dc:88:b5:02:d1:80:4d:40:
39:1a:6b:ff:4f:50:b0:39:42:b3:3b:01:8c:96:e3:
dc:19:a7:f5:71:22:e3:05:4c:95:be:d6:71:95:94:
c5:2a:74:c3:1b:9b:d6:c0:83:3d:84:57:ca:a2:97:
ac:1d:09:6b:59:c0:ea:1f:fc:70:54:35:3b:ef:2b:
0f:94:72:a7:2b:c2:2f:b0:e6:72:dc:8e:1d:88:64:
48:62:6c:ca:73:00:b7:a7:c8:c3:81:89:cd:6d:3b:
b9:ac:fa:d5:f3:a9:2d:eb:ff:bc:d3:fb:04:cf:94:
b4:d5:7a:08:0f:00:46:3c:93:ee:48:08:4b:b3:cd:
62:5d:b2:e1:de:8f:7d:eb:72:db:57:90:47:70:ab:
d6:4e:f7:c2:dc:a0:32:99:96:50:84:f4:b4:d3:df:
c3:62:0b:af:6a:a0:eb:9b:ad:5e:65:ab:ff:9c:35:
b4:14:27:2b:db:3c:d8:4e:ce:e4:64:7b:06:d5:04:
17:cf:60:a6:cd:ba:db:a2:c6:98:ae:7e:89:11:e9:
9b:ee:68:ec:8d:5f:0e:0b:5f:7f:9d:71:a6:b0:33:
47:5c:46:c4:dc:2b:58:af:99:20:b6:78:9d:82:22:
15:67:70:ac:36:22:18:83:61:5e:01:d8:c9:93:f3:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:F0:9D:10:BD:2F:DD:6C:93:FC:B5:94:B7:58:E4:36:EC:B5:0C
X509v3 Authority Key Identifier:
keyid:42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:4f:ef:4f:37:89:3c:00:a6:9b:e8:b4:7a:70:af:3d:16:
d9:7e:b5:0e:39:56:c6:e0:b3:0a:e9:dc:9a:71:ba:c1:b6:4a:
05:19:04:73:47:25:98:bb:57:ac:c5:79:19:1f:6a:26:16:35:
43:b5:42:af:98:8d:3b:6e:82:f9:53:e5:4f:9c:f9:0c:90:58:
88:7e:ed:8e:57:b6:b7:6f:2a:2d:28:a8:d5:81:5e:a2:37:51:
c1:55:df:b1:30:6d:0a:05:70:47:9d:f1:57:9b:2f:19:c7:16:
64:20:32:45:20:d1:ab:18:4b:ed:1e:9b:f3:5b:4f:b4:7b:4b:
f7:ec:42:ea:64:38:b8:63:c7:b4:7e:95:52:68:68:7f:6e:f1:
e9:86:71:c8:04:ee:c8:62:4c:98:d5:71:44:01:4c:b9:02:fd:
03:db:d3:c0:d2:89:3d:4d:b9:36:83:3a:b9:fd:2a:58:07:80:
32:d1:45:3b:f0:bc:b2:16:18:7f:6d:98:ac:1b:38:fd:e9:ba:
c7:d0:7c:85:c4:ed:12:36:8c:cd:6a:b8:1a:c1:5b:c4:5d:a3:
12:2c:68:91:64:ba:65:7c:fd:73:87:8f:6b:db:fc:59:b0:be:
eb:39:7e:9d:21:e4:b7:48:e3:4a:d3:7b:4e:a6:aa:ff:80:73:
43:56:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:18:46 2026 by rpki-client