
$ rpki-client -vvvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json)
Hash identifier: lRFq3S9OCfBNgcSUCJD+9tLn6TjD6++hhsT4tIMC9x0=
Subject key identifier: FA:BA:4B:AF:17:62:2E:80:04:EE:A1:0D:BE:6B:5A:D7:AB:4E:E3:B9
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial: 4099DCAFCB0DA216E5E4F2ABAB7E872E6393C53D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
Manifest number: 04CD
Signing time: Fri 16 Oct 2026 20:17:29 +0000
Manifest this update: Fri 16 Oct 2026 20:12:29 +0000
Manifest next update: Sat 17 Oct 2026 21:26:29 +0000
Files and hashes: 1: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: 2u21MGTV0ZKz5Jp6CdwaoFcBc2mvcxSeibhtvBbE01I=)
2: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: GBaAzFRlNr60dDMU9mMnvIewDYoVbZR+WYEjePvhneI=)
3: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: cTqm/rvgz4qO/kqtsCcG4TxcjbMjdPsB9mUm0EvydEA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 21:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:99:dc:af:cb:0d:a2:16:e5:e4:f2:ab:ab:7e:87:2e:63:93:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Validity
Not Before: Oct 16 20:12:29 2026 GMT
Not After : Oct 17 21:26:29 2026 GMT
Subject: CN=FABA4BAF17622E8004EEA10DBE6B5AD7AB4EE3B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:a7:a3:6c:f0:56:45:f0:9c:79:70:93:d6:
a1:f8:c3:a3:e1:aa:09:12:8e:1c:70:26:b7:9e:cd:
e3:9d:d5:74:4f:1c:c1:be:d4:61:22:ff:6a:f5:2e:
8e:72:37:9b:b5:1a:22:46:7f:68:3f:26:e3:da:f6:
5d:8e:6b:81:66:ce:34:0a:1a:7d:31:7e:db:7e:e8:
4e:39:3f:1a:77:b1:14:ab:e7:90:f7:2d:1d:8e:cc:
e1:91:55:a1:cc:e4:67:c1:71:d7:dd:2b:78:44:c0:
74:4e:01:18:98:fc:82:75:65:da:ae:a7:57:85:83:
13:3b:4b:90:42:c1:bd:69:b6:28:88:12:37:da:fe:
79:e1:92:ca:24:4d:d0:b0:df:77:a2:53:2d:4a:ea:
12:7e:80:73:fd:77:1d:28:0c:94:c1:bd:b4:e5:62:
f7:07:71:36:08:b6:f0:f2:9e:4d:d1:5f:d4:cc:d2:
cf:23:d3:94:08:ba:b7:88:5c:7a:22:95:54:56:41:
7c:01:f6:b2:25:dd:80:22:f5:5c:b6:b0:78:dc:e4:
8f:06:06:ad:e4:55:8b:c0:24:31:6a:83:b8:39:d0:
32:68:91:78:78:0b:bb:28:93:55:63:f4:23:b5:84:
a9:9d:c2:5c:82:96:3c:87:e8:cc:5b:b0:b0:8e:f4:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:4B:AF:17:62:2E:80:04:EE:A1:0D:BE:6B:5A:D7:AB:4E:E3:B9
X509v3 Authority Key Identifier:
keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c8:b5:09:ee:8b:20:cb:36:93:5f:dc:15:91:1f:93:94:31:
42:81:ff:16:5c:62:a1:84:3d:d2:81:66:c5:08:1a:a9:ec:45:
c2:ea:8a:75:a2:16:17:ff:e5:d3:58:d5:51:98:0e:88:d1:1b:
65:bf:e4:89:ff:0c:7c:b7:32:cc:9b:c4:9b:27:72:14:85:38:
11:b6:02:bc:06:ce:56:e6:4c:f5:d7:e8:a4:36:fe:37:60:68:
f8:9c:75:44:a8:a4:79:58:8c:29:92:ae:f6:dd:40:7c:a2:90:
cb:6a:d3:52:8c:b5:d9:7e:a8:00:3d:52:49:19:70:d4:c9:53:
75:b1:f4:51:48:10:32:bd:c3:bf:94:f9:bb:28:1b:d5:9f:a5:
29:e9:71:70:01:c5:56:b5:5c:03:e5:0e:3a:07:16:bc:a0:6d:
96:29:70:8d:02:9c:5f:06:43:c6:35:64:10:96:e0:f2:d5:44:
7a:41:e4:fd:73:56:4e:bb:fe:8f:43:02:c2:90:f5:34:02:6a:
82:df:e8:88:1e:3d:d7:1a:93:10:c0:b5:6a:20:30:d4:e4:69:
30:37:a7:a3:84:2b:18:cc:13:11:90:53:d6:f9:a7:36:70:b1:
ae:3c:a9:30:3f:0e:f6:44:d4:da:bd:e6:8a:f3:55:e7:f5:81:
57:82:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 13:10:20 2026 by rpki-client