
$ rpki-client -vvvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
File: 9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft (raw, json)
Hash identifier: xyq/yenKYUp+cnz6eiq2G7x/3KXRO0/0s8tCPrXB9GI=
Subject key identifier: BC:7F:08:C9:43:12:17:04:EB:15:E7:03:D1:7B:9D:F5:D1:7E:C8:77
Authority key identifier: 9A:FF:E4:1F:94:28:4A:C5:68:8E:8D:87:74:ED:A7:CE:81:8E:4D:89
Certificate issuer: /CN=9AFFE41F94284AC5688E8D8774EDA7CE818E4D89
Certificate serial: 461A926C5BF62E6E00B1F0E9F817B4C792A03114
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
Manifest number: E0
Signing time: Thu 29 Oct 2026 12:37:03 +0000
Manifest this update: Thu 29 Oct 2026 12:32:03 +0000
Manifest next update: Fri 30 Oct 2026 16:36:03 +0000
Files and hashes: 1: 9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl (hash: NmJynjLIuiZ6/D6AYLcu1O62BKsG/qRRub2wExgGu6Q=)
2: 3137392e34382e3138342e302f32322d3332203d3e20323731303935.roa (hash: 2lO7vjfyDEWbfSNoSg6jqpC8X3B6myT4sWIIw2LtugM=)
3: 323830343a373633303a3a2f33322d313238203d3e20323731303935.roa (hash: uMbIskNOBOpS9ow1hpatypkHDuCnFp6jOVXYaHmtZmQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl
rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 16:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1a:92:6c:5b:f6:2e:6e:00:b1:f0:e9:f8:17:b4:c7:92:a0:31:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFFE41F94284AC5688E8D8774EDA7CE818E4D89
Validity
Not Before: Oct 29 12:32:03 2026 GMT
Not After : Oct 30 16:36:03 2026 GMT
Subject: CN=BC7F08C943121704EB15E703D17B9DF5D17EC877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:93:b2:8b:16:eb:37:f4:c2:53:0b:09:0c:
99:d6:2b:ac:7b:6b:5e:99:17:f2:ae:c7:6e:84:27:
52:76:45:74:61:90:5f:70:9b:d9:e9:b8:61:d7:57:
f6:05:d6:e9:e7:9f:59:72:b3:0b:c3:50:d0:af:8d:
b5:7c:59:73:26:ca:6e:b5:4b:1c:60:22:03:d5:36:
5d:5f:e7:f4:83:d7:dc:d1:4e:94:8e:e4:e1:f2:57:
be:79:2a:24:3a:fc:4c:5f:eb:a3:2c:0c:9d:c7:87:
d9:0d:f3:59:aa:9f:91:57:61:1e:a9:f8:f1:85:7f:
df:91:7e:31:f9:e9:9c:be:00:c7:95:31:85:6b:d6:
c5:01:a1:c3:6d:6d:f4:e8:6a:43:79:17:78:bb:24:
3d:65:d7:db:db:66:36:c2:2a:65:3e:78:7c:c0:e0:
87:10:e8:ef:65:18:e8:d0:07:44:1f:ac:68:fc:26:
5d:9a:07:77:29:f9:5f:4b:c5:b7:d8:47:39:a6:c8:
67:7f:56:d3:be:4c:bf:ed:ae:75:25:6d:43:e5:61:
86:3f:9b:db:c1:40:a2:99:ba:e3:a6:aa:e3:6e:be:
d0:16:8d:ee:de:85:c8:a4:22:54:30:0e:99:dc:cb:
e5:8d:09:af:2c:5a:be:0b:33:72:27:74:09:da:4f:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:08:C9:43:12:17:04:EB:15:E7:03:D1:7B:9D:F5:D1:7E:C8:77
X509v3 Authority Key Identifier:
keyid:9A:FF:E4:1F:94:28:4A:C5:68:8E:8D:87:74:ED:A7:CE:81:8E:4D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ab:31:c9:a5:9c:93:a7:ca:99:d1:66:59:6d:99:62:3f:2e:
38:26:2e:63:d0:b4:7c:1e:45:98:d7:60:27:cb:0e:ed:18:79:
29:d5:f7:55:9b:9d:f4:74:e2:6b:f6:14:19:06:32:34:1a:92:
e8:75:32:30:15:0d:fa:00:5b:ba:e0:32:98:69:82:a0:83:eb:
67:11:17:b8:db:a2:55:54:bf:ae:57:7f:d4:12:09:03:e1:40:
7f:28:a6:a0:f0:d3:88:bb:92:7a:08:81:b4:74:23:5c:cf:3f:
a0:8e:46:f0:9e:50:52:24:9a:f3:77:28:66:13:00:73:7c:ba:
82:64:0a:e2:e1:a3:ca:93:da:82:a7:6e:35:f2:06:fd:3d:46:
eb:8e:b8:64:cb:96:c9:92:86:e4:2e:91:2b:de:c4:0d:45:5a:
cd:e5:ec:ed:46:30:1c:fb:f1:15:3b:5e:ee:ad:25:94:40:fa:
ab:b2:56:de:88:f6:eb:44:5c:db:ed:4f:b8:46:9f:ef:78:61:
dd:8a:6c:0b:62:c9:bb:4d:1f:d8:b1:0c:ea:cb:27:11:fa:d9:
d3:65:c3:b1:6e:cc:ab:b1:cb:e2:a1:ca:1d:23:46:31:48:d9:
8f:a3:9b:5e:60:69:b4:42:74:7c:2f:3f:2a:4e:3b:5d:1b:cc:
0d:3d:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:34:24 2026 by rpki-client