
$ rpki-client -vvvf rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/8D24341FE8A539B5EA7E32C11484C989A4040BD1.mft
File: 8D24341FE8A539B5EA7E32C11484C989A4040BD1.mft (raw, json)
Hash identifier: Smy27IXSxRdOvpKsunybXtP+1I6T04h66WrWcUNtVSo=
Subject key identifier: E3:0F:65:4C:99:92:AF:BB:A0:23:01:0C:26:92:95:73:B3:1B:4E:E9
Authority key identifier: 8D:24:34:1F:E8:A5:39:B5:EA:7E:32:C1:14:84:C9:89:A4:04:0B:D1
Certificate issuer: /CN=8D24341FE8A539B5EA7E32C11484C989A4040BD1
Certificate serial: 1E4C66069A09AB44261DF7D6F460C47CF6B6C18D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D24341FE8A539B5EA7E32C11484C989A4040BD1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/8D24341FE8A539B5EA7E32C11484C989A4040BD1.mft
Manifest number: 0123
Signing time: Wed 28 Oct 2026 07:10:43 +0000
Manifest this update: Wed 28 Oct 2026 07:05:43 +0000
Manifest next update: Thu 29 Oct 2026 10:29:43 +0000
Files and hashes: 1: 8D24341FE8A539B5EA7E32C11484C989A4040BD1.crl (hash: by9XXHev2uzK9poZ7ugXo8KVoSJS91Dna1HSVDsUZpI=)
2: 3133322e3235352e38342e302f32322d3234203d3e20323634343538.roa (hash: 7u+dTMVIapbqypNLT76638t8Cz5ouGOfdz10briGG/c=)
3: 323830343a316566633a3a2f33322d3634203d3e20323634343538.roa (hash: 8E07ntz71wCBi6hlvSBEIzspqxTtVYcuKdI/Ei21fvQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/8D24341FE8A539B5EA7E32C11484C989A4040BD1.crl
rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/8D24341FE8A539B5EA7E32C11484C989A4040BD1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D24341FE8A539B5EA7E32C11484C989A4040BD1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 10:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4c:66:06:9a:09:ab:44:26:1d:f7:d6:f4:60:c4:7c:f6:b6:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D24341FE8A539B5EA7E32C11484C989A4040BD1
Validity
Not Before: Oct 28 07:05:43 2026 GMT
Not After : Oct 29 10:29:43 2026 GMT
Subject: CN=E30F654C9992AFBBA023010C26929573B31B4EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:c9:43:cb:a5:e1:37:07:61:b0:4e:25:23:
e1:74:a9:32:3b:23:5a:1e:d7:9b:65:b0:f9:96:70:
66:af:c9:a5:75:eb:31:7b:52:52:0e:48:1b:d2:aa:
68:dc:7a:0b:56:15:12:db:03:d5:ac:01:60:95:66:
35:d8:f0:4a:8b:ad:58:70:a6:e0:b9:b9:eb:fa:88:
08:f7:6e:fd:04:21:61:15:e1:59:35:0f:77:15:16:
26:d3:cb:36:43:e7:eb:d5:56:e1:d1:73:54:1d:ea:
95:0e:0c:8d:97:dd:40:9d:5f:f3:ca:09:23:9f:eb:
c0:a9:0d:f3:d8:58:20:b0:f5:25:60:51:6e:6b:d2:
6b:40:55:92:eb:c7:82:fc:42:da:e1:b5:51:c2:3b:
17:4b:18:1d:53:38:a3:42:68:bf:2a:e7:c4:47:16:
f0:66:5d:37:b7:d1:c7:64:d1:00:f9:16:f3:e9:1c:
c1:5e:5b:b4:68:ca:b9:6b:94:95:40:b5:85:3c:83:
38:3f:a2:3b:2e:47:9a:ea:7b:6b:8a:1d:f0:b6:8d:
23:93:4a:9c:da:42:02:81:c2:46:56:16:e2:a0:1b:
87:d7:14:13:14:71:18:7d:43:9b:3f:33:8d:53:b2:
2a:be:36:b1:8f:0a:8d:32:4c:94:e0:ca:c7:e9:66:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:65:4C:99:92:AF:BB:A0:23:01:0C:26:92:95:73:B3:1B:4E:E9
X509v3 Authority Key Identifier:
keyid:8D:24:34:1F:E8:A5:39:B5:EA:7E:32:C1:14:84:C9:89:A4:04:0B:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/8D24341FE8A539B5EA7E32C11484C989A4040BD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D24341FE8A539B5EA7E32C11484C989A4040BD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/8D24341FE8A539B5EA7E32C11484C989A4040BD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:08:82:e0:6b:dc:06:e5:ab:b8:40:98:99:07:a3:b8:7f:2b:
ed:1b:8e:eb:64:d6:bd:6f:a3:3a:88:00:1b:32:5a:01:e0:97:
db:da:bc:ad:22:38:3d:94:11:01:74:72:08:47:27:f0:bd:2d:
d6:33:03:65:c6:3c:8c:27:6b:0a:b9:87:f7:70:ce:9e:23:29:
a0:56:75:6e:64:ed:49:0f:4e:98:34:3d:5b:3d:65:69:3c:c8:
9d:36:fb:c2:60:25:79:c4:3f:9a:fb:66:fa:7f:cc:ec:64:e8:
34:dd:4e:b7:78:cd:9b:c8:66:c7:d5:9b:34:b6:b1:57:c7:1c:
bd:9c:74:ac:ef:dc:ec:6c:7e:95:3a:14:12:01:82:95:8c:57:
16:75:24:db:63:3b:c2:89:ef:26:2d:99:b8:07:92:f5:20:55:
3b:8e:a3:1f:48:e1:0b:b2:34:77:97:a3:7d:03:53:8e:f2:bc:
dc:8a:b4:f5:9c:9f:ce:95:98:64:b2:b1:c9:70:34:82:35:8e:
0d:9c:94:39:8b:0c:9f:58:23:ac:6a:f6:6a:85:62:ff:24:66:
35:81:1c:5c:ac:f3:47:24:e4:0e:08:d3:18:f0:4d:61:09:55:
35:80:9c:90:b6:03:fb:51:9d:88:97:15:d8:c5:a1:0c:98:64:
9a:02:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:22:45 2026 by rpki-client