
$ rpki-client -vvvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json)
Hash identifier: fSBnr5YGgJbAcGw28+Rld5xH+mlukXQI20+Kar3bDzM=
Subject key identifier: 54:DC:8A:3E:2F:4B:E7:C9:F7:E7:4B:F3:A0:DE:7F:DD:73:8C:3A:B1
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial: 1FEB104EEDCF5BDBE81C2BA756541CF086378F5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
Manifest number: 0493
Signing time: Sun 11 Oct 2026 07:50:03 +0000
Manifest this update: Sun 11 Oct 2026 07:45:03 +0000
Manifest next update: Mon 12 Oct 2026 10:14:03 +0000
Files and hashes: 1: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=)
2: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=)
3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: I5xM5L+9m+6USldoRicR/Sg0yGHAdT2P43oQJVRmwAc=)
4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 10:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:eb:10:4e:ed:cf:5b:db:e8:1c:2b:a7:56:54:1c:f0:86:37:8f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Validity
Not Before: Oct 11 07:45:03 2026 GMT
Not After : Oct 12 10:14:03 2026 GMT
Subject: CN=54DC8A3E2F4BE7C9F7E74BF3A0DE7FDD738C3AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:02:9c:61:a8:74:02:1c:e1:e7:cc:c3:32:
28:db:99:e5:6f:1b:fe:9e:20:5e:2a:5b:28:7c:2f:
1c:33:5b:d2:3a:10:6d:a5:8b:a1:9d:ed:86:1b:5a:
ef:4e:3d:0b:df:1b:f5:ae:1b:6f:3f:db:a7:f8:a3:
f0:1e:4d:5a:4e:36:34:82:d3:fd:b7:26:d0:c5:c8:
ce:d3:4f:09:79:a2:dc:51:49:7a:bd:0d:bf:df:9e:
78:52:e5:ff:35:ba:b1:a5:80:09:bd:75:7a:7f:c7:
98:ad:24:37:ef:e6:b4:2f:cf:fc:e0:6a:ba:a3:e7:
4b:77:f9:60:1f:a9:41:3a:40:71:e9:bb:ee:9f:0e:
ca:3d:98:36:80:1b:3a:4b:55:68:8c:3f:fb:fc:70:
74:f6:24:c8:c2:a2:6e:26:ef:ec:79:35:d6:df:4a:
26:74:18:42:f9:7a:3d:f4:92:d1:0f:54:39:de:cf:
16:89:56:83:0a:14:09:b0:bd:a0:38:48:3d:da:8f:
dd:6d:96:b3:db:f1:31:90:7a:43:cf:a9:c4:d3:ab:
51:57:1f:35:da:10:6a:af:71:0a:42:af:86:2a:08:
37:7f:53:af:df:b4:2b:ac:5f:f1:a0:93:7f:9e:3d:
28:44:08:26:ab:08:b1:46:f1:0a:e6:28:21:15:9e:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:8A:3E:2F:4B:E7:C9:F7:E7:4B:F3:A0:DE:7F:DD:73:8C:3A:B1
X509v3 Authority Key Identifier:
keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5d:a2:24:00:5b:d3:61:81:c5:e7:d8:6d:a3:7c:72:be:92:
2e:02:8f:e4:b9:b8:54:74:89:44:08:d9:78:0f:a4:9f:9a:74:
1a:c2:46:3e:60:9a:4f:09:31:57:c5:75:ef:9f:be:1e:f6:89:
50:d1:04:42:f1:12:f9:5d:ff:63:43:c3:02:51:3c:7c:75:d2:
be:93:f5:48:23:61:d4:6b:02:53:d1:70:ad:57:5c:fa:28:d0:
60:78:ba:63:66:13:68:a5:64:e9:d6:c5:39:ea:04:3f:33:de:
72:f1:00:2f:7d:64:7d:fa:8c:22:81:b0:f8:93:f7:0c:38:92:
ee:a4:e7:e3:f7:24:33:8c:4f:e2:89:27:a9:b8:70:a4:aa:4a:
46:c5:25:f6:76:3f:3e:c8:2c:08:a1:9f:72:66:f9:69:dc:3d:
52:75:74:be:38:b3:14:92:15:a8:01:06:5b:96:46:65:2a:68:
d6:d8:a7:eb:12:ad:03:89:b0:a2:65:52:2b:89:12:a1:a5:e5:
8e:9b:c1:de:69:96:e0:72:8d:c6:07:c8:ca:0b:af:09:23:d4:
2e:54:11:98:b8:26:6e:4d:1b:39:9a:11:79:c1:41:13:02:7b:
e1:ba:dd:26:ff:71:ae:ee:96:9a:3b:d9:6e:cc:8c:6e:09:d6:
4d:ac:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:30:07 2026 by rpki-client