
$ rpki-client -vvvf rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.mft
File: C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.mft (raw, json)
Hash identifier: WRjADrNWPQ7iG835/MwQyexEa8k0g1zmpZSVY/02M4M=
Subject key identifier: 0D:41:24:77:41:FB:01:AC:B0:F8:DE:D9:48:BE:7D:23:10:D6:57:61
Authority key identifier: C8:8E:57:A2:66:D4:37:8A:DF:71:5A:BA:71:E3:86:6B:BC:D6:B2:E9
Certificate issuer: /CN=C88E57A266D4378ADF715ABA71E3866BBCD6B2E9
Certificate serial: 25D7E0E5BD3C40FEEB4F54E2EB210765E7EDDF8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.mft
Manifest number: DA
Signing time: Thu 15 Oct 2026 00:06:26 +0000
Manifest this update: Thu 15 Oct 2026 00:01:26 +0000
Manifest next update: Fri 16 Oct 2026 01:08:26 +0000
Files and hashes: 1: C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.crl (hash: xFWJCw1rt3MrW+KuoP97l8U/+vXQAK8Se2eoLA8sSaI=)
2: 3133322e3235352e3130382e302f32322d3234203d3e20323634343737.roa (hash: DCzEwqYYByGemZ8Qs3//9HOncWhij2IMuc/LVuOv1t0=)
3: 323830343a323033343a3a2f33322d3438203d3e20323634343737.roa (hash: i/lAEwv6rIc7q0UsG+3BXYf8xQS3Tt8nbJeAitfWraU=)
4: 3136382e3232372e3136342e302f32322d3234203d3e20323634343737.roa (hash: xMVuHy9P6QZuuXjQO8bRH3tBawHhe31hpdG+5kTU4O4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.crl
rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 01:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d7:e0:e5:bd:3c:40:fe:eb:4f:54:e2:eb:21:07:65:e7:ed:df:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C88E57A266D4378ADF715ABA71E3866BBCD6B2E9
Validity
Not Before: Oct 15 00:01:26 2026 GMT
Not After : Oct 16 01:08:26 2026 GMT
Subject: CN=0D41247741FB01ACB0F8DED948BE7D2310D65761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d5:24:6e:20:c2:4f:4e:8f:b4:7c:46:9e:55:
65:bc:24:a8:f6:d7:df:7e:c9:cf:ae:f9:48:58:ab:
3b:55:ab:5c:5a:c3:28:19:38:cb:d9:b8:f1:2a:91:
eb:2a:60:80:3a:81:03:2c:6a:3e:bb:db:98:0b:80:
da:67:56:83:9c:20:9b:f7:6a:67:12:99:99:f3:9e:
b7:01:f6:15:3f:90:7f:92:b0:da:76:dc:3c:c1:f1:
97:b7:7d:32:6d:33:8a:2b:66:f2:62:45:dd:ba:7a:
34:1f:d5:84:34:2a:a7:03:5a:25:43:1a:14:b7:0a:
d9:98:f4:41:ae:9f:09:e2:57:9f:9d:fd:fb:83:8c:
e5:10:2a:e9:4e:63:ec:77:9b:c7:c4:22:cf:8e:e5:
0d:7b:b3:29:b6:a1:1e:e0:a4:34:19:54:ee:a1:21:
40:95:ee:66:8a:95:80:b1:01:c9:f0:73:07:47:25:
a5:aa:93:35:15:c8:3c:c7:17:cb:3c:87:33:52:9a:
3e:c5:8e:28:4d:fd:7f:75:71:e3:fe:b5:59:0b:a7:
96:46:b1:a3:67:41:14:cb:7a:72:58:8d:1d:cd:5e:
d6:70:cf:bf:ae:c1:36:f6:41:56:de:fc:c3:6f:99:
e9:d6:7d:e9:22:6b:21:e6:03:d0:18:1a:3b:52:47:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:24:77:41:FB:01:AC:B0:F8:DE:D9:48:BE:7D:23:10:D6:57:61
X509v3 Authority Key Identifier:
keyid:C8:8E:57:A2:66:D4:37:8A:DF:71:5A:BA:71:E3:86:6B:BC:D6:B2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d7:b3:52:80:b3:ab:b5:34:ff:bd:e9:3d:2e:dd:79:83:d3:
05:dc:8f:28:42:62:b5:37:d8:38:52:14:da:c7:b5:bd:6a:15:
49:54:18:a1:9e:81:0d:1f:d9:3b:38:22:54:43:cf:50:11:48:
28:91:e8:43:53:1d:28:c4:6d:b5:17:b9:92:74:fa:44:82:f8:
0a:de:26:fd:ef:bf:8e:b7:dc:3a:ea:6b:4b:75:7b:3a:7b:18:
47:48:94:a8:ea:95:af:91:71:2c:6c:58:7b:64:8c:21:fd:09:
de:fd:eb:b7:60:30:b2:ec:54:dd:27:23:97:95:e7:b0:7b:75:
30:3f:87:11:cc:d4:55:76:3c:22:3a:73:39:61:5d:5c:17:a4:
b6:1c:24:d2:65:b5:2c:5e:6e:35:e9:63:f6:70:c8:ef:d6:3e:
93:8d:94:81:36:ef:70:ca:6d:3d:4a:4a:a7:04:bb:9f:99:80:
75:ac:81:99:92:58:33:8d:4d:ae:cb:31:46:18:d0:fb:39:87:
5a:52:f8:54:e0:56:af:f2:90:f1:61:de:88:4c:34:28:90:55:
26:77:97:75:c3:4c:0e:53:94:06:c7:85:27:cf:5f:41:ef:fc:
a7:89:c2:88:35:b5:31:2f:e8:dd:f4:8e:c4:1a:71:77:93:5b:
92:ab:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:25:23 2026 by rpki-client