
$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
File: 8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft (raw, json)
Hash identifier: 5wap24CrJxrYRS5PlMirzsWE4r00zMX1SQRReD7SJ3U=
Subject key identifier: 40:1C:2F:24:35:7B:87:87:D9:28:74:E4:C0:4A:82:74:91:7C:A7:12
Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Certificate issuer: /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Certificate serial: 298CBD4B7013EC73670B751FCC0F3313038903AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
Manifest number: 0289
Signing time: Fri 17 Apr 2026 02:12:17 +0000
Manifest this update: Fri 17 Apr 2026 02:07:17 +0000
Manifest next update: Sat 18 Apr 2026 05:47:17 +0000
Files and hashes: 1: 3137372e38362e37362e302f32322d3332203d3e203532353631.roa (hash: ongX2myxLBi2kKz8f9BkQ8SyVik0OXddc3I/+qbSRaY=)
2: 3138362e3232372e3132302e302f32322d3332203d3e203532353631.roa (hash: 0Qps8lTeSMgPQLfJttu2yKlzv4oiNaigSM9UbRc5TRo=)
3: 8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl (hash: qkLiuh8+GC7SIQ/BmpRlYa5YCm7AytWdUceZqcaAPeo=)
4: 323830343a6538633a3a2f33322d313238203d3e203532353631.roa (hash: Yw8VRLlrkk2fyMM+nbIJACzvRGfnfFODvlWJkSSAP3o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 05:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8c:bd:4b:70:13:ec:73:67:0b:75:1f:cc:0f:33:13:03:89:03:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Validity
Not Before: Apr 17 02:07:17 2026 GMT
Not After : Apr 18 05:47:17 2026 GMT
Subject: CN=401C2F24357B8787D92874E4C04A8274917CA712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:c5:a0:a2:1a:16:19:93:b6:87:c4:8b:52:
28:5e:6b:2d:61:d7:0f:cd:9c:74:50:33:46:7a:59:
31:9d:fe:38:b6:05:9d:4e:32:e3:80:df:3e:c9:83:
f9:8b:33:4c:1f:99:3c:22:d2:14:d3:1b:dc:68:84:
96:3d:d3:01:bf:a0:15:0f:76:6d:de:4c:4f:9d:a6:
e4:5c:00:75:57:30:23:ad:11:e5:aa:54:2b:24:dd:
00:14:af:b4:a7:32:62:15:05:11:62:6b:e3:0e:38:
3a:a1:39:41:c3:a6:66:35:d2:a6:8a:ed:87:b5:fd:
2b:3a:ac:73:8a:a4:d5:f9:3b:b5:97:9c:ff:46:ac:
10:b7:a5:15:0a:ad:d9:b1:99:1e:2b:93:45:30:b7:
f3:14:aa:3f:49:ff:b2:d1:cf:e7:1b:4b:7a:33:8e:
49:fa:ff:93:65:7e:6e:a3:9d:ff:87:03:2e:de:e2:
18:03:1a:71:9d:76:3d:96:db:2d:84:58:54:cd:cb:
67:01:89:f9:0c:4c:b5:1b:c8:7d:5d:af:ab:3f:0c:
c8:e8:6a:dd:2b:f6:d7:6a:8a:dd:de:ca:26:ce:66:
cc:b4:c5:cb:0b:44:f7:38:3a:46:90:80:69:6c:a6:
09:b2:35:47:72:64:f7:dd:7d:37:51:38:5e:7f:fa:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1C:2F:24:35:7B:87:87:D9:28:74:E4:C0:4A:82:74:91:7C:A7:12
X509v3 Authority Key Identifier:
keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:31:ed:02:2b:d2:9e:8c:df:95:3f:dd:49:2d:af:a5:d9:a0:
9a:e0:ba:04:c7:f2:89:43:6a:c0:2a:66:60:68:08:c7:9b:d7:
23:5d:ff:91:74:2d:1f:24:cb:e9:40:8c:9e:3a:2a:99:12:55:
be:45:76:00:68:a5:f3:41:06:da:1c:8a:fb:5a:72:71:7f:12:
1e:32:74:73:53:de:95:93:e9:d1:ef:bb:40:91:1c:5c:18:78:
1e:89:02:1d:a0:52:34:7b:aa:40:84:30:f8:71:7e:13:de:7e:
7a:74:dc:86:7f:66:a6:b2:65:b8:e2:51:6f:61:f7:ab:5e:d8:
2d:87:85:55:d7:43:b8:5b:9e:43:fa:21:1f:66:36:b6:f5:fc:
95:4e:21:b9:96:f1:91:4e:a5:a2:fa:47:44:1b:c6:7c:14:55:
c6:f3:6d:01:da:1f:04:24:14:e8:30:66:a4:38:c4:6d:06:b0:
d2:5f:7d:6e:4c:f9:00:07:ed:de:43:51:04:29:42:57:21:1d:
57:f3:20:6c:26:4e:1a:e7:6f:3f:13:6d:3c:09:61:7e:6a:53:
9a:11:68:0f:8e:03:37:b9:7b:7c:89:4a:72:ef:4b:6d:f7:52:
86:80:dc:bb:fa:fd:20:95:8a:8f:29:6a:f2:5b:19:52:d2:b2:
b8:5f:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:09:03 2026 by rpki-client