
$ rpki-client -vvvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
File: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft (raw, json)
Hash identifier: jOFcFs8OIErXFxZqr/NZhuLmcY1Ug2FsCwns64SWOZE=
Subject key identifier: AE:9C:DB:3A:CF:63:E9:46:5D:0D:D0:8D:70:B1:7C:F1:6F:0C:7D:2A
Authority key identifier: C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98
Certificate issuer: /CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
Certificate serial: 1D2FA05A65B77BF9C8CF34FCB390C3AA84A98D7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
Manifest number: 03DA
Signing time: Sun 01 Nov 2026 18:32:09 +0000
Manifest this update: Sun 01 Nov 2026 18:27:09 +0000
Manifest next update: Mon 02 Nov 2026 21:33:09 +0000
Files and hashes: 1: C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl (hash: T1MjnNylUS4fD20LNFQhmh8BgBx5Ijj7ozPGVNpOD0w=)
2: 34352e372e3230302e302f32322d3234203d3e20323636363134.roa (hash: rsDGK4bujBN1Wc8L27NWJ8Wckkst/+9+wTfbc2eZH74=)
3: 323830343a336561633a3a2f33322d3336203d3e20323636363134.roa (hash: dvgd/v3n/3vz77RbCTb7ZxJ6d7Vhc0xjeathfDMO4qU=)
4: 34352e3136392e3133322e302f32322d3234203d3e20323636363134.roa (hash: UQvGFH1IMhwnWKwwC7mxHmBqXgT32ohJ/cgdObKau7M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl
rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 21:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2f:a0:5a:65:b7:7b:f9:c8:cf:34:fc:b3:90:c3:aa:84:a9:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498
Validity
Not Before: Nov 1 18:27:09 2026 GMT
Not After : Nov 2 21:33:09 2026 GMT
Subject: CN=AE9CDB3ACF63E9465D0DD08D70B17CF16F0C7D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:44:6b:5c:27:47:5b:8c:a2:ad:18:ec:68:
51:cb:f8:99:0c:a8:f3:e2:50:95:83:6b:01:65:b2:
0e:b7:c7:2d:ea:6d:1c:a9:37:e7:e2:19:dd:6c:1b:
ed:d1:24:82:89:b2:b8:12:7e:d9:f0:44:50:ea:76:
9d:c0:b5:d4:5b:8c:dd:81:1b:ce:a5:c7:11:fb:b0:
61:88:07:16:11:cf:9a:a3:49:6a:5c:59:0a:1a:7a:
e6:9a:ba:6c:f6:ad:7d:46:3a:a1:71:15:cf:3a:36:
c8:99:ea:f8:15:46:1b:14:c8:59:da:50:00:3f:30:
14:9a:94:d4:07:f5:f3:a7:f2:a1:d7:f6:ed:cd:f3:
43:d7:6b:4b:bf:08:10:b2:db:1c:a7:a1:8a:2f:e3:
71:75:a7:52:40:ae:ef:36:99:46:32:3b:df:fb:74:
c0:04:31:58:67:3a:b7:10:80:82:b4:e5:53:3c:70:
27:49:ec:3e:4b:00:b6:75:b1:f8:7b:22:f2:b1:03:
da:69:a4:50:2c:63:ca:77:d1:e8:ee:4b:b0:34:7d:
dd:d4:d4:ab:40:d8:90:f3:c3:33:3a:5b:e4:3b:4f:
0d:1c:ac:d4:9c:10:a8:ef:e0:89:1e:fa:2e:15:5c:
45:1b:55:cd:98:d7:92:a9:17:b3:df:83:10:87:bd:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:DB:3A:CF:63:E9:46:5D:0D:D0:8D:70:B1:7C:F1:6F:0C:7D:2A
X509v3 Authority Key Identifier:
keyid:C7:D8:F4:A5:EC:FE:5B:25:53:F6:AA:F2:A1:04:DD:C9:7F:20:54:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/C7D8F4A5ECFE5B2553F6AAF2A104DDC97F205498.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:de:18:3e:9d:28:6d:53:e6:72:2b:5b:7c:ab:0b:d7:71:8c:
35:e8:28:47:46:c7:6e:80:f2:f1:dd:d5:ef:b6:f9:34:f1:d8:
6a:73:d4:89:23:2c:69:4b:a1:88:4b:9a:b7:54:1b:85:37:a8:
72:21:8f:f2:8b:da:f9:76:6f:b0:b9:b2:6f:08:3f:71:c2:38:
6e:2f:55:cf:5e:43:8d:d1:69:62:48:ea:58:4e:85:53:53:35:
f7:f5:f3:d4:5d:51:0a:55:df:06:c1:3c:21:66:ca:88:91:65:
a1:59:67:a5:51:47:9a:aa:39:31:dc:09:95:b9:0f:a6:ad:65:
7a:b9:02:56:1e:bf:22:6d:75:2c:bd:a5:ce:1a:34:91:1e:ff:
f5:48:54:e1:46:b0:be:18:f0:ea:39:50:13:21:38:0f:fd:2a:
7d:78:f0:2e:85:50:e3:7c:92:08:90:07:78:12:d6:eb:21:0c:
ab:2b:f3:0f:fc:e4:1b:a2:7a:a1:17:c4:03:08:16:3c:82:86:
39:5d:d4:0a:f4:ee:cb:ad:b1:6b:f1:35:6e:3d:d0:e5:d5:80:
89:44:04:09:5b:00:0f:03:1d:22:bb:30:2e:36:cd:fd:d4:2a:
cb:c8:d2:42:f3:b5:5d:bf:fe:6c:62:c4:ce:c3:00:85:36:4c:
ca:87:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:45:44 2026 by rpki-client