
$ rpki-client -vvvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json)
Hash identifier: yrErEZX/wLE3UaIRyMEz2+ibLZ7fDoZtLEYsPYb3mEU=
Subject key identifier: 9E:10:04:13:82:F2:A3:86:8A:94:D3:9E:DC:C3:11:85:29:D2:E6:04
Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Certificate serial: 5C53AFA94B380C58C903268D24C39D72EB3C8A82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
Manifest number: 0208
Signing time: Wed 28 Oct 2026 16:00:03 +0000
Manifest this update: Wed 28 Oct 2026 15:55:03 +0000
Manifest next update: Thu 29 Oct 2026 19:27:03 +0000
Files and hashes: 1: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: sKZPDsOcUsCeLUJ0OI1XHp8STBCRQBl6/YJSmD7tD14=)
2: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: UCikTFZUwcknvwvt2MvNrXbgbLL9x1+eI3JFx6wpLb0=)
3: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: CxjIdvR9XVVxAD95VvEH3M6umc6ahnjAOyd7IDS4AXk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 19:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:53:af:a9:4b:38:0c:58:c9:03:26:8d:24:c3:9d:72:eb:3c:8a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Validity
Not Before: Oct 28 15:55:03 2026 GMT
Not After : Oct 29 19:27:03 2026 GMT
Subject: CN=9E10041382F2A3868A94D39EDCC3118529D2E604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:ce:ba:2e:4f:33:ac:66:f9:8d:29:f1:f3:
8d:ae:9f:af:61:f1:b9:ba:0d:47:fc:da:a9:81:e3:
b3:ee:92:d6:80:26:8a:38:b5:94:f5:55:da:43:ce:
03:4d:af:9a:e1:35:4d:4f:16:d6:5e:26:80:51:62:
97:82:f9:bb:67:80:d0:de:2e:8c:0f:02:16:ba:19:
df:04:70:87:e3:d1:30:65:3b:20:37:f2:6a:42:70:
b1:af:a8:81:33:d6:3a:ee:d4:d9:5f:97:b7:67:79:
a6:7f:17:f2:9c:5d:3d:43:22:28:e4:5c:bb:00:96:
0d:ac:99:5d:84:7c:9c:1d:39:cc:48:10:13:02:2f:
8f:0d:52:25:a9:46:31:72:b3:8a:3a:1a:1a:00:ce:
d9:e0:fa:4b:03:98:e0:d1:9a:c1:01:88:37:44:e8:
53:51:62:4a:61:55:8a:02:3d:b0:75:f0:c4:d8:53:
65:a7:50:d8:d9:da:08:4a:de:2d:0c:ad:9b:32:79:
1d:76:32:2d:5b:c2:c3:1a:97:a3:5b:b6:3a:15:b4:
16:e2:74:69:9e:e7:a2:8b:05:04:30:43:91:8b:78:
2d:d4:70:c3:92:e9:59:00:53:0b:90:83:84:d5:21:
2f:42:21:66:a3:6f:0b:72:e9:8e:8b:14:3b:62:f4:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:10:04:13:82:F2:A3:86:8A:94:D3:9E:DC:C3:11:85:29:D2:E6:04
X509v3 Authority Key Identifier:
keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:cc:b9:bb:81:65:3d:ac:5f:d0:d7:07:cb:e0:56:99:09:
35:75:6c:52:3d:81:84:45:6f:02:aa:44:5e:35:b4:a8:eb:e8:
64:5b:6a:2f:62:73:29:a2:8b:42:e9:9e:3d:5d:74:c2:19:de:
36:08:31:5f:be:cf:3d:46:d5:67:16:39:cd:08:64:bf:01:57:
3f:21:5d:23:37:cb:60:cd:70:3a:54:99:a3:aa:05:c6:13:04:
3b:de:24:06:25:e3:55:d9:59:aa:d5:77:31:6e:49:b8:2e:a1:
ca:30:c0:e1:f7:2a:4f:12:a4:89:29:19:c1:1a:00:84:cf:3d:
cb:4f:70:27:72:05:fb:5c:60:e2:cc:69:55:5c:c8:4f:82:aa:
1b:f1:f4:8c:6e:8e:58:bf:c3:2d:4a:e9:11:04:cd:2c:08:22:
5e:aa:f3:4d:f8:44:c9:28:34:f4:77:86:30:f4:65:54:e9:07:
01:dd:78:a7:2a:c6:14:05:1b:e2:60:c7:41:7e:a3:6a:26:01:
9a:72:4b:fe:a6:60:22:82:df:83:22:90:ff:c2:98:9a:eb:93:
73:d0:de:e8:16:b6:df:6b:73:c6:24:55:bf:18:8a:6b:5e:2f:
a8:9d:52:9e:9c:31:76:9d:cd:15:10:23:02:d5:79:26:e4:b9:
b5:c0:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:31:24 2026 by rpki-client