
$ rpki-client -vvvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
File: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft (raw, json)
Hash identifier: T2mxJUmmvI1BgllVjWx2L3c6TI/dZHCKU0JdLBLvIwM=
Subject key identifier: D4:B4:E3:1F:4D:59:EA:1D:3B:4A:53:3D:1D:26:B4:87:81:17:DC:51
Authority key identifier: 86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
Certificate issuer: /CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Certificate serial: 71C118F99DF8536E99684689DA88A04A868C0659
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
Manifest number: 0115
Signing time: Tue 13 Oct 2026 15:04:24 +0000
Manifest this update: Tue 13 Oct 2026 14:59:24 +0000
Manifest next update: Wed 14 Oct 2026 15:04:24 +0000
Files and hashes: 1: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: r0sAOrwALk90vhCFY+SkiJV3smIjQ3FbEG1QzGe8ygA=)
2: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl (hash: bbdJ6IoHBvd/XyOu90ZG39aRBMs0XtJVCiOGmnsR8iU=)
3: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: zO4x1TXCAHr1YUywwb/WdCGyvwPecOUmoq9Q9dERssA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 15:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c1:18:f9:9d:f8:53:6e:99:68:46:89:da:88:a0:4a:86:8c:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Validity
Not Before: Oct 13 14:59:24 2026 GMT
Not After : Oct 14 15:04:24 2026 GMT
Subject: CN=D4B4E31F4D59EA1D3B4A533D1D26B4878117DC51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:dd:08:86:ac:a6:74:e2:35:33:b4:61:14:
4a:62:38:b3:74:db:9a:5f:c9:1d:e8:bf:0a:1d:90:
58:f1:dc:4d:46:3b:30:c1:5d:77:ef:a8:02:03:79:
73:b6:93:93:2c:47:4d:26:5f:bf:40:23:3e:e2:6a:
af:4c:4c:9e:d2:15:1b:87:26:f9:60:c4:83:f0:c9:
58:31:04:bb:58:dc:f4:0b:bb:67:89:4a:67:46:74:
10:40:83:bf:d7:ff:ee:85:44:02:ca:12:82:2a:d6:
31:01:a5:c9:55:37:70:f8:4c:13:ad:c2:e8:d6:2b:
35:ce:9d:dc:e6:db:ee:e4:d7:1a:ff:ea:c9:11:22:
dd:8d:1a:21:c7:83:35:0f:7a:ee:e5:10:33:df:05:
28:ea:02:a1:b6:dd:76:a5:cf:14:41:51:82:22:6c:
56:39:a4:d3:0c:b5:46:1b:be:55:94:ca:c6:7f:10:
6a:47:98:28:fb:5d:4d:04:fe:f5:0b:c9:8b:62:ff:
03:52:24:8a:bb:93:d3:f9:5e:d0:2d:f6:bd:ba:89:
e0:e1:25:26:dd:9a:9f:23:13:b3:da:f1:1d:ef:50:
f0:6d:a7:43:ea:76:41:26:59:56:ed:60:93:00:c6:
57:16:7f:4c:b0:64:bd:e8:71:36:cb:20:46:69:2d:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:E3:1F:4D:59:EA:1D:3B:4A:53:3D:1D:26:B4:87:81:17:DC:51
X509v3 Authority Key Identifier:
keyid:86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a0:ec:c2:1a:1e:58:c1:d9:79:14:95:c6:79:d1:de:0d:a1:
ec:64:b0:3b:b5:25:de:b5:d1:01:b5:eb:0b:0a:79:f0:e4:bd:
18:f2:6f:51:19:67:4e:da:60:73:dc:97:88:65:f6:91:18:7b:
f8:d2:aa:f0:3f:02:f9:cc:23:e7:97:90:e4:a2:12:eb:f5:bf:
a4:8c:4a:6b:00:fe:ed:22:fd:0a:78:0a:ea:ca:5b:76:40:62:
ec:36:f7:ee:b9:41:9c:c5:00:90:a4:f2:81:fa:ab:a6:8d:43:
8c:d4:1b:54:31:81:d3:91:24:0f:41:4b:f7:c9:9c:ac:7f:97:
b4:33:ca:04:f2:e5:dc:04:52:25:49:e0:a4:5e:c6:f8:c5:17:
c9:65:6f:5b:d2:fa:08:78:34:93:be:1c:36:fc:c7:91:39:ad:
4b:fc:5d:4b:ec:94:58:1b:14:ac:6b:75:e8:f1:f0:9f:5c:14:
ba:57:14:0e:5c:d8:c4:22:b3:97:b4:b7:9a:de:65:c6:aa:60:
39:a8:71:76:8f:ae:3a:86:7c:b5:6d:09:b6:52:69:79:34:6f:
de:36:aa:34:7e:4f:ec:76:7d:ec:7c:bd:24:82:91:c3:06:0d:
70:f5:93:9d:87:82:c7:3f:9e:e9:32:9d:72:c3:86:f2:2e:f1:
47:2a:66:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUccEY+Z34U26ZaEaJ2oigSoaMBlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyMEVGNEFDNTlCNUE4NjU3OTJGMEU2NzY1MkZBMUE3
QzVBQTQzQTAeFw0yNjEwMTMxNDU5MjRaFw0yNjEwMTQxNTA0MjRaMDMxMTAvBgNV
BAMTKEQ0QjRFMzFGNEQ1OUVBMUQzQjRBNTMzRDFEMjZCNDg3ODExN0RDNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbD90IhqymdOI1M7RhFEpiOLN0
25pfyR3ovwodkFjx3E1GOzDBXXfvqAIDeXO2k5MsR00mX79AIz7iaq9MTJ7SFRuH
JvlgxIPwyVgxBLtY3PQLu2eJSmdGdBBAg7/X/+6FRALKEoIq1jEBpclVN3D4TBOt
wujWKzXOndzm2+7k1xr/6skRIt2NGiHHgzUPeu7lEDPfBSjqAqG23XalzxRBUYIi
bFY5pNMMtUYbvlWUysZ/EGpHmCj7XU0E/vULyYti/wNSJIq7k9P5XtAt9r26ieDh
JSbdmp8jE7Pa8R3vUPBtp0PqdkEmWVbtYJMAxlcWf0ywZL3ocTbLIEZpLVmpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1LTjH01Z6h07SlM9HSa0h4EX3FEwHwYDVR0j
BBgwFoAUhiDvSsWbWoZXkvDmdlL6GnxapDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNY
WEMvMC84NjIwRUY0QUM1OUI1QTg2NTc5MkYwRTY3NjUyRkExQTdDNUFBNDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MjBFRjRBQzU5QjVBODY1
NzkyRjBFNjc2NTJGQTFBN0M1QUE0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNYWEMvMC84
NjIwRUY0QUM1OUI1QTg2NTc5MkYwRTY3NjUyRkExQTdDNUFBNDNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjKDswhoeWMHZeRSVxnnR3g2h7GSwO7Ul3rXRAbXrCwp58OS9GPJvURlnTtpg
c9yXiGX2kRh7+NKq8D8C+cwj55eQ5KIS6/W/pIxKawD+7SL9CngK6spbdkBi7Db3
7rlBnMUAkKTygfqrpo1DjNQbVDGB05EkD0FL98mcrH+XtDPKBPLl3ARSJUngpF7G
+MUXyWVvW9L6CHg0k74cNvzHkTmtS/xdS+yUWBsUrGt16PHwn1wUulcUDlzYxCKz
l7S3mt5lxqpgOahxdo+uOoZ8tW0JtlJpeTRv3jaqNH5P7HZ97Hy9JIKRwwYNcPWT
nYeCxz+e6TKdcsOG8i7xRypmhg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:00:29 2026 by rpki-client