
$ rpki-client -vvf rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
File: 8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft (raw, json)
Hash identifier: HIbKTgL5bLo+K2EpASu9oiZnnfbCG+2JkStw7I5sf+8=
Subject key identifier: 88:13:9C:8B:DE:3B:53:A9:1B:5F:71:3E:48:3A:EA:2D:38:FA:EC:8C
Authority key identifier: 8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14
Certificate issuer: /CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
Certificate serial: 733D76BC639F4ECFE8A8BC5BBDBB5575C3CD6CF4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
Manifest number: 0D
Signing time: Mon 02 Mar 2026 09:42:06 +0000
Manifest this update: Mon 02 Mar 2026 09:37:06 +0000
Manifest next update: Tue 03 Mar 2026 10:37:06 +0000
Files and hashes: 1: 323830343a383438343a3a2f33322d3332203d3e20323732323635.roa (hash: bEyRwsMpXTEvUAGXMSFTQv7yrt9ivZNEzgWE8VHrXbU=)
2: 8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl (hash: QKg6vwvF1p2rq1XPTr+2doLzspip04LanKuadYFvHKM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl
rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 10:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3d:76:bc:63:9f:4e:cf:e8:a8:bc:5b:bd:bb:55:75:c3:cd:6c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
Validity
Not Before: Mar 2 09:37:06 2026 GMT
Not After : Mar 3 10:37:06 2026 GMT
Subject: CN=88139C8BDE3B53A91B5F713E483AEA2D38FAEC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:c8:22:9f:fb:54:25:e1:2e:46:de:6e:82:
0b:c3:e8:93:05:20:e2:2c:95:8b:7c:9d:e9:48:e3:
00:73:55:e1:0e:3d:4b:e2:3b:40:35:c4:0d:a8:a1:
85:e7:4f:b3:f8:80:df:cf:a3:bf:ed:1c:01:c5:98:
55:fb:06:52:2d:cc:bf:05:bb:69:a0:00:5b:78:ba:
a0:0e:e9:96:f9:0f:46:b2:84:71:88:8b:6b:97:90:
47:d4:77:95:af:d3:9b:10:92:b3:06:c8:5d:1f:2a:
c4:c7:f6:33:f1:81:c7:e3:1e:4b:6a:1b:14:b8:5e:
45:89:f4:88:5f:86:dd:e2:11:ee:70:93:cc:fc:69:
43:33:03:72:41:35:12:99:09:f1:a2:2d:cd:78:6f:
14:66:27:1c:83:6a:68:6a:6d:91:95:bd:84:1e:2c:
a0:2d:83:b3:b0:60:56:aa:a0:fc:0e:3c:cb:4b:d4:
0c:58:bb:81:21:9a:64:42:59:30:8e:bb:79:ab:c3:
f0:b2:3f:ad:63:d4:22:45:69:6b:0c:bf:55:f4:ed:
62:2f:eb:af:fa:e9:fa:0a:06:3f:50:54:e0:43:30:
96:b0:d3:4a:ca:03:92:ad:7a:59:c7:82:95:b3:64:
af:01:19:68:b3:ae:ed:1c:c7:e8:e4:4e:21:4e:e0:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:13:9C:8B:DE:3B:53:A9:1B:5F:71:3E:48:3A:EA:2D:38:FA:EC:8C
X509v3 Authority Key Identifier:
keyid:8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:95:8a:22:47:3b:dc:9e:10:66:38:6e:98:6a:e1:3b:82:89:
23:af:db:01:e9:6d:52:1f:74:84:e2:fe:98:cb:ec:5e:b8:88:
80:0e:0b:99:04:0e:1a:96:79:c1:05:90:13:51:27:f5:6c:a7:
f8:09:38:06:aa:e1:d4:e8:94:7b:17:5e:64:7a:a7:86:bd:11:
30:6a:cd:cc:69:57:11:c6:ce:ff:eb:d4:79:af:f8:79:e1:ee:
87:ea:0d:f7:bc:53:6c:86:e3:ba:3c:38:eb:97:92:a5:db:10:
a5:8b:e0:05:e4:97:d5:e1:74:82:b6:c5:29:62:58:3e:11:b2:
5b:0a:56:eb:3f:f7:f4:d1:eb:0a:70:27:f4:44:0a:13:6e:3b:
d8:7c:41:19:ae:1a:d0:15:ec:09:61:ab:a6:6b:da:f6:24:ea:
d7:82:9a:a7:1d:25:29:04:04:79:89:ff:00:30:08:ac:e8:53:
e4:53:3a:52:57:af:d2:cf:e0:cc:c0:21:5d:78:92:62:ef:cc:
1b:e7:ee:44:b1:97:8a:ec:eb:60:47:07:64:de:66:85:92:78:
55:e8:97:ad:8c:08:2b:f6:1f:33:6b:1c:21:4b:b0:94:fe:f0:
78:d2:de:a6:ef:d0:1e:06:c6:5d:6f:8b:5b:7a:ca:4d:0f:7f:
fe:6c:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:40:22 2026 by rpki-client