
$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json)
Hash identifier: Urp5Sp1DA7dh9CZwkRCCtbtLDxzzGaHFySE1ny9AgMY=
Subject key identifier: A2:26:40:48:16:3B:04:D0:84:9F:85:A8:6D:4D:EE:79:A6:70:0B:A0
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial: 4A71BF423F930B8AEDBD1DCF4B9BF0A259C30335
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
Manifest number: 02DF
Signing time: Sun 01 Mar 2026 09:06:22 +0000
Manifest this update: Sun 01 Mar 2026 09:01:22 +0000
Manifest next update: Mon 02 Mar 2026 11:11:22 +0000
Files and hashes: 1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: VL/snBcA4TQASO1JgrhJJ4GnQSQZ2IO6gxXlLXQGjG8=)
2: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: IQ5l97lw/ksXdgCTxkkz2lr5lEwgvk4BjBm36Q93bUM=)
3: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 11:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:71:bf:42:3f:93:0b:8a:ed:bd:1d:cf:4b:9b:f0:a2:59:c3:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Validity
Not Before: Mar 1 09:01:22 2026 GMT
Not After : Mar 2 11:11:22 2026 GMT
Subject: CN=A2264048163B04D0849F85A86D4DEE79A6700BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:5e:5d:0e:d5:b0:a5:9c:24:37:b0:32:3f:
29:f7:15:1d:0d:2e:d0:6b:68:12:7c:85:1f:74:f5:
23:e4:25:f5:0d:21:c3:f3:f9:ae:d6:78:f2:d3:a2:
7c:75:b0:49:4b:d9:93:8a:dd:30:c1:6a:f2:7f:15:
23:13:ad:e0:12:bf:e0:7c:98:85:20:7d:87:2e:fd:
99:cf:14:0a:3f:aa:f4:ae:ae:3e:fd:2d:0f:e3:59:
93:85:da:2d:a1:38:92:a3:c7:c7:86:15:e8:68:52:
4a:67:1f:b5:c7:6f:74:b4:38:2a:82:97:b5:c3:6f:
ee:44:38:b0:b7:72:42:83:f5:b1:96:c8:d8:da:44:
60:f0:f0:9c:08:b7:c5:ff:89:13:06:92:6d:b7:b2:
0d:4b:00:94:79:a9:8d:ad:04:de:56:de:e5:2a:49:
73:1f:5d:37:ea:b8:83:7f:7b:1f:b0:f6:08:01:fa:
b5:d5:99:5c:08:2c:2c:e4:3b:02:bc:38:73:55:3b:
45:d8:47:91:d6:6a:bc:74:90:5b:fe:07:91:45:9e:
75:65:6d:9b:a6:fc:81:da:68:be:54:99:3d:a9:ae:
cb:db:27:92:d8:5d:cb:95:29:24:39:3b:15:fc:eb:
e6:cf:02:6c:26:4f:11:27:d5:99:00:ca:eb:ea:63:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:40:48:16:3B:04:D0:84:9F:85:A8:6D:4D:EE:79:A6:70:0B:A0
X509v3 Authority Key Identifier:
keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:28:9a:05:d2:9b:18:e7:0d:be:ed:d0:04:ce:8d:3d:1b:
ed:cf:50:83:90:ff:39:3e:0e:49:3c:3b:3d:8c:cc:81:b9:9c:
85:5a:9e:c6:2a:1b:35:79:c2:1c:30:d8:bb:b3:ac:27:73:87:
5d:37:b3:37:02:7d:6f:ce:1f:1d:84:9c:12:1f:53:b3:c5:86:
4a:cd:f5:76:a2:bf:3d:d6:2f:13:65:d0:71:41:21:c9:ec:a6:
7f:8a:2d:35:28:5d:fb:e1:12:fd:f9:d3:fd:8d:70:93:86:df:
5d:92:5a:ec:7e:b5:26:c5:8e:24:33:3f:d4:15:45:47:92:08:
87:43:7e:1a:7f:6c:3a:21:42:13:12:af:c8:02:80:6b:b8:16:
fe:96:61:b2:df:24:42:75:d6:e1:00:33:09:7d:42:7d:d3:62:
ee:8f:4c:67:cf:57:e9:5a:86:13:e6:09:38:1f:0a:38:66:52:
ac:df:6e:5d:33:4a:d3:a2:f5:3f:87:f0:38:74:c0:c9:d9:22:
44:7e:56:74:d1:65:26:5a:65:eb:13:1d:b7:32:b3:54:2f:83:
ab:3b:14:72:8b:f1:5d:ca:99:59:10:41:82:4e:e0:e9:36:21:
2b:0d:9e:42:8b:52:ba:32:66:fa:fb:96:ab:93:5b:b5:23:6b:
d1:b5:f1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:16:50 2026 by rpki-client