
$ rpki-client -vvvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
File: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft (raw, json)
Hash identifier: eTXkBvfGkrWNUSD/AD4GWDPkEQ72SBUfR0Aq+yESxK4=
Subject key identifier: 05:E9:99:4E:C2:A6:7A:F5:BF:C3:0C:E1:EB:58:B3:46:57:87:60:97
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Certificate issuer: /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial: 4A04023C29FA8E59C205B07CA8CB3256943A69F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
Manifest number: 03F9
Signing time: Mon 02 Nov 2026 02:41:57 +0000
Manifest this update: Mon 02 Nov 2026 02:36:57 +0000
Manifest next update: Tue 03 Nov 2026 03:28:57 +0000
Files and hashes: 1: 323830343a343132343a3a2f33322d313238203d3e20323636303036.roa (hash: DZUKJT58QNvDzjKeLYED3eYPaCQV0SjeRB5gzfW7e7I=)
2: 3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (hash: bHkaMgsQI+wNREFKFuJNbcR0Pr4FXc5yHzm39e6iE2U=)
3: 8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl (hash: K40N9mXvvtMqpcq2iu0ReTw4XP+cUep5UNV2t5F0hm4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 03:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:04:02:3c:29:fa:8e:59:c2:05:b0:7c:a8:cb:32:56:94:3a:69:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Validity
Not Before: Nov 2 02:36:57 2026 GMT
Not After : Nov 3 03:28:57 2026 GMT
Subject: CN=05E9994EC2A67AF5BFC30CE1EB58B34657876097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:b0:fd:e7:48:f6:04:23:a2:64:18:da:21:
3c:71:92:5c:72:de:8e:cd:a1:43:22:ea:0d:a7:b7:
8c:d0:2f:15:a1:a1:7d:cc:54:ab:eb:df:6b:35:ac:
13:d9:7f:6f:9d:5c:6a:c1:ce:0e:95:3c:05:51:5f:
b9:a6:84:c3:8d:76:b5:98:e4:95:a2:f5:b0:96:8c:
6c:53:f4:a6:71:7d:4e:12:1e:8f:76:44:91:61:8f:
03:13:7f:bf:14:06:84:a1:43:c8:36:39:ba:17:60:
ce:17:93:bd:cd:3d:91:0d:f8:48:ce:8c:8e:b7:a5:
64:ee:a3:44:ec:90:9d:64:12:ca:03:04:78:50:67:
7d:ef:3e:e2:17:ea:8f:a9:5d:53:c5:53:dd:60:77:
69:0f:93:9f:7b:fd:f1:04:ff:6b:4d:01:00:ce:42:
84:fd:47:ee:14:04:29:a9:11:87:8c:22:fd:c6:8c:
cd:11:b3:ce:32:57:68:77:9d:c1:b6:1b:1e:a5:0b:
d6:1b:59:c2:ac:f7:cd:3f:cf:e4:a3:fa:c4:da:6f:
01:ac:f9:af:84:f0:be:8e:b6:c3:66:9a:53:a8:27:
3f:39:1f:33:87:da:e5:d0:c0:01:89:f2:e9:c5:e6:
03:b8:e7:cb:e0:72:6f:6c:3c:d3:2f:12:0b:d0:1f:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:99:4E:C2:A6:7A:F5:BF:C3:0C:E1:EB:58:B3:46:57:87:60:97
X509v3 Authority Key Identifier:
keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:b1:19:90:70:ec:02:37:59:f7:db:55:bb:21:e9:db:67:
50:f0:1e:2d:6d:7e:a4:1d:ef:f3:7e:e5:35:46:68:5f:98:16:
a8:55:f1:f0:e1:d4:8d:e0:a1:4a:73:bc:c3:58:3f:50:03:36:
25:12:fa:2a:28:07:a8:a9:c3:ce:96:dc:04:ac:f3:24:d7:d4:
92:ca:35:4c:4d:d2:0f:94:81:12:f4:8f:47:00:db:97:dc:6a:
4b:c0:39:ce:34:62:be:9b:c6:6a:7a:6c:6c:ab:0c:4e:a3:1c:
65:5e:78:5d:bf:04:5e:13:b1:2b:61:2c:87:a0:02:49:55:bb:
f6:2a:aa:7b:14:d8:5a:02:e5:c6:57:52:47:35:2a:78:54:75:
be:4f:fb:61:ed:68:7b:ed:a2:63:12:99:77:37:2e:f1:ce:8a:
3b:bc:b5:e5:5d:50:c0:6b:ae:d9:92:fa:39:b1:27:2b:65:93:
3e:dc:56:b7:18:c4:32:ab:64:76:57:95:f1:c3:97:4e:a9:ea:
31:37:6e:3a:52:05:33:35:b7:aa:57:f2:41:67:9d:f4:7f:a4:
86:d1:a3:f2:33:7a:c0:e5:34:a7:6d:b0:79:02:d0:14:5b:97:
0e:8b:62:58:c9:05:ec:5c:b5:69:7a:51:70:7b:9d:e3:92:c9:
98:a6:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:19:14 2026 by rpki-client