
$ rpki-client -vvvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft
File: 497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft (raw, json)
Hash identifier: fFt0xvfSQMzpZ+2R0vpG/rNft92ZTX6Ze7T4x8y1RBo=
Subject key identifier: B1:6B:EF:E4:76:55:DF:0E:83:93:FC:3D:B7:BF:90:F3:CA:A4:BC:FC
Authority key identifier: 49:77:61:B0:E5:86:00:30:CC:7D:BE:68:EA:FF:15:6E:3E:42:C2:E7
Certificate issuer: /CN=497761B0E5860030CC7DBE68EAFF156E3E42C2E7
Certificate serial: 07EC065D76426FF77DF773D38DCEC886320F2CB7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft
Manifest number: 012B
Signing time: Wed 28 Oct 2026 07:46:04 +0000
Manifest this update: Wed 28 Oct 2026 07:41:04 +0000
Manifest next update: Thu 29 Oct 2026 11:35:04 +0000
Files and hashes: 1: 497761B0E5860030CC7DBE68EAFF156E3E42C2E7.crl (hash: MWQVpcODspyML88dEkX8oUDI/oPVscKU8TnxCq3knjE=)
2: 323830343a313763343a3a2f33322d313238203d3e20323633323530.roa (hash: tWE/7cFQzmIFwQiePhoELpPc/WXL6kZjOZzOyXr9KX0=)
3: 3137372e3233342e3136302e302f31392d3332203d3e20323633323530.roa (hash: ifLFGAj6QfGWN5d8yw16TyEm8MCDtzYWOPkR8FDhzFQ=)
4: 34352e3138302e3235322e302f32322d3332203d3e20323633323530.roa (hash: f6H2+ccduXpXny06YaqI+JCeERJYDCHVbToAMDiSMCs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.crl
rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 11:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ec:06:5d:76:42:6f:f7:7d:f7:73:d3:8d:ce:c8:86:32:0f:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497761B0E5860030CC7DBE68EAFF156E3E42C2E7
Validity
Not Before: Oct 28 07:41:04 2026 GMT
Not After : Oct 29 11:35:04 2026 GMT
Subject: CN=B16BEFE47655DF0E8393FC3DB7BF90F3CAA4BCFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:87:0f:43:37:d9:b3:ef:e5:fb:b3:d6:84:9a:
4d:a9:66:2d:97:fb:b4:ca:9f:82:fd:63:15:e2:2f:
1f:ab:a4:7c:f7:34:41:d3:d9:a3:9e:40:bd:43:ea:
35:00:b3:3e:81:d0:a8:74:dc:27:62:49:cf:31:ee:
a8:9b:6c:3a:60:82:bc:15:e9:f8:a0:47:56:49:c1:
28:83:07:76:42:31:05:92:23:4c:b9:89:89:80:c9:
dc:7b:f5:ff:db:71:1c:2b:d4:22:f9:67:3d:b6:e1:
24:97:dc:bd:ba:76:c1:fc:5f:44:9a:34:a4:95:d4:
a1:e2:e9:ec:03:79:07:7c:bb:b4:91:f4:d7:10:13:
1b:89:82:94:84:5a:61:95:54:a9:93:99:12:1f:62:
04:c9:e9:72:6a:5c:a6:fd:1a:9b:d0:0e:90:8e:6b:
8a:54:3b:dc:df:81:f0:6f:57:a3:66:f7:9a:75:e2:
10:b6:1a:b5:62:fc:81:6c:46:e7:8c:53:d7:5b:e9:
a1:6f:05:1d:5d:29:ec:6e:ca:8c:92:f7:02:af:d8:
0a:49:d6:40:38:6f:1d:e2:33:0c:e1:0a:58:3e:60:
ed:c8:bb:f9:4e:38:7c:07:80:ad:e2:32:4b:0a:b9:
2d:b0:0b:3a:9f:8e:4a:5e:a0:11:f3:f5:bd:fd:85:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:EF:E4:76:55:DF:0E:83:93:FC:3D:B7:BF:90:F3:CA:A4:BC:FC
X509v3 Authority Key Identifier:
keyid:49:77:61:B0:E5:86:00:30:CC:7D:BE:68:EA:FF:15:6E:3E:42:C2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:ff:b4:04:05:d1:a6:72:6c:42:d7:5f:ec:fb:25:b0:46:
ea:d2:f7:56:f2:e2:82:29:2b:9a:fd:50:92:19:b9:f3:48:e5:
7b:0f:26:a0:08:1c:7e:71:ed:e7:85:37:89:d4:6b:fc:65:cf:
a8:0c:c5:09:4a:ea:e9:1d:88:aa:25:63:af:72:3a:d5:8c:da:
af:ed:0a:af:60:d2:f5:2d:45:4c:70:e1:58:8a:eb:3e:17:59:
c8:5d:4c:28:15:d1:6f:b1:da:5c:f2:28:db:c3:c8:fb:09:b6:
16:35:70:ef:e6:93:5b:4c:02:20:bc:e2:fe:81:4a:a1:64:1a:
3c:f4:5f:84:df:f8:52:66:6f:b8:17:a2:df:77:4d:1f:cd:e8:
b9:b8:b5:2f:f9:c6:7c:35:bb:63:b0:d9:4b:93:b5:0c:fa:35:
35:60:d4:41:8c:59:78:f1:3c:19:4e:7d:21:6b:aa:07:22:73:
5e:c2:c4:fd:f2:3f:39:31:58:02:7a:b5:d0:81:c3:87:87:20:
ba:b0:ad:68:b5:d9:a1:4e:31:ca:80:ef:2c:23:cc:25:93:42:
22:77:82:66:e0:42:99:0f:ab:a0:73:38:af:00:0d:31:98:36:
87:99:16:6a:6f:bf:09:3f:93:46:54:ad:17:ed:3c:35:5d:6c:
8a:30:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:49:58 2026 by rpki-client