
$ rpki-client -vvvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.mft
File: A588F6E4897B212F8D1AF153AFB170856EFC516A.mft (raw, json)
Hash identifier: whyreEhpM9xsP3dwUidfapDes+c2vVI4g8woLbv3XG4=
Subject key identifier: D6:1D:9F:7F:69:6B:E0:40:DB:8E:C2:51:3E:69:33:FC:66:DC:15:98
Authority key identifier: A5:88:F6:E4:89:7B:21:2F:8D:1A:F1:53:AF:B1:70:85:6E:FC:51:6A
Certificate issuer: /CN=A588F6E4897B212F8D1AF153AFB170856EFC516A
Certificate serial: 530443C2DDBE21578CA1FA17D0D55F9FA490198A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A588F6E4897B212F8D1AF153AFB170856EFC516A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.mft
Manifest number: 0124
Signing time: Sat 31 Oct 2026 13:47:14 +0000
Manifest this update: Sat 31 Oct 2026 13:42:14 +0000
Manifest next update: Sun 01 Nov 2026 15:22:14 +0000
Files and hashes: 1: 3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa (hash: 0yOvmIq1fKScFtbT8j9YAjqXw5TfTQl3OG5HVu9tAKU=)
2: A588F6E4897B212F8D1AF153AFB170856EFC516A.crl (hash: 8byupQdLEkpEQ0TEinub1pzm+aDgkLon7BIP65tbaEM=)
3: 323830343a373730343a3a2f33322d313238203d3e20323731313439.roa (hash: 0IfuKqY8QiZFLaWG4EAr61lTcx637zrLrpORQzUnYfU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.crl
rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A588F6E4897B212F8D1AF153AFB170856EFC516A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 15:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:04:43:c2:dd:be:21:57:8c:a1:fa:17:d0:d5:5f:9f:a4:90:19:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A588F6E4897B212F8D1AF153AFB170856EFC516A
Validity
Not Before: Oct 31 13:42:14 2026 GMT
Not After : Nov 1 15:22:14 2026 GMT
Subject: CN=D61D9F7F696BE040DB8EC2513E6933FC66DC1598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:58:22:ac:3b:ca:93:bc:8e:81:38:00:77:
2d:69:97:92:54:c9:a6:1f:03:77:49:ff:be:eb:af:
66:00:31:04:de:1b:cb:7e:94:b1:c3:c3:ea:98:16:
dd:35:41:da:bb:a1:87:1e:1b:e7:ec:d9:61:55:8a:
98:cc:84:8d:3b:ee:10:06:74:91:25:99:b6:45:d4:
aa:9f:10:9a:bc:66:7a:c9:96:8c:70:1d:3e:03:64:
65:ba:b1:ca:12:ec:00:c3:2a:76:66:90:56:52:72:
e3:31:0c:3e:fc:62:47:7f:3e:bd:ea:44:e0:e8:c1:
97:11:23:6e:ea:0c:e5:49:32:23:e7:d4:3c:ac:35:
1d:04:7a:39:13:83:24:c4:5f:72:dc:c3:d8:8e:ea:
1a:99:1d:cf:4d:8a:8e:80:59:22:8b:73:7a:24:f9:
74:86:14:3f:4f:98:d5:81:55:c6:5f:fc:f7:cf:62:
c4:3c:49:34:9e:fc:ce:68:fc:e8:db:ec:2a:36:d1:
54:9b:c8:76:f5:41:a8:18:77:a5:fd:59:67:66:8d:
52:11:66:89:39:de:a4:dc:67:a7:d3:a8:a2:b3:5e:
a0:20:01:a3:ca:c1:b0:d2:f2:e4:52:77:5e:f0:c4:
9c:e5:ae:3c:97:e5:a5:a0:d4:fc:11:d5:11:07:51:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:9F:7F:69:6B:E0:40:DB:8E:C2:51:3E:69:33:FC:66:DC:15:98
X509v3 Authority Key Identifier:
keyid:A5:88:F6:E4:89:7B:21:2F:8D:1A:F1:53:AF:B1:70:85:6E:FC:51:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A588F6E4897B212F8D1AF153AFB170856EFC516A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:f5:7f:65:75:9b:a8:06:88:53:5b:18:71:6d:1b:08:7e:
00:c9:dc:bb:b3:75:00:ab:55:8c:b4:99:0d:ba:9f:48:04:e9:
6d:5d:51:c6:7c:ee:e4:9c:c1:65:cf:fe:34:c1:90:b6:c2:25:
0e:e1:81:fa:e7:aa:40:75:4f:80:9d:7c:82:64:15:7a:bb:f6:
78:a0:e4:ae:2d:ae:a7:53:23:45:73:55:43:8b:e0:a6:ea:9a:
81:df:b7:e5:12:c4:c9:f7:f3:1a:f0:4a:c6:62:cf:71:37:61:
ae:d5:d4:58:3f:46:91:3d:f8:9a:76:ad:62:b6:12:b9:5b:57:
b1:a2:5e:4a:da:a2:3e:d9:c9:cf:04:ca:04:33:dc:46:1d:6d:
26:25:27:51:41:1d:8b:4c:fe:9d:b6:2a:30:cd:e4:35:76:1d:
ff:a0:f3:66:78:a3:c1:ba:ce:32:59:a2:0b:d7:2d:40:ac:f4:
e6:c5:15:44:c4:47:f9:51:8f:37:51:2c:67:ae:a4:bc:31:d4:
83:47:40:dd:12:4b:03:4e:8d:3f:f0:17:62:3f:5b:cf:2c:9f:
49:0e:1b:f5:16:7c:e2:72:9e:dc:8f:ca:33:8a:9c:9b:46:37:
1d:f6:85:4a:86:f0:df:a2:f2:c2:ef:e0:ea:21:cd:19:6a:6c:
5c:cb:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:54:49 2026 by rpki-client