
$ rpki-client -vvvf rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
File: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft (raw, json)
Hash identifier: Y/OjXM0c0lXxEkTLJNR1ZIIrsoxbqq8vx/u6W1J/TM0=
Subject key identifier: E9:C1:D2:05:F1:69:5D:EC:43:15:8D:EC:73:6D:E8:DA:42:22:6A:28
Authority key identifier: 47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD
Certificate issuer: /CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD
Certificate serial: 7E4385480297CD3E0D3776995A765FD712F12F2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
Manifest number: D7
Signing time: Sat 17 Oct 2026 23:34:22 +0000
Manifest this update: Sat 17 Oct 2026 23:29:22 +0000
Manifest next update: Mon 19 Oct 2026 02:52:22 +0000
Files and hashes: 1: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl (hash: 0gTL7640vgvVdcrA+/CXckuSnXHaPMDmD1Ju5OPktD8=)
2: 3230312e3133312e34362e302f32342d3234203d3e20323731343538.roa (hash: T+ZoX/D494ZjPRGKzAG75vxr0zRdD68JcXiQ29/f8w0=)
3: 323830343a376264383a3a2f33322d3334203d3e20323731343538.roa (hash: gAdoA7SSa86gPBQqVPbdnELj5dkdm5Iz7zHaY4p2xU4=)
4: 3138372e3130322e3131312e302f32342d3234203d3e20323731343538.roa (hash: vUrHsqnj9kkb6VSuSoIhEa9dNFN+RZ7bkeXLb9XytA8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl
rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 02:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:43:85:48:02:97:cd:3e:0d:37:76:99:5a:76:5f:d7:12:f1:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD
Validity
Not Before: Oct 17 23:29:22 2026 GMT
Not After : Oct 19 02:52:22 2026 GMT
Subject: CN=E9C1D205F1695DEC43158DEC736DE8DA42226A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:37:a2:e9:cc:2c:eb:e4:03:f6:b0:89:b3:
ea:8e:85:ec:15:7f:40:81:f2:1f:fc:a2:3b:08:96:
8f:84:2b:7b:15:f3:02:0e:2e:15:63:e2:9b:9a:2b:
8b:da:4e:7a:3d:81:b6:2b:57:fd:43:a1:5e:43:b9:
27:a4:31:ce:9a:cd:ec:99:7b:e0:ae:f9:5c:08:74:
49:fa:48:00:1b:1e:9b:b6:d1:03:bf:44:50:81:0a:
d6:20:ef:c7:6c:32:2f:3c:fb:93:ac:68:b6:3a:99:
07:45:95:a6:fb:b6:06:85:38:30:04:1c:d7:41:dc:
2f:63:92:0d:55:ac:d3:9b:f9:bd:b7:2a:ed:39:34:
b2:5f:41:bb:36:5a:20:9d:3e:9e:f3:55:77:bc:6d:
66:b9:19:73:e0:71:6e:42:b5:75:81:49:07:a7:6c:
18:b9:db:13:06:09:b2:df:e5:09:da:e1:ab:50:18:
d3:97:7a:b1:65:22:b6:a6:d3:1d:1f:36:3c:fd:2a:
65:d6:af:e2:eb:b1:5e:de:74:8a:a3:a5:fe:3b:7e:
52:14:2e:f0:a4:96:f2:01:9a:c0:28:cb:63:3b:5e:
a0:0c:d6:e8:f0:6d:5b:a3:6a:1d:49:ee:03:cd:e4:
ab:8f:56:50:9a:1b:de:0f:70:57:e3:ea:9a:58:a9:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:D2:05:F1:69:5D:EC:43:15:8D:EC:73:6D:E8:DA:42:22:6A:28
X509v3 Authority Key Identifier:
keyid:47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ad:79:24:2f:13:e5:02:34:52:2a:3c:a8:4b:ce:66:b8:a1:
26:17:96:65:fc:08:e3:8c:fa:d2:77:8b:f2:ce:1b:fe:b8:0e:
41:65:e5:06:97:cd:5d:a9:b4:bc:e1:c5:52:f6:89:bc:7e:49:
e8:e0:3a:8a:6d:ee:44:64:00:d9:34:e1:26:4f:d9:40:79:22:
c4:9a:d0:dc:10:cc:0b:c4:5f:d9:be:06:e0:5a:96:b0:54:87:
8b:66:9f:31:d6:df:9e:03:97:f6:aa:f1:07:a3:07:61:e4:b1:
62:d4:39:7b:9e:67:04:b6:71:45:48:31:23:fc:39:7e:28:64:
7e:a4:4e:a9:1a:58:06:30:86:2b:aa:6f:aa:8b:53:4e:96:a9:
fb:5c:01:18:93:38:b6:d7:26:28:85:31:10:37:56:9d:8b:9b:
f4:f3:8b:d0:3d:b1:c6:f6:02:ef:77:6e:df:36:b8:46:e8:2e:
64:04:31:b1:88:d3:ff:dd:64:91:d8:d0:66:dd:9c:a4:09:97:
28:77:e7:fa:d3:59:b6:a4:7b:33:ce:b8:13:c7:78:64:28:14:
f4:69:ed:6a:00:ef:cf:43:4c:f8:7d:e7:da:4b:2a:fa:26:7a:
c2:07:2f:6f:58:d2:7f:e0:91:d8:fa:8f:c6:47:ab:83:f5:65:
a0:08:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:52:36 2026 by rpki-client