
$ rpki-client -vvvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
File: A4C9B133126401D92DA5457C573EA0078BF42BA8.mft (raw, json)
Hash identifier: HbkJErV/L9kuyKdOLSd/9UlT1deucWjB1e1cYW2LFJ0=
Subject key identifier: 5C:6F:93:AA:A8:52:7D:D1:05:68:9C:04:BC:25:D2:7A:EE:0B:84:F2
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Certificate issuer: /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial: 24C7EC44EFF107D8B68E135BC07C2130CA7F8C40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
Manifest number: 04E5
Signing time: Tue 20 Oct 2026 04:20:10 +0000
Manifest this update: Tue 20 Oct 2026 04:15:10 +0000
Manifest next update: Wed 21 Oct 2026 04:40:10 +0000
Files and hashes: 1: 323830343a333332343a3a2f33322d313238203d3e20323635333737.roa (hash: YWPvyv0MK7t4cNjrZOaeGWdwja2gl183zw9EnUIdOtc=)
2: 3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa (hash: V2l6zSpJS7pKeSL0qVkQMBRprNxxsQq75q1RS2INOr0=)
3: A4C9B133126401D92DA5457C573EA0078BF42BA8.crl (hash: Jv3MegfmbnYKJNs7Y829OjvVIRhG/+yCwM/bPdZtB9g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 21 Oct 2026 04:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c7:ec:44:ef:f1:07:d8:b6:8e:13:5b:c0:7c:21:30:ca:7f:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Validity
Not Before: Oct 20 04:15:10 2026 GMT
Not After : Oct 21 04:40:10 2026 GMT
Subject: CN=5C6F93AAA8527DD105689C04BC25D27AEE0B84F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:59:43:08:da:9d:27:e4:c8:db:49:fe:5b:
7d:59:56:66:ac:17:fb:e5:ab:4d:96:7b:0f:4b:c0:
0a:cc:58:4f:ab:e3:4c:e2:49:13:e2:7d:b0:05:14:
32:8d:ae:d3:d1:39:2e:95:a5:a2:07:38:06:ae:b4:
01:a0:03:32:4f:98:9d:92:45:18:34:78:d2:aa:28:
59:49:1a:22:c7:74:c8:3b:d2:18:7d:62:2c:3a:64:
db:0b:79:2b:ec:a5:22:e3:57:04:2d:34:4b:3f:45:
99:b3:95:6c:82:b6:85:97:9f:b3:ba:ed:8e:39:fd:
33:d0:26:8f:c7:d8:ae:53:22:ef:cd:10:bf:65:23:
4e:e7:bc:f8:fc:83:02:55:c3:f3:c4:8b:32:45:c7:
6f:0d:01:fa:e7:1e:91:13:df:3d:75:bc:9e:65:d8:
4b:d1:e2:a6:fe:b3:9c:9c:93:aa:91:ba:66:e7:86:
d7:f3:e0:b3:af:e9:c7:78:55:e8:5e:f4:b3:e3:ee:
60:ab:30:1d:c6:64:da:73:e0:da:91:33:77:da:ac:
cf:ea:35:01:ec:d1:73:db:4b:f2:12:5b:14:c2:17:
c1:8b:a0:8c:63:b4:c6:52:c1:ae:97:f6:c7:2a:a9:
ff:0a:fc:36:e4:f1:7a:fd:9d:89:80:33:1c:27:e4:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:93:AA:A8:52:7D:D1:05:68:9C:04:BC:25:D2:7A:EE:0B:84:F2
X509v3 Authority Key Identifier:
keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:20:aa:b1:70:b3:ac:cc:1f:9f:b7:6d:a9:3e:47:ae:3d:
6c:75:70:51:df:59:19:84:81:6c:c2:dc:b0:3e:d5:42:15:70:
5e:70:a4:ab:a7:b5:d4:94:92:c0:61:d9:bb:a1:33:01:df:1f:
cb:13:cb:c1:e7:8c:c6:fc:d4:3a:0c:ff:9c:d1:ec:f5:1b:be:
42:0f:dc:75:6d:e8:87:0e:e6:95:3b:60:2d:03:17:7a:7b:af:
0e:f0:a8:49:19:e4:ff:9a:19:fd:c6:fd:c0:5d:5e:b0:12:2a:
34:ae:36:5a:e2:28:90:c2:69:82:79:20:b6:16:82:68:d9:62:
41:f0:eb:be:5d:9f:ba:73:40:55:35:73:74:17:04:79:e9:e1:
df:7f:e5:85:27:1c:b7:6b:1f:4d:c1:62:8c:a0:f4:ea:f5:2b:
5d:04:1a:c6:50:6c:07:d5:6d:53:25:a7:34:f9:bf:11:a2:ec:
c0:c1:a3:c1:c5:a8:83:87:26:88:3d:d2:58:2d:80:ea:83:70:
10:a7:e1:9b:e1:4f:c9:f4:42:43:c5:44:f6:3e:c3:c2:d3:f8:
a6:6f:b5:e3:51:e6:ef:2f:f8:bb:f9:71:53:c4:2d:37:9a:b7:
ed:80:39:c5:bf:3d:d8:75:15:6e:d0:fb:85:ec:5a:70:52:e4:
36:16:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:20:01 2026 by rpki-client