
$ rpki-client -vvvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
File: CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft (raw, json)
Hash identifier: 3niOqnMRj8iuJf9sge2ythCGDssWBjZSyZd49/xZ5ng=
Subject key identifier: 36:FD:A9:56:33:32:A5:52:DB:27:56:68:D1:D0:E6:5F:49:EB:8E:18
Authority key identifier: CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
Certificate issuer: /CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
Certificate serial: 0857D5B6407C45C447135D60DD9B324F4F10FFAC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
Manifest number: 0167
Signing time: Mon 12 Oct 2026 22:57:34 +0000
Manifest this update: Mon 12 Oct 2026 22:52:34 +0000
Manifest next update: Wed 14 Oct 2026 02:25:34 +0000
Files and hashes: 1: 323830343a366630303a3a2f33322d3438203d3e20323730363332.roa (hash: y/Kq10xhU57gJ8/zejAiUS1it9/5JtYLSY+VUSsjqxQ=)
2: CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl (hash: if9hcE/2k1I/DLNfwNmWZCDabwi0YC4Y0PtdhXQ/Y/A=)
3: 3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (hash: ayaNax4Cw2y8qb4GbPzr68tbqtw7CyLzvM4rGoe554A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl
rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 02:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:57:d5:b6:40:7c:45:c4:47:13:5d:60:dd:9b:32:4f:4f:10:ff:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
Validity
Not Before: Oct 12 22:52:34 2026 GMT
Not After : Oct 14 02:25:34 2026 GMT
Subject: CN=36FDA9563332A552DB275668D1D0E65F49EB8E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:d9:89:b5:a6:6e:24:e5:0f:94:3a:cb:50:
05:b1:ae:67:89:2e:83:dc:77:56:47:ad:8b:3c:eb:
08:56:bf:73:88:e0:c1:10:c0:0d:55:fd:6f:5f:52:
b1:c8:63:11:8c:f3:ed:9a:06:9e:54:0e:9e:9f:4f:
b1:f2:eb:2e:29:9a:a3:e8:52:cb:8d:28:fd:df:b6:
8d:fe:19:13:b1:38:0f:5c:44:16:d6:32:df:f4:98:
32:f2:99:e3:3d:00:02:68:ef:23:f9:6a:1d:7f:61:
25:c6:0b:64:df:a2:e0:c2:af:f4:50:c7:65:65:1b:
a5:8f:4a:b3:93:62:c5:fa:ce:01:9c:67:6e:d8:21:
41:3a:91:9e:71:a6:5b:f3:c2:47:66:5b:5c:c1:e0:
14:12:bd:27:f5:df:30:a9:46:99:4b:f9:6a:6f:03:
69:46:6e:19:11:18:b9:41:47:ea:19:a2:83:d7:f0:
f4:34:25:d1:52:db:6d:f2:02:a1:80:d6:ec:f2:c2:
73:75:53:2e:a8:50:10:46:a6:c0:dc:e4:30:56:3e:
82:6e:b8:dd:e2:fa:67:50:94:66:a1:4e:32:ee:78:
c3:c8:0e:29:d9:26:ff:78:13:4b:9d:d7:f8:84:c8:
93:95:38:ec:42:bd:bc:c4:e7:8b:cb:ed:f7:76:11:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:A9:56:33:32:A5:52:DB:27:56:68:D1:D0:E6:5F:49:EB:8E:18
X509v3 Authority Key Identifier:
keyid:CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5b:64:98:88:3c:2e:0d:2a:b0:e1:ec:d4:95:69:7d:f5:39:
e0:86:35:f4:4d:63:44:8b:0d:4f:77:d4:e1:af:d3:30:69:a9:
33:fc:ac:3c:83:eb:3f:ce:db:a9:6b:d3:f2:55:61:cd:3d:56:
3c:22:86:4a:e0:9a:9d:00:b0:4f:57:22:d3:95:b5:29:dd:54:
34:ee:00:e5:10:5c:a5:80:b9:bd:b2:50:d3:29:9c:43:98:10:
1d:70:86:f0:92:be:50:c7:4c:64:07:6a:b4:0a:df:3d:1d:33:
45:97:ab:ab:d4:89:9b:96:3c:55:26:12:c3:ce:f2:3b:a9:34:
b4:d5:a8:c0:01:69:25:89:b0:4e:94:af:df:66:50:f5:76:67:
50:82:6c:0e:86:a0:c3:89:3d:1b:a8:8a:a8:5f:48:ee:90:e4:
7b:f8:ba:5b:bd:83:20:3b:cd:1b:65:ea:41:a8:03:43:fc:89:
a3:44:76:cc:a9:df:38:51:c0:2d:d5:77:67:bb:4d:af:0c:df:
df:4d:b3:e3:61:33:9d:b0:46:8b:ee:61:74:28:d5:43:09:7e:
1b:41:b1:e4:59:29:3e:ca:e5:32:8d:4a:6e:6d:fa:a3:b0:cd:
de:f1:8a:e3:6a:2a:1d:34:3b:ef:73:2b:f9:e0:21:7f:2d:e0:
e3:12:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:45:29 2026 by rpki-client