
$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json)
Hash identifier: RqQpCTN6FU+Xbwunvuxl3Fqq/g+NpI9ToHDDYRT5kxA=
Subject key identifier: 59:C2:2E:2C:10:04:B4:91:2F:24:71:23:8F:7F:66:48:BB:4F:80:21
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial: 0B5DAD744DA2C25E97F7A20FD2DB3F4427AD5ED8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
Manifest number: 03D8
Signing time: Wed 08 Apr 2026 09:21:13 +0000
Manifest this update: Wed 08 Apr 2026 09:16:13 +0000
Manifest next update: Thu 09 Apr 2026 09:48:13 +0000
Files and hashes: 1: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: xAJr0E9r4TKMxFOmg5cmoGsA01fiIOH+qeMsQLuKev4=)
2: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: udfpslgXWllHlVhUhwYULsf1Bac3lsTLTBZvpUx96iA=)
3: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: CyUI8of5m5YEjvjA5gqPVH6tckKAIXax08sa8/17gbs=)
4: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: vZGx2lypgvST/TN3BIHEMwmdhDBKDrZm/OU2px4pQ/U=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 09:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5d:ad:74:4d:a2:c2:5e:97:f7:a2:0f:d2:db:3f:44:27:ad:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Validity
Not Before: Apr 8 09:16:13 2026 GMT
Not After : Apr 9 09:48:13 2026 GMT
Subject: CN=59C22E2C1004B4912F2471238F7F6648BB4F8021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:2e:db:fa:f6:42:37:ee:27:6f:4f:3d:d0:
8d:b1:18:74:1b:6e:18:e6:d7:b7:f4:eb:c2:c1:50:
81:b9:2e:2b:fa:52:4a:df:ba:af:00:a7:8a:40:ec:
b5:dc:d5:68:a3:4b:15:d4:a0:63:35:64:bf:22:02:
b8:62:eb:38:0e:75:fa:12:18:75:85:38:34:2a:35:
4d:2b:ee:ce:32:85:22:aa:be:df:7e:f1:31:fd:89:
16:be:76:fe:62:88:73:05:f6:09:9b:70:0c:73:e2:
29:e9:f6:65:71:d3:3c:f8:88:cc:35:d9:c4:2c:8d:
38:4b:0c:23:8b:4d:6c:a0:7e:74:54:26:9c:9b:5a:
a9:ec:6a:14:11:bc:7b:3a:63:3e:49:7a:1e:47:c5:
71:c3:5b:b5:8e:ce:cf:34:a8:9b:fe:67:c7:f5:a3:
0c:62:52:e9:bc:c8:b7:93:3d:f2:8a:3e:9b:91:0c:
c6:43:cd:b6:db:07:db:4a:86:35:0e:32:da:5b:f0:
62:41:3d:4f:3c:00:b6:69:c7:a3:02:72:bc:e3:43:
3d:45:79:4b:79:4b:cc:d8:4d:9b:ea:9a:37:58:51:
1d:9b:47:83:fa:ba:89:4e:80:bf:8f:f5:be:50:52:
67:95:cb:d9:1d:8d:2b:29:14:bc:9b:6a:cb:ef:ac:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:2E:2C:10:04:B4:91:2F:24:71:23:8F:7F:66:48:BB:4F:80:21
X509v3 Authority Key Identifier:
keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1a:a7:9e:a4:ce:68:74:00:bc:2e:e3:51:ce:d1:9c:25:3c:
14:b3:3c:a1:20:34:fe:6f:3e:d6:9d:25:06:16:91:11:a6:a7:
d6:72:bb:f9:c3:3b:27:36:bc:6e:6b:ed:9f:c0:48:07:6b:d7:
5b:91:4b:d2:d3:8c:37:de:af:88:1b:04:5c:99:00:ce:ca:b6:
78:92:d5:43:92:2d:84:13:b7:88:54:f2:ad:55:32:11:e9:f6:
d1:25:42:07:ca:8b:92:a0:69:2b:84:29:e4:7f:9d:63:e9:1f:
5a:a3:10:9b:74:41:1e:59:c4:5d:2d:7b:bf:a2:46:f0:68:9c:
29:69:b8:38:2d:06:f5:85:a8:11:56:c0:6e:82:5e:71:4f:e3:
63:29:2b:8c:63:72:8c:18:f6:e6:4d:36:b1:e3:fa:57:fd:bc:
65:78:2b:04:4e:ba:f5:c8:01:cc:5c:a3:99:62:b5:a6:f0:99:
1d:f1:db:c0:42:62:94:54:97:a1:62:38:d0:b2:4a:00:cc:c0:
cb:60:59:10:52:f7:9b:dd:a0:e5:6b:75:c0:8d:da:8d:22:3c:
6a:27:f7:83:ac:06:6a:cd:9d:35:a3:02:4c:43:e2:ce:67:f0:
77:ba:3a:47:52:c3:1f:5d:c3:1f:4f:ee:39:69:47:36:5b:56:
d5:d0:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:55:40 2026 by rpki-client