
$ rpki-client -vvvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json)
Hash identifier: W6y/2ocFg+ZbF47ALusiLPWvKfNtbNHuDhoU8dTQO2E=
Subject key identifier: EF:E7:26:3A:21:BB:FA:CF:70:78:DF:E8:48:88:6F:D9:28:31:28:08
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial: 50D665A16CBC86A1F03DB1FABDBC7C64941D5E61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
Manifest number: 0451
Signing time: Sat 22 Aug 2026 22:52:53 +0000
Manifest this update: Sat 22 Aug 2026 22:47:53 +0000
Manifest next update: Mon 24 Aug 2026 00:17:53 +0000
Files and hashes: 1: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=)
2: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=)
3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: C9njvTLCQbxOI9gsshWXcFUOrnp0AZZZd4X7KfQvOdQ=)
4: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 00:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d6:65:a1:6c:bc:86:a1:f0:3d:b1:fa:bd:bc:7c:64:94:1d:5e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Validity
Not Before: Aug 22 22:47:53 2026 GMT
Not After : Aug 24 00:17:53 2026 GMT
Subject: CN=EFE7263A21BBFACF7078DFE848886FD928312808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:97:03:47:5f:6b:aa:8e:09:03:04:60:e2:
22:46:69:b0:60:fb:8c:f4:f6:45:b9:dc:ee:ca:b9:
49:67:f4:cd:93:98:2b:50:93:df:d4:c4:75:e2:bf:
94:0a:4c:68:70:ab:00:d5:42:d3:18:b0:01:91:27:
a1:36:82:cb:f2:e8:34:d1:40:12:1b:a5:d9:72:7a:
a3:81:4d:b3:39:9a:64:78:78:e9:cc:d7:0b:58:98:
c1:b0:5f:4d:5a:5a:1a:74:ec:dd:b8:85:57:8d:8d:
32:39:fb:57:44:12:37:1d:8a:8e:b3:16:07:57:8d:
0d:17:b3:bf:79:ea:2e:9b:e3:d0:46:1b:69:f3:37:
10:07:60:a6:c9:2e:c4:a6:8f:9c:99:2c:5a:c8:04:
4c:25:ed:c9:8d:27:f0:b0:e3:9f:a9:b6:91:22:ce:
51:c6:71:43:92:47:eb:fe:44:ad:4a:f8:62:78:f8:
c3:20:6a:9b:83:7f:24:2c:f3:27:96:ec:ac:c8:a6:
0a:35:fa:69:12:ec:38:93:eb:d5:21:d3:03:58:63:
90:74:73:04:82:83:89:83:23:79:a2:69:74:ca:45:
59:f4:80:57:11:88:c7:fd:b6:b9:42:c4:97:5c:bf:
3c:74:95:1f:7e:d0:e5:1d:0d:60:0d:a4:90:24:2f:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:26:3A:21:BB:FA:CF:70:78:DF:E8:48:88:6F:D9:28:31:28:08
X509v3 Authority Key Identifier:
keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:eb:cb:9c:d8:67:57:fe:e0:0c:bd:3c:f6:7f:1e:5d:9e:9c:
48:a1:1b:8c:76:1e:71:86:fa:d2:a7:5b:73:9f:c6:d5:6f:0a:
44:78:91:ba:c6:f6:64:6e:af:cb:68:19:06:55:8e:47:a1:80:
14:f6:2b:1a:dc:61:15:dc:c1:fb:1d:60:b9:a8:f6:49:7f:e0:
ad:24:90:74:63:04:76:66:ce:13:ab:c5:57:fc:58:d4:1a:fe:
fa:f9:b8:51:c2:b0:20:f4:de:71:3a:5c:1b:d1:9a:61:84:d4:
40:69:01:55:dd:67:07:b1:c1:a3:83:7b:c2:26:10:2b:5b:85:
82:4f:1b:c9:c7:92:a2:12:79:60:59:4e:23:91:8d:31:f8:06:
89:dd:bc:c4:5b:39:c9:cc:b9:6e:ac:98:d8:b8:99:b1:e7:c1:
a8:50:86:34:6a:4c:8c:6b:f1:13:40:ea:2a:f8:17:aa:62:b8:
16:d3:d6:d9:3d:bf:06:4d:b7:6f:be:85:e0:4c:97:1b:4c:e8:
5f:01:d0:d2:4e:c6:8a:e6:b3:11:11:f3:8d:cd:23:ea:5d:01:
4c:78:0f:46:3d:e1:50:8d:5b:78:89:be:c1:6e:e8:f4:92:60:
17:0b:6f:6b:46:f0:12:5e:bf:ed:09:40:a4:a6:ba:aa:2b:ef:
bb:6a:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:04:34 2026 by rpki-client