
$ rpki-client -vvvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
File: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft (raw, json)
Hash identifier: YuBb3FCi8F8xatZOdpmYID9iESLoCm9M+5+iw7d4O24=
Subject key identifier: 39:3E:C6:9E:3E:33:55:A8:6F:C8:5F:D8:00:20:2A:4C:53:CB:17:64
Authority key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
Certificate issuer: /CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
Certificate serial: 74ABB90FA98F38D10D659BA87FC05DEA13521016
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
Manifest number: 0488
Signing time: Mon 24 Aug 2026 00:23:10 +0000
Manifest this update: Mon 24 Aug 2026 00:18:10 +0000
Manifest next update: Tue 25 Aug 2026 03:50:10 +0000
Files and hashes: 1: 34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (hash: rwNV2Ulfd4Vad/l+ejClrnvnI1sAET5fICE40mt6p4Y=)
2: 323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (hash: Mt/9OzLFKzrWHsXUu8GeZATCuyz5l8+TGv1fTYbFyaE=)
3: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl (hash: kATKkSrR4cycA3/AZCf58WDWEjkq2D9gdY9B74qFvzU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl
rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 03:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ab:b9:0f:a9:8f:38:d1:0d:65:9b:a8:7f:c0:5d:ea:13:52:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60
Validity
Not Before: Aug 24 00:18:10 2026 GMT
Not After : Aug 25 03:50:10 2026 GMT
Subject: CN=393EC69E3E3355A86FC85FD800202A4C53CB1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:0c:db:6f:e7:f7:44:06:b8:b0:15:74:f6:
e4:4e:ff:d2:10:7a:19:c7:c3:47:be:9c:53:e3:a8:
77:82:0a:e7:f7:e0:11:aa:55:5b:a7:e7:7c:a8:ad:
d4:c5:85:19:5a:68:cf:f1:e8:e3:bd:21:bd:49:36:
ec:5e:e7:b0:1c:d2:22:27:45:3e:df:80:7a:28:71:
11:4a:f1:e7:87:f1:e9:b1:08:d2:dc:b5:67:f4:4b:
7a:e9:6e:2e:1a:07:99:05:64:12:3b:41:fd:b0:16:
5b:28:2a:fd:5a:cf:35:f3:43:7e:7b:e3:7c:a9:c1:
dd:e5:f7:90:b3:cc:7b:b6:6f:f7:a9:dd:1b:8c:f6:
2f:a0:67:ff:53:fc:0c:89:d9:f0:00:8c:6c:55:0c:
66:ef:27:20:a6:fa:76:4d:36:d6:06:13:8a:8f:0c:
55:82:46:d5:60:e4:59:fd:a5:00:53:8c:a2:50:3e:
1d:e2:24:77:77:00:b0:8e:d8:3c:46:1d:6f:c9:8d:
bd:27:c4:63:bf:a2:a7:e4:9f:16:65:1e:1c:32:7c:
a9:99:69:3f:2e:71:e6:25:a2:87:50:c9:c9:af:2b:
47:52:d2:c5:03:fa:50:16:e4:40:93:44:f8:1b:8b:
15:0e:49:00:d2:55:0b:16:cc:e6:0f:28:b0:ab:09:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:C6:9E:3E:33:55:A8:6F:C8:5F:D8:00:20:2A:4C:53:CB:17:64
X509v3 Authority Key Identifier:
keyid:9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:07:a8:4d:95:77:1a:95:42:e9:39:25:a2:a3:6a:25:03:fa:
e8:78:33:58:5c:32:8c:cd:56:3f:95:82:3b:e5:9d:2c:88:19:
a8:a0:d9:41:33:05:7b:e6:98:a7:a4:04:6f:30:e1:7e:c4:46:
6e:3b:db:b9:f0:37:20:67:a7:8d:d9:d3:47:3e:b0:03:fb:14:
d7:bd:b3:b9:d1:01:a7:af:f2:d8:31:4a:7d:15:f8:d2:ed:73:
bb:2e:97:6e:d4:e6:ba:94:74:a5:73:4e:ce:f2:9c:fb:ca:42:
7d:8a:42:74:47:71:ad:d7:a6:02:6b:38:3a:f8:23:da:a7:bb:
6a:ca:aa:37:51:d8:11:9f:07:d8:5b:24:a5:f7:58:ec:8c:58:
18:a2:b1:a1:9d:9a:91:7c:35:67:f7:ee:fe:df:fe:75:fc:74:
28:d5:9c:d5:bd:c3:10:69:3a:5a:25:0e:f6:0a:14:e7:61:75:
83:38:b1:59:b2:2e:82:b0:d6:86:27:5e:97:10:32:0e:dc:42:
db:5f:6d:41:d9:1a:d5:14:69:e5:83:85:4b:08:80:72:ac:a9:
3d:d7:52:75:6d:ad:54:02:b0:e7:20:14:5b:bc:0e:ab:fc:87:
5f:ff:82:d4:f0:fb:9c:9a:a9:db:04:5f:5b:f7:26:31:cc:02:
4e:98:49:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdKu5D6mPONENZZuof8Bd6hNSEBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFBNjkzMjI0RTc4NUYzRDAzNzZGQTAxQ0NENDZFN0E3
REE0Q0U2MDAeFw0yNjA4MjQwMDE4MTBaFw0yNjA4MjUwMzUwMTBaMDMxMTAvBgNV
BAMTKDM5M0VDNjlFM0UzMzU1QTg2RkM4NUZEODAwMjAyQTRDNTNDQjE3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+gzbb+f3RAa4sBV09uRO/9IQ
ehnHw0e+nFPjqHeCCuf34BGqVVun53yordTFhRlaaM/x6OO9Ib1JNuxe57Ac0iIn
RT7fgHoocRFK8eeH8emxCNLctWf0S3rpbi4aB5kFZBI7Qf2wFlsoKv1azzXzQ357
43ypwd3l95CzzHu2b/ep3RuM9i+gZ/9T/AyJ2fAAjGxVDGbvJyCm+nZNNtYGE4qP
DFWCRtVg5Fn9pQBTjKJQPh3iJHd3ALCO2DxGHW/Jjb0nxGO/oqfknxZlHhwyfKmZ
aT8uceYloodQycmvK0dS0sUD+lAW5ECTRPgbixUOSQDSVQsWzOYPKLCrCcwtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOT7Gnj4zVahvyF/YACAqTFPLF2QwHwYDVR0j
BBgwFoAUmqaTIk54Xz0DdvoBzNRuen2kzmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURZWkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhn
QVUvMS85QUE2OTMyMjRFNzg1RjNEMDM3NkZBMDFDQ0Q0NkU3QTdEQTRDRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQTY5MzIyNEU3ODVGM0Qw
Mzc2RkEwMUNDRDQ2RTdBN0RBNENFNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NURZWkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhnQVUvMS85
QUE2OTMyMjRFNzg1RjNEMDM3NkZBMDFDQ0Q0NkU3QTdEQTRDRTYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAageoTZV3GpVC6TkloqNqJQP66HgzWFwyjM1WP5WCO+WdLIgZqKDZQTMFe+aY
p6QEbzDhfsRGbjvbufA3IGenjdnTRz6wA/sU172zudEBp6/y2DFKfRX40u1zuy6X
btTmupR0pXNOzvKc+8pCfYpCdEdxrdemAms4Ovgj2qe7asqqN1HYEZ8H2FskpfdY
7IxYGKKxoZ2akXw1Z/fu/t/+dfx0KNWc1b3DEGk6WiUO9goU52F1gzixWbIugrDW
hidelxAyDtxC219tQdka1RRp5YOFSwiAcqypPddSdW2tVAKw5yAUW7wOq/yHX/+C
1PD7nJqp2wRfW/cmMcwCTphJTQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:44:17 2026 by rpki-client