
$ rpki-client -vvvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json)
Hash identifier: KmXQ+WdPbYzLfrfFeyHSjGbgjgod78XSUICr2DIGzmU=
Subject key identifier: 6D:52:16:9D:BC:21:48:C4:16:B9:B8:C6:15:7F:34:6B:6B:57:4B:83
Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F
Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F
Certificate serial: 0C7444A59CA3A1E938A1A8203CE71414279E3564
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
Manifest number: 01A8
Signing time: Sun 01 Nov 2026 08:08:50 +0000
Manifest this update: Sun 01 Nov 2026 08:03:50 +0000
Manifest next update: Mon 02 Nov 2026 08:59:50 +0000
Files and hashes: 1: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: RVXmbc/9kblTGlS3Dc7iMtvqi/t567f7uC0raETHMOY=)
2: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=)
3: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=)
4: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl
rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 08:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:74:44:a5:9c:a3:a1:e9:38:a1:a8:20:3c:e7:14:14:27:9e:35:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F
Validity
Not Before: Nov 1 08:03:50 2026 GMT
Not After : Nov 2 08:59:50 2026 GMT
Subject: CN=6D52169DBC2148C416B9B8C6157F346B6B574B83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:4a:a0:36:a0:cc:df:18:75:ef:b3:55:e2:
1f:e3:e4:9d:03:1c:91:9a:84:37:82:6d:db:cb:1a:
3f:ff:54:c1:19:87:87:1f:13:e6:6b:87:53:fb:5f:
35:41:92:36:1c:ad:55:17:8c:57:38:ee:08:e8:8b:
fb:ae:f8:85:5a:89:d3:02:16:20:d8:f0:e5:77:d4:
89:62:28:ba:2b:00:35:22:c3:8a:04:ba:bb:0e:ed:
e9:38:6b:46:76:76:d0:cc:5d:e5:83:59:ec:8e:a6:
96:c9:09:3d:fc:a4:5c:16:c4:f6:c6:dd:3a:ad:6f:
40:13:16:5b:b7:5e:44:da:ae:d9:88:13:58:42:33:
0b:13:20:8c:3b:dd:e7:a4:fe:09:55:fb:5b:86:c9:
0a:36:f9:a1:f4:d0:bf:0a:f2:87:41:7d:85:c3:49:
c4:fb:36:29:4a:ff:9c:43:61:45:98:0f:04:15:d5:
e0:6e:b7:26:5c:54:dd:dc:30:76:a3:ac:bd:41:52:
24:4a:d4:9c:76:67:b4:dc:f7:5b:8a:08:10:67:78:
41:4a:7c:9f:1e:ef:04:69:34:51:62:ec:01:9d:ea:
4e:c2:c6:bf:b0:24:85:e9:be:e0:fb:0b:98:5d:b5:
9d:03:c1:f3:b1:46:b5:67:4a:32:31:74:f2:f1:d2:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:16:9D:BC:21:48:C4:16:B9:B8:C6:15:7F:34:6B:6B:57:4B:83
X509v3 Authority Key Identifier:
keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:8c:52:69:86:19:da:85:31:be:94:d4:37:d7:10:65:f1:
09:0e:25:2a:b0:67:39:47:c5:5f:e7:29:11:bb:8c:1d:c7:b5:
be:ed:37:cc:d3:95:64:14:d7:37:82:8c:53:8b:0a:c9:7a:ef:
5c:8b:fb:50:8b:5c:76:30:a6:b1:f7:17:cb:4c:9a:f7:80:5b:
94:62:31:e7:4c:03:18:7c:0f:da:2b:e4:2f:62:e4:51:4a:4b:
31:55:f4:a4:59:49:05:2e:ef:0a:66:c8:12:d3:df:5c:93:c6:
a2:ec:a9:e9:9a:6d:fe:ef:f9:59:d3:7f:fa:d0:e6:db:12:49:
91:00:48:f9:b5:a5:90:4d:12:b4:1a:a2:29:d9:38:21:a5:0c:
6a:d3:11:d2:2d:42:65:1d:7b:57:e2:c9:61:cd:f6:c4:f0:ef:
6b:5a:49:0b:26:aa:6d:0a:70:98:09:54:bf:6c:c7:fa:f5:78:
42:a3:df:23:3a:66:e8:70:8a:9c:ea:2e:cf:2e:e6:3a:9d:5c:
40:58:b3:70:57:da:80:48:65:0e:00:9d:06:b1:ca:30:b0:c4:
74:cf:3e:fb:a8:9e:e8:6d:87:9e:11:fc:dd:40:39:3a:17:cc:
4e:5a:fa:60:7c:29:56:34:d7:26:a3:5d:27:8c:66:f9:4c:65:
7a:61:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 12:06:35 2026 by rpki-client