
$ rpki-client -vvvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft
File: CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft (raw, json)
Hash identifier: wnLMJAhaKfGNYa3+hByTpemUXYRWzPYyYpaLhyyyukI=
Subject key identifier: BD:71:35:53:90:5F:F8:06:0F:79:A4:FA:E6:A6:4C:AE:8D:B7:06:A7
Authority key identifier: CD:E3:44:3C:DA:9A:EB:85:77:79:86:24:4D:C0:A5:7E:03:CA:F6:70
Certificate issuer: /CN=CDE3443CDA9AEB85777986244DC0A57E03CAF670
Certificate serial: 1BDCA317BA2621017C5603951434E04EF1193C46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft
Manifest number: 7D
Signing time: Thu 08 Oct 2026 05:02:04 +0000
Manifest this update: Thu 08 Oct 2026 04:57:04 +0000
Manifest next update: Fri 09 Oct 2026 09:01:04 +0000
Files and hashes: 1: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (hash: d9k822rzWWPdaMed/pSQEKphSXYzwkbTzhe5u9ihAI8=)
2: 323830343a353864303a3a2f33322d3438203d3e20323638313531.roa (hash: /ejf4iVIBgbA5T1HaexH7/L5IJZZLY0vmi9rfrefZ38=)
3: AS268151.asa (hash: UJ8ebnSa3NmRVjvjmm+ShMXoIiFjO1VdVsMcz4BxTIQ=)
4: 3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa (hash: nLEPx2tOTOOPPzhtCLUZ6BwAfW6zPTYc2MuxdBcfDvM=)
5: CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl (hash: NcPairsqS8+0/KV9DfNz/W+egSyJnYir9exEyFC9GUw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl
rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 09 Oct 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:dc:a3:17:ba:26:21:01:7c:56:03:95:14:34:e0:4e:f1:19:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDE3443CDA9AEB85777986244DC0A57E03CAF670
Validity
Not Before: Oct 8 04:57:04 2026 GMT
Not After : Oct 9 09:01:04 2026 GMT
Subject: CN=BD713553905FF8060F79A4FAE6A64CAE8DB706A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:97:d3:99:2b:98:ce:be:46:f6:c8:84:a8:
f6:5d:e8:0f:af:ec:7a:64:57:81:6e:bc:3b:4b:e1:
59:70:ba:35:44:b5:53:ad:a4:d3:03:eb:f9:49:f7:
6a:ba:e6:4b:2a:7f:52:c5:fd:9c:51:b9:9c:7f:1c:
0c:8b:c3:8a:1c:eb:56:fb:82:b7:eb:fe:f9:66:8b:
d5:10:d0:7d:b2:de:49:90:5b:6f:76:8f:1b:5e:c7:
74:0a:e4:43:14:4b:92:68:56:26:cf:43:ed:b1:bb:
0c:8e:4c:0b:64:88:60:fd:a5:f4:b1:ac:5a:1c:d0:
d1:62:68:1d:ec:2a:43:99:ee:31:86:4b:1d:38:7b:
cb:09:14:8d:25:4f:33:98:f5:ce:ba:20:7a:3a:84:
1f:fe:e0:f8:39:47:03:45:24:e1:d5:bc:ac:ee:76:
99:1e:90:6d:52:b2:59:2d:cb:17:04:02:31:ed:10:
c9:86:df:49:e5:17:5a:ae:98:a6:ca:81:18:dd:c8:
38:db:0c:87:60:0c:8c:c4:e3:0c:14:04:6a:4d:d1:
1f:41:6d:87:4f:0c:ba:1a:6d:02:57:d8:df:ba:75:
99:01:19:0c:01:b7:f9:7f:fb:39:08:f4:94:fc:eb:
d4:29:58:db:7e:2c:dd:72:e3:83:d0:3d:2c:d7:b6:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:35:53:90:5F:F8:06:0F:79:A4:FA:E6:A6:4C:AE:8D:B7:06:A7
X509v3 Authority Key Identifier:
keyid:CD:E3:44:3C:DA:9A:EB:85:77:79:86:24:4D:C0:A5:7E:03:CA:F6:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDE3443CDA9AEB85777986244DC0A57E03CAF670.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/CDE3443CDA9AEB85777986244DC0A57E03CAF670.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:8e:e4:3a:1f:46:42:d3:35:a2:26:60:9a:46:17:0a:af:
39:08:e1:b5:d6:c9:75:84:87:5b:cb:e2:d5:19:15:d3:36:07:
dd:fe:c0:c9:21:78:b5:fb:97:c8:f5:5a:4d:e2:9d:e0:d6:53:
7d:e1:2d:37:54:d2:7a:3f:5a:1d:66:b0:2a:4b:ca:2e:74:bf:
81:9b:41:02:7c:cc:6e:5f:87:03:72:3c:3c:7e:21:9f:52:db:
75:36:fa:ea:6b:10:1b:d6:42:f4:13:67:17:ef:98:16:36:5d:
23:99:81:34:c5:84:7f:8b:99:66:a2:42:e1:ff:d0:6c:c8:ad:
c1:85:93:76:61:1c:21:69:b0:ef:2e:81:56:df:d9:05:c3:c1:
30:97:37:e8:62:5e:87:1b:4a:dd:ec:9b:63:6d:0f:72:71:07:
88:2e:34:85:9a:31:e0:b5:6d:c0:41:63:2c:b4:b2:36:0e:c3:
7b:1c:28:73:1d:de:ce:36:1a:7a:b5:e7:26:33:3e:7b:b6:ef:
7b:56:f2:50:c0:fd:69:4f:6e:91:1b:f3:07:b8:ab:4e:b3:28:
7f:8e:f4:24:68:8f:4a:6f:7d:23:6a:cb:74:14:99:79:ed:4f:
f2:61:6c:6b:0c:95:1d:13:7c:76:06:f2:11:ab:8e:6b:51:2f:
6e:72:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:37:25 2026 by rpki-client