
$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
File: CA46B42FB0BBF428F33303D970954360F960AD2B.mft (raw, json)
Hash identifier: tQ7UDhyNPu8J+JR/xZHuvKgDT7HoLoupJvnvxyj7Vak=
Subject key identifier: 86:A3:3A:57:E6:A4:B5:67:67:E9:F7:87:3B:8A:B0:84:79:8B:AC:D8
Authority key identifier: CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
Certificate issuer: /CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Certificate serial: 4B491C6F7A3D911F3B0CB949BFFBA34810415C83
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
Manifest number: 0127
Signing time: Sun 24 May 2026 05:23:45 +0000
Manifest this update: Sun 24 May 2026 05:18:45 +0000
Manifest next update: Mon 25 May 2026 07:00:45 +0000
Files and hashes: 1: 323830343a353936633a3a2f33322d313238203d3e20323638373031.roa (hash: b7CXIsbZNr28fAIIDRDKKYTvdSl4ceaJ4DVvhRxvTsI=)
2: CA46B42FB0BBF428F33303D970954360F960AD2B.crl (hash: OT0Cfq+dwCqsba1OlWcnexkebIGLPS/6yh1wrMjGfqY=)
3: 34352e3136392e3137322e302f32322d3332203d3e20323638373031.roa (hash: 6NV71V0AYxrnpGbnAP43kbdLvtfm5e/BEdmGARmJlT0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:49:1c:6f:7a:3d:91:1f:3b:0c:b9:49:bf:fb:a3:48:10:41:5c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA46B42FB0BBF428F33303D970954360F960AD2B
Validity
Not Before: May 24 05:18:45 2026 GMT
Not After : May 25 07:00:45 2026 GMT
Subject: CN=86A33A57E6A4B56767E9F7873B8AB084798BACD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:55:76:be:76:55:63:39:b2:e5:14:f6:ff:
77:45:e2:52:08:32:8f:51:8c:8e:e0:fa:10:17:be:
48:44:f0:c3:16:97:09:bb:31:e7:84:27:4b:b5:77:
ea:46:6f:23:d8:3c:d0:43:2b:84:86:0a:c0:b3:26:
37:37:a8:77:48:42:86:c2:80:9e:74:6a:cf:63:6d:
4c:38:ae:ab:17:42:fb:65:1f:ff:be:b9:4c:35:ef:
ad:f1:c8:79:99:11:ed:fb:99:55:09:9c:46:96:d6:
9d:2f:71:73:f2:bb:9e:4d:05:df:f7:0e:5a:7f:82:
6a:a3:40:a8:e1:a9:31:df:1f:35:01:d4:b1:8c:79:
15:5f:4e:27:97:d4:53:5a:6f:da:31:f5:23:71:7a:
a4:bc:39:19:a4:45:e4:13:44:87:18:29:c6:89:9a:
ab:98:88:fa:64:16:41:78:72:e2:b4:bc:77:a2:ad:
02:2a:f5:80:c1:b3:89:52:a7:03:34:65:96:57:95:
96:9a:e6:0d:ee:af:7f:c8:5f:d3:6e:86:9d:72:b5:
8e:e6:39:f4:8a:b6:9d:05:ed:b9:96:28:e9:c1:99:
55:a6:ba:ee:a6:47:92:98:7c:80:8b:78:44:c1:1b:
2a:71:aa:98:9a:10:3f:16:3a:33:cf:c3:2d:b9:5c:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:3A:57:E6:A4:B5:67:67:E9:F7:87:3B:8A:B0:84:79:8B:AC:D8
X509v3 Authority Key Identifier:
keyid:CA:46:B4:2F:B0:BB:F4:28:F3:33:03:D9:70:95:43:60:F9:60:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA46B42FB0BBF428F33303D970954360F960AD2B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/CA46B42FB0BBF428F33303D970954360F960AD2B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a2:5c:d8:95:2c:22:78:68:83:7f:d8:34:06:a8:00:5a:fd:
97:65:3a:82:dd:c1:25:94:ce:e0:75:9d:6c:70:93:de:7a:4f:
4e:91:89:a3:d7:e3:8e:ad:90:12:28:08:35:69:57:53:d6:d9:
29:15:05:57:a8:39:94:df:5e:42:24:09:df:0a:ea:e5:3b:aa:
78:ed:36:7b:02:0f:43:b1:04:73:8e:a5:0a:f8:59:08:ce:55:
17:24:e4:56:5a:10:46:98:1a:b6:15:18:a9:f2:5e:a1:69:e2:
3e:4d:e9:9b:59:dc:b5:7d:62:09:3b:93:2e:20:36:0c:e0:cf:
ca:c3:d6:9e:be:ae:ea:a6:af:77:6d:ea:f5:ca:66:c5:a1:f0:
de:4b:cb:29:2a:1f:b8:be:da:9e:72:f0:8b:64:b5:e3:d8:aa:
47:6a:05:5c:5e:8a:83:57:5a:45:a0:28:50:19:6f:1e:60:21:
ad:21:a8:2d:23:ba:fa:b0:aa:be:fe:72:b1:7d:f6:60:d5:eb:
89:8c:2b:ea:80:b0:9e:fe:24:d0:61:9a:ad:33:03:13:9f:63:
b7:c3:6e:68:fd:c6:8e:99:57:74:6b:12:20:41:0c:af:e5:41:
39:66:54:d7:85:f6:c3:b8:0a:de:ac:9e:6c:06:3e:9c:6f:61:
dc:00:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 12:52:08 2026 by rpki-client