
$ rpki-client -vvvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
File: D1FFDF44055E16082D529730642377D751467152.mft (raw, json)
Hash identifier: iihMFmu0/1i/BO2L6YMpKXogYkuSG+VrGPuQG1RHYTY=
Subject key identifier: 38:B3:45:15:A2:5A:03:C5:D2:C3:F6:56:37:0F:26:09:A0:23:E6:EF
Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152
Certificate serial: 1158258DD3F4B405CF92C4C60FE38D454AB39FF4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
Manifest number: 038B
Signing time: Thu 29 Oct 2026 03:43:11 +0000
Manifest this update: Thu 29 Oct 2026 03:38:11 +0000
Manifest next update: Fri 30 Oct 2026 06:39:11 +0000
Files and hashes: 1: D1FFDF44055E16082D529730642377D751467152.crl (hash: AT5G6KTYSwNIZ5/k4b0vDmrEDqHizzSyelZXv4+55rw=)
2: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: t5tNFwe25U6jKQVbVgorva9/SqGbzLjybEV5jWUJPVw=)
3: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: ns7G6VK1/plGO1mYAntPKP/s7ZQowNY4gJ+cZyuureA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 06:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:58:25:8d:d3:f4:b4:05:cf:92:c4:c6:0f:e3:8d:45:4a:b3:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FFDF44055E16082D529730642377D751467152
Validity
Not Before: Oct 29 03:38:11 2026 GMT
Not After : Oct 30 06:39:11 2026 GMT
Subject: CN=38B34515A25A03C5D2C3F656370F2609A023E6EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:d8:b1:9a:7c:2a:03:ff:36:03:27:31:7f:
5f:06:b0:8f:bd:d6:a6:12:a0:37:0f:58:8c:a6:73:
d3:c5:2d:fa:97:15:ca:cf:63:25:81:32:c9:bd:b7:
c9:2c:b0:fe:42:ae:8e:51:64:9d:6c:49:9b:64:ee:
d5:89:b3:42:2f:e9:53:8a:3b:70:70:11:c3:c8:d2:
3b:bf:3e:c2:87:e8:6a:b2:2c:08:9b:61:93:ac:92:
a7:a5:bb:11:8a:01:29:1e:35:67:aa:d2:a6:56:cf:
a2:94:17:af:d3:46:ee:0d:64:7a:de:1f:c1:3d:3e:
f3:ec:09:6d:cb:2e:06:ff:16:03:e7:a7:14:4e:a7:
59:68:ba:81:a8:85:8a:8b:01:7a:d2:09:ae:c9:00:
c0:1d:53:9e:ee:96:1d:07:fd:22:fa:b0:37:3b:d7:
7b:e5:18:a0:87:4d:ad:25:c8:55:13:d9:a8:b7:32:
32:ce:ce:8c:2c:e6:37:59:74:9b:88:cb:9e:05:c7:
e1:e4:96:88:cb:5f:6c:0a:70:a9:e8:0f:44:6a:b1:
a9:e1:34:67:ed:b2:eb:65:9b:90:a4:99:0d:95:f2:
c5:a2:30:6b:ac:27:20:54:66:57:7a:89:17:6b:b7:
67:5b:5d:10:aa:a9:19:7b:c1:98:f0:03:be:05:50:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B3:45:15:A2:5A:03:C5:D2:C3:F6:56:37:0F:26:09:A0:23:E6:EF
X509v3 Authority Key Identifier:
keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:92:ca:e5:ad:5f:29:34:b3:79:ad:4c:4d:ea:9d:c4:9b:
1f:af:8e:4b:ec:40:6b:ad:da:f3:27:17:25:b9:e3:32:d3:d3:
de:5b:95:6a:8a:52:9d:69:75:e7:50:9e:51:c1:f3:55:a6:be:
b8:32:7b:a8:6c:58:05:13:e9:82:d5:f4:3c:29:12:d4:97:ff:
08:99:85:af:0c:ee:9a:0e:12:ff:cf:5c:60:b8:80:3f:94:29:
68:3e:10:05:ea:8a:4b:5f:ab:4b:19:0b:71:85:60:9a:02:e5:
c8:77:8b:27:86:3f:db:18:aa:e3:fc:78:56:2e:2d:aa:de:6f:
98:e8:f2:a8:5d:4b:3d:8a:f5:33:b9:b6:d6:1e:fc:91:74:7a:
5e:10:28:9b:e4:05:aa:0b:75:18:c5:e5:af:fc:fd:74:a2:5b:
a8:c3:63:83:b1:51:f6:7b:06:c6:e8:6a:6b:5f:f5:e6:a7:a3:
2f:b5:44:38:f2:a7:75:27:4a:50:7e:64:72:be:45:38:ea:46:
81:c7:0f:88:e0:93:1b:82:e2:6c:0e:51:9b:e0:e9:7e:2b:06:
f3:28:4c:c5:de:56:1e:fa:bc:98:fd:ba:d4:9a:74:d9:78:2b:
c1:12:d2:96:dd:d0:e9:63:2e:16:d9:96:54:ae:47:f8:e8:16:
68:cc:c4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:04:41 2026 by rpki-client