
$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
File: 952E367CCE60CE462735A409663E7DE3B0470E97.mft (raw, json)
Hash identifier: ms9JCD/7lnMPQmhBmIcumlYKGDy5/UGuEaoIMlKrb/U=
Subject key identifier: 29:10:03:FA:55:7B:6A:47:B9:E1:76:DA:F7:26:1E:CA:B2:CF:FF:72
Authority key identifier: 95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
Certificate issuer: /CN=952E367CCE60CE462735A409663E7DE3B0470E97
Certificate serial: 5312B63D12171A50839F40D19CE3278BB85985EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
Manifest number: 6D
Signing time: Wed 08 Jul 2026 08:59:10 +0000
Manifest this update: Wed 08 Jul 2026 08:54:10 +0000
Manifest next update: Thu 09 Jul 2026 10:10:10 +0000
Files and hashes: 1: 952E367CCE60CE462735A409663E7DE3B0470E97.crl (hash: 6A3Av+YGhr9CSXCeWQGWGXg2kgWbYL8SnOvQVN6FC5o=)
2: 34352e362e3132382e302f32322d3332203d3e20323636303632.roa (hash: +QkLsURiy3BTvubhLZKKzhgordViFOx6F12ZuwuFJjg=)
3: 323830343a333966383a3a2f33322d313238203d3e20323636303632.roa (hash: takW0mXB06WO9vEwuFO68z+5UDiAGVideGG60HppjIA=)
4: 34352e342e3133322e302f32322d3332203d3e20323636303632.roa (hash: xQA94nCA0Qi8N28ZaHpj6C3/5aZy8e1p2I3wfeGE+ic=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 10:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:12:b6:3d:12:17:1a:50:83:9f:40:d1:9c:e3:27:8b:b8:59:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952E367CCE60CE462735A409663E7DE3B0470E97
Validity
Not Before: Jul 8 08:54:10 2026 GMT
Not After : Jul 9 10:10:10 2026 GMT
Subject: CN=291003FA557B6A47B9E176DAF7261ECAB2CFFF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:38:38:0a:a6:38:f8:d5:e1:0f:37:04:59:af:
3b:2a:04:93:b6:3f:87:78:6f:43:f9:93:a8:ff:02:
64:a7:87:24:77:7b:a0:c7:46:10:b9:ea:70:2c:7f:
e9:f6:92:cb:5d:32:c0:7a:e0:bc:24:28:19:85:3d:
1c:35:59:8b:59:20:86:de:3a:e6:f7:a9:57:57:ad:
cb:c2:42:2a:09:3e:3c:0a:ed:7a:d2:12:96:84:e3:
86:70:39:b9:cc:c2:0b:3b:7b:b3:3d:e5:ca:b6:79:
d7:7c:6d:b1:37:24:05:07:5c:28:65:5e:b4:ae:6d:
34:0b:76:6d:04:43:bc:5c:0c:6d:0b:04:ec:c1:7a:
37:41:b1:ad:6f:fe:68:cc:85:60:76:1e:16:60:2c:
d8:b4:49:e0:96:8b:7c:39:15:b0:94:57:57:72:55:
a7:d4:78:81:2d:62:2e:90:df:6d:c4:92:67:30:ff:
83:c0:fc:20:c6:ce:1b:11:d0:4b:d7:57:6b:2c:4b:
6a:05:cc:88:34:df:2b:f8:fa:1d:48:77:d2:04:c7:
44:34:ea:49:4c:8a:09:aa:ac:e1:51:c8:26:7b:30:
72:43:9b:45:2e:93:76:9c:30:f7:75:65:80:c1:e3:
38:8d:c7:2a:84:a8:2c:ee:ee:9a:50:bb:66:13:3e:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:03:FA:55:7B:6A:47:B9:E1:76:DA:F7:26:1E:CA:B2:CF:FF:72
X509v3 Authority Key Identifier:
keyid:95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:da:bc:a7:a6:20:60:e7:41:4d:c6:65:97:37:34:4c:01:
84:fe:9b:fb:d6:1f:b6:4a:da:10:eb:6e:cd:e6:44:83:1e:05:
ac:e8:0a:49:6d:73:0c:a8:f4:c8:3b:c1:fb:32:49:25:91:c3:
62:37:2b:fd:f8:93:41:6b:5b:51:52:6f:21:2e:ae:27:cb:f1:
a2:96:56:29:a6:7c:14:a7:fe:79:70:a6:31:55:9d:0c:40:93:
1e:9b:5f:bd:5c:16:64:30:f8:52:a8:bd:c5:39:ce:65:68:e1:
60:e3:9d:3c:02:cf:d3:6e:c6:60:9d:e0:b2:73:23:37:4a:46:
ce:97:3f:f0:0b:f3:80:f6:96:ca:89:28:5c:7d:d6:de:7c:10:
cf:c9:bc:f9:e6:ee:a1:ee:17:9f:9c:21:d8:65:cd:2f:9c:64:
c6:8e:d3:42:13:a5:67:b0:92:53:cb:e1:be:ec:e8:f3:90:49:
32:16:fc:6d:85:24:1c:5a:a6:ad:bb:50:00:e9:08:e4:c2:08:
bd:c0:88:f3:5a:77:ab:c4:1c:8d:5b:6b:82:0a:64:1c:ed:e3:
f3:f6:cc:4e:e4:83:69:1d:ad:df:1c:c4:cc:96:35:7d:ac:03:
e3:3f:4b:cb:53:b6:77:66:70:4b:32:f3:a1:f9:2d:de:e9:ad:
06:31:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:24:16 2026 by rpki-client