
$ rpki-client -vvvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
File: 952E367CCE60CE462735A409663E7DE3B0470E97.mft (raw, json)
Hash identifier: oO2JU1Gyr8lGJh20kJ46WlP3Zv+4ET6pnphvl4h5v9w=
Subject key identifier: EC:99:F2:CB:FC:A2:05:90:0A:21:6A:21:47:1B:D3:5A:BD:6F:E6:2F
Authority key identifier: 95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
Certificate issuer: /CN=952E367CCE60CE462735A409663E7DE3B0470E97
Certificate serial: 1FCB4DF1DCF26126B679CD54499E40202DB3C70A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
Manifest number: AA
Signing time: Sun 23 Aug 2026 16:16:24 +0000
Manifest this update: Sun 23 Aug 2026 16:11:24 +0000
Manifest next update: Mon 24 Aug 2026 17:40:24 +0000
Files and hashes: 1: 34352e362e3132382e302f32322d3332203d3e20323636303632.roa (hash: +QkLsURiy3BTvubhLZKKzhgordViFOx6F12ZuwuFJjg=)
2: 952E367CCE60CE462735A409663E7DE3B0470E97.crl (hash: lmXO8rHuiyRQ1oIQavG66WjKKXVSWM5X0PNNiklojFk=)
3: 323830343a333966383a3a2f33322d313238203d3e20323636303632.roa (hash: takW0mXB06WO9vEwuFO68z+5UDiAGVideGG60HppjIA=)
4: 34352e342e3133322e302f32322d3332203d3e20323636303632.roa (hash: xQA94nCA0Qi8N28ZaHpj6C3/5aZy8e1p2I3wfeGE+ic=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 17:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cb:4d:f1:dc:f2:61:26:b6:79:cd:54:49:9e:40:20:2d:b3:c7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952E367CCE60CE462735A409663E7DE3B0470E97
Validity
Not Before: Aug 23 16:11:24 2026 GMT
Not After : Aug 24 17:40:24 2026 GMT
Subject: CN=EC99F2CBFCA205900A216A21471BD35ABD6FE62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:ff:30:63:11:10:fb:5b:45:42:f0:f8:e6:
71:e5:9d:54:c1:c1:0a:8b:65:b7:ae:4b:a9:61:e8:
ec:2a:d9:09:0b:5f:e0:35:d7:63:3b:63:2c:bd:ec:
03:83:63:08:d1:73:eb:fb:b7:4d:0a:a2:05:85:57:
26:f1:53:ff:2a:98:9a:09:db:f4:80:d3:4e:06:a5:
d0:83:15:1a:7c:44:94:32:f3:7a:44:12:bc:cd:77:
57:e7:f7:5c:df:26:28:b5:06:9d:a9:35:c4:69:05:
46:83:c2:4d:5e:c2:84:78:f3:c4:61:c1:b5:8e:19:
cb:08:14:47:6a:8b:8c:af:96:06:bc:87:d8:f5:a6:
96:7a:b4:08:f4:17:a0:19:1b:fa:28:2a:1a:8f:73:
7f:5e:12:fc:0b:3b:23:00:e8:d7:c9:a9:bc:56:42:
f4:57:4c:4a:04:eb:44:6a:ae:71:73:3f:fa:a2:5b:
c2:75:f7:b0:fb:93:50:ca:0b:15:f9:da:bf:fd:84:
39:4c:57:c9:20:90:83:90:91:42:3d:96:30:aa:fd:
f1:42:07:06:6c:6b:44:df:10:d4:0d:49:d1:5e:ab:
b6:88:ed:96:be:09:bc:f5:92:e5:e5:14:be:60:36:
56:b3:b3:9c:5d:eb:e6:c3:12:24:9b:50:05:97:af:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:99:F2:CB:FC:A2:05:90:0A:21:6A:21:47:1B:D3:5A:BD:6F:E6:2F
X509v3 Authority Key Identifier:
keyid:95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:71:35:33:95:12:af:81:ec:db:de:31:ca:80:1d:81:a3:4d:
e4:65:fe:f7:ff:01:2f:9f:2c:5c:34:2f:ee:7a:c4:87:fd:25:
37:2a:79:6d:42:71:78:6a:37:0e:90:dc:e9:b5:cc:09:5a:7f:
e6:f3:ca:88:4f:25:ef:e6:8a:1b:e8:45:da:c4:02:39:c9:c1:
a8:54:7d:87:53:f2:70:be:0a:c7:18:48:de:22:9c:eb:6b:50:
5c:ee:e7:cf:a2:1d:cc:46:7b:c4:dc:4b:89:f5:00:b5:5e:95:
d1:f6:e6:94:ba:b9:ac:5f:2a:bb:56:bf:96:b9:83:c2:23:16:
77:da:25:14:57:9e:cd:85:48:b2:ab:db:cb:0d:89:da:19:aa:
79:d8:24:a2:18:79:d4:a2:61:f6:61:71:54:12:27:91:dc:e6:
40:50:3b:84:7a:b8:e0:39:1c:ee:b6:0b:6f:01:92:96:57:30:
a8:fe:e0:b6:b9:f7:db:e6:17:88:f9:00:32:bb:44:1a:a8:16:
45:9e:f7:e4:12:54:92:5f:91:dd:9d:cc:13:21:38:88:55:dd:
ef:39:bc:3d:14:6a:f7:40:91:27:fd:61:37:23:cd:1e:86:68:
8f:c5:ee:ab:3e:92:da:45:88:84:0d:62:71:89:56:52:ce:a3:
d0:be:ab:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH8tN8dzyYSa2ec1USZ5AIC2zxwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyRTM2N0NDRTYwQ0U0NjI3MzVBNDA5NjYzRTdERTNC
MDQ3MEU5NzAeFw0yNjA4MjMxNjExMjRaFw0yNjA4MjQxNzQwMjRaMDMxMTAvBgNV
BAMTKEVDOTlGMkNCRkNBMjA1OTAwQTIxNkEyMTQ3MUJEMzVBQkQ2RkU2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Uf8wYxEQ+1tFQvD45nHlnVTB
wQqLZbeuS6lh6Owq2QkLX+A112M7Yyy97AODYwjRc+v7t00KogWFVybxU/8qmJoJ
2/SA004GpdCDFRp8RJQy83pEErzNd1fn91zfJii1Bp2pNcRpBUaDwk1ewoR488Rh
wbWOGcsIFEdqi4yvlga8h9j1ppZ6tAj0F6AZG/ooKhqPc39eEvwLOyMA6NfJqbxW
QvRXTEoE60RqrnFzP/qiW8J197D7k1DKCxX52r/9hDlMV8kgkIOQkUI9ljCq/fFC
BwZsa0TfENQNSdFeq7aI7Za+Cbz1kuXlFL5gNlazs5xd6+bDEiSbUAWXr8AjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7Jnyy/yiBZAKIWohRxvTWr1v5i8wHwYDVR0j
BBgwFoAUlS42fM5gzkYnNaQJZj5947BHDpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4
bVMvMC85NTJFMzY3Q0NFNjBDRTQ2MjczNUE0MDk2NjNFN0RFM0IwNDcwRTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MkUzNjdDQ0U2MENFNDYy
NzM1QTQwOTY2M0U3REUzQjA0NzBFOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4bVMvMC85
NTJFMzY3Q0NFNjBDRTQ2MjczNUE0MDk2NjNFN0RFM0IwNDcwRTk3Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgHE1M5USr4Hs294xyoAdgaNN5GX+9/8BL58sXDQv7nrEh/0lNyp5bUJxeGo3
DpDc6bXMCVp/5vPKiE8l7+aKG+hF2sQCOcnBqFR9h1PycL4KxxhI3iKc62tQXO7n
z6IdzEZ7xNxLifUAtV6V0fbmlLq5rF8qu1a/lrmDwiMWd9olFFeezYVIsqvbyw2J
2hmqedgkohh51KJh9mFxVBInkdzmQFA7hHq44Dkc7rYLbwGSllcwqP7gtrn32+YX
iPkAMrtEGqgWRZ735BJUkl+R3Z3MEyE4iFXd7zm8PRRq90CRJ/1hNyPNHoZoj8Xu
qz6S2kWIhA1icYlWUs6j0L6rtA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 01:30:44 2026 by rpki-client