
$ rpki-client -vvf rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
File: BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft (raw, json)
Hash identifier: Vqe8C0MYO1WHR54dXQF21V6EBc9qn+wh8hul5Iepw+4=
Subject key identifier: 4A:4F:51:04:81:1C:58:9B:FD:75:80:F1:45:45:C0:B4:09:84:43:A3
Authority key identifier: BD:C0:8A:E9:BB:1C:B8:0A:BF:25:D5:15:19:F7:02:6F:0C:BA:B8:4E
Certificate issuer: /CN=BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E
Certificate serial: 562B152BD04B23DFA33B5694928A7A47826C723B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
Manifest number: 11
Signing time: Thu 09 Apr 2026 01:01:23 +0000
Manifest this update: Thu 09 Apr 2026 00:56:23 +0000
Manifest next update: Fri 10 Apr 2026 04:30:23 +0000
Files and hashes: 1: 34352e3138392e36342e302f32322d3234203d3e20323639353836.roa (hash: m3ALDBJBDgEYACSmc1CLeUe99KJGHhT0+hqGGiDTpPU=)
2: 323830343a363664383a3a2f33322d3334203d3e20323639353836.roa (hash: EdEoSRQNtJp8GptGynQ2iuCqakkFGelzxq4kQUoFycc=)
3: BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl (hash: C8v7beC/Dt4xXRzOiIP0Hzcl/w+KRscp+RDxcUBKY8Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl
rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 04:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2b:15:2b:d0:4b:23:df:a3:3b:56:94:92:8a:7a:47:82:6c:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E
Validity
Not Before: Apr 9 00:56:23 2026 GMT
Not After : Apr 10 04:30:23 2026 GMT
Subject: CN=4A4F5104811C589BFD7580F14545C0B4098443A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:b5:ea:89:50:68:eb:55:5f:20:ab:fb:08:
68:33:21:d4:45:56:1c:d1:5a:2a:e7:ed:dd:28:2f:
b4:90:a4:77:1b:5f:6e:81:13:c8:73:c7:e6:b8:e6:
fd:4e:a0:a9:af:a6:a5:53:fb:c9:c7:1a:9d:3f:78:
c3:44:e9:ee:84:f5:43:a4:05:c6:9f:bc:8c:39:1c:
70:d9:7c:d4:2c:12:f8:0b:f7:1f:7d:23:bd:2f:8f:
ce:77:2b:42:42:bc:fc:de:5f:72:61:33:3e:f1:0e:
96:d7:a2:b4:de:58:78:34:66:da:3a:62:34:38:ff:
98:1c:92:ed:bc:d5:e9:3d:99:80:a2:41:f4:93:b8:
1c:c0:f1:a7:dd:4c:2b:3b:95:7a:e8:45:df:2a:fd:
25:60:f4:d5:95:09:3b:44:d8:5b:c2:81:3d:12:a1:
ce:e5:11:92:65:6f:e9:af:87:62:d1:0e:7f:d9:a9:
51:94:f8:58:89:28:ce:0c:70:ff:45:ab:ad:f2:e8:
03:d4:59:3c:43:94:0b:21:73:cc:ca:a0:73:96:f2:
a2:aa:a1:86:26:cd:26:3f:5f:24:66:22:70:51:55:
21:31:06:d7:f1:f2:52:1e:43:7f:af:bb:be:de:c8:
72:e0:67:c6:90:5d:dc:4a:80:9b:88:09:84:8f:4e:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:51:04:81:1C:58:9B:FD:75:80:F1:45:45:C0:B4:09:84:43:A3
X509v3 Authority Key Identifier:
keyid:BD:C0:8A:E9:BB:1C:B8:0A:BF:25:D5:15:19:F7:02:6F:0C:BA:B8:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XfDfQGsp6eTz2P4g7UQmtzPGwgVj2sLKmQqoJReN8kf/0/BDC08AE9BB1CB80ABF25D51519F7026F0CBAB84E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:d8:00:4e:51:80:92:7e:de:a8:d4:2d:ff:7e:28:65:e5:
01:50:61:08:9f:19:a5:bd:c4:e2:cd:c9:26:c8:8e:86:1e:82:
35:a0:9c:d6:81:5b:eb:c9:6d:81:d2:c5:e0:8d:5a:1f:54:78:
65:36:15:bd:cc:47:de:c0:a7:1d:0c:af:20:49:39:ea:d8:71:
56:de:d8:63:81:f3:58:b3:16:dd:b9:de:01:28:20:b4:14:6b:
16:e5:5b:7f:f1:d5:89:da:64:a2:24:07:27:d7:2e:96:85:54:
1f:da:b0:a5:c1:e3:f9:64:91:26:61:01:f0:00:ab:01:8e:cd:
96:bb:1a:d4:74:de:aa:0d:6d:b7:44:15:dd:a9:ed:55:aa:93:
c6:86:c9:e6:98:59:0a:50:6a:04:40:cb:84:74:35:e9:01:82:
5b:5b:67:28:85:ad:9f:6d:08:19:84:88:d0:2d:a2:aa:54:9a:
ae:62:da:df:45:87:ee:83:33:32:56:21:e2:9a:ab:2e:59:94:
af:12:4e:62:7a:11:e5:40:2f:7c:c2:91:d8:28:90:fc:b5:98:
29:6f:93:b3:8d:c4:2c:14:38:c0:4b:6f:76:c6:8b:cd:bd:70:
fc:9d:01:e3:13:c9:b1:a5:27:49:69:4a:c8:e7:7d:4f:3a:46:
60:c0:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:08:01 2026 by rpki-client