
$ rpki-client -vvvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
File: 974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft (raw, json)
Hash identifier: PzUAthuY2MAUD49l7HyPXpcUytntdbHuyyI2NsmaKQw=
Subject key identifier: A5:70:75:3D:4F:99:68:E2:B5:11:BC:30:21:33:42:B1:07:6F:9E:E4
Authority key identifier: 97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
Certificate issuer: /CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Certificate serial: 16DC47ECFA4358AAB09BE8E3A2CE30FEF2AB51B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
Manifest number: 011D
Signing time: Sat 31 Oct 2026 01:11:50 +0000
Manifest this update: Sat 31 Oct 2026 01:06:50 +0000
Manifest next update: Sun 01 Nov 2026 03:45:50 +0000
Files and hashes: 1: 974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl (hash: kQfhsiIJ96qYWlq1sftVSHrXqyO+XH2cCBp+ZWWQIUw=)
2: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (hash: Igudsal6h1RZDfnLDpAJumP/Wak/0xv5Rr+DAHgaI04=)
3: 323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (hash: glO24QzrfFsd9W0mZAi8AtSz+CFwQ+UbFrh7YDsSlgY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 03:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:dc:47:ec:fa:43:58:aa:b0:9b:e8:e3:a2:ce:30:fe:f2:ab:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6
Validity
Not Before: Oct 31 01:06:50 2026 GMT
Not After : Nov 1 03:45:50 2026 GMT
Subject: CN=A570753D4F9968E2B511BC30213342B1076F9EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:30:0f:9a:2e:66:81:6b:af:e2:8c:e5:2b:
8c:8b:4c:d0:2f:75:2c:8f:60:f1:60:d7:3c:5b:01:
d1:57:21:20:76:82:ba:5a:0e:b1:dc:fd:d9:c2:5a:
66:24:b7:c6:13:d5:3e:c9:ea:18:21:9b:40:fc:80:
74:64:4b:bb:a6:1d:0e:54:0f:a1:c3:27:9b:6c:10:
96:c8:fe:47:9f:f2:39:47:83:e0:56:3a:90:b2:38:
c0:f1:8c:d9:c6:a4:d5:ab:bb:fa:fd:c6:60:95:f1:
54:3e:7b:22:c8:44:f3:ae:26:c6:81:30:f5:8f:a8:
22:63:d1:73:c4:c1:2c:b0:1a:ae:a1:b8:83:06:25:
21:7c:f4:8e:56:c0:c9:04:de:a3:1b:30:2d:d5:33:
3d:8c:39:0b:c6:74:43:26:bd:c1:66:49:64:f1:f8:
7c:1b:3e:95:2a:e5:c8:cc:1e:dc:9b:01:59:dd:c5:
bc:6f:9d:c0:72:e9:04:3b:76:2d:66:ff:47:35:87:
49:46:d9:75:dc:4d:d9:f9:d3:9c:10:79:e5:fb:4c:
aa:1a:34:39:a4:db:65:c5:2d:e1:6b:08:4c:0f:ac:
f0:7e:2a:9d:fe:64:4a:bf:77:46:ac:b7:17:f8:1a:
13:28:44:e8:85:9d:55:36:8a:38:f9:cd:08:5d:e2:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:75:3D:4F:99:68:E2:B5:11:BC:30:21:33:42:B1:07:6F:9E:E4
X509v3 Authority Key Identifier:
keyid:97:4F:38:24:1A:AF:F9:44:C0:1F:EE:40:6E:FE:8F:5D:DB:DF:F2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/974F38241AAFF944C01FEE406EFE8F5DDBDFF2B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8f:f4:1a:99:0d:15:44:2c:0f:2e:ff:ae:9c:3b:c4:c0:13:
83:78:8d:b4:c6:42:67:02:fc:0e:a6:5a:46:87:1e:2c:60:95:
c8:1b:4c:be:00:54:22:eb:93:18:06:ac:30:a3:aa:23:6c:59:
24:82:0d:c9:42:77:88:d2:9a:68:4d:20:b8:7d:0b:54:61:7d:
f7:cf:62:29:ca:31:f4:91:61:9e:35:42:09:07:8b:44:fb:96:
5f:21:98:20:b3:66:32:9d:6c:72:5e:35:2b:3d:9b:b3:7f:ab:
c5:da:05:2e:00:ec:34:9a:60:1e:66:44:e1:5d:31:d0:9c:97:
77:3a:c8:59:39:43:24:a4:08:39:d6:b0:d9:bf:c7:1c:4f:e0:
bb:24:3b:60:c6:06:e9:21:43:e9:40:a3:06:b0:43:0c:2e:dd:
04:9f:b0:07:dc:a2:c0:e6:0c:e2:7c:6d:e6:75:b2:e4:c5:0c:
9e:ca:f3:e4:cb:a1:73:19:78:e7:92:e8:9e:9c:04:e9:bf:b6:
b5:0d:4f:d6:c7:74:c6:f9:3f:af:05:14:0b:b0:27:98:cd:d1:
b9:51:2d:a5:cc:22:f8:d9:6c:f6:fe:ee:ef:eb:db:50:ba:d2:
94:7e:3b:92:6d:57:96:48:35:2f:00:e2:49:c9:8a:40:08:3a:
3f:fc:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:49:42 2026 by rpki-client