
$ rpki-client -vvf rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
File: 8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft (raw, json)
Hash identifier: UirTtO7fvl5reuUEkC9fMK8GrIzc6gfgu02gUXF8q5A=
Subject key identifier: CE:6E:54:97:8D:DF:77:15:9F:DF:BB:07:50:B6:4D:94:64:B0:8F:28
Authority key identifier: 8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14
Certificate issuer: /CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
Certificate serial: 35ABCF4EBCD6D4063A1EE21958FFDE46D5873CA6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
Manifest number: D2
Signing time: Mon 27 Jul 2026 15:17:35 +0000
Manifest this update: Mon 27 Jul 2026 15:12:35 +0000
Manifest next update: Tue 28 Jul 2026 16:17:35 +0000
Files and hashes: 1: 323830343a383438343a3a2f33322d3332203d3e20323732323635.roa (hash: bEyRwsMpXTEvUAGXMSFTQv7yrt9ivZNEzgWE8VHrXbU=)
2: 8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl (hash: qbgy0Tz9FaF55f//AhlcPvTG6aryuhgwTy0rVpCIPfg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl
rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 28 Jul 2026 16:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ab:cf:4e:bc:d6:d4:06:3a:1e:e2:19:58:ff:de:46:d5:87:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E7CA0811985CDBD24526BDC8922FC0B843BDD14
Validity
Not Before: Jul 27 15:12:35 2026 GMT
Not After : Jul 28 16:17:35 2026 GMT
Subject: CN=CE6E54978DDF77159FDFBB0750B64D9464B08F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:be:0c:10:6b:f7:c9:66:87:18:fa:39:ab:
64:7c:a3:ec:f8:91:20:0a:e6:47:4f:b8:c0:b4:3d:
be:54:21:db:e2:4b:ef:b0:b0:4e:ed:24:75:59:6d:
d6:47:9d:ad:7a:b2:48:c1:fb:7f:3f:43:ae:56:df:
aa:08:d8:d4:7d:81:7a:76:ee:3e:cc:6b:05:d0:d3:
dc:68:75:29:e5:24:2b:82:84:de:ab:ae:f0:e8:53:
88:12:d8:ab:00:62:25:07:1f:93:22:77:cc:4d:1f:
13:10:81:de:69:e6:89:a2:ac:fc:f3:2e:b0:4f:b3:
db:4c:49:0b:fc:46:5b:f5:c9:cd:38:c1:94:ac:44:
9a:06:53:e4:79:30:03:ec:be:b0:47:01:d7:4a:10:
4e:e4:02:d9:49:c6:6e:7b:88:09:31:5b:30:62:0b:
d2:98:00:3b:ba:fe:7b:e8:7d:1c:cc:e7:67:d9:92:
81:c4:84:b1:a3:b6:bf:35:a0:9e:30:f0:49:55:4e:
c5:d9:8c:c2:3f:49:5f:28:0c:9b:6b:9d:44:c6:01:
39:0a:3d:93:4a:97:6c:22:0e:5f:38:46:53:d3:c4:
ea:7f:f1:70:f9:68:be:4e:ae:9f:2e:b9:3c:d5:52:
74:f2:9f:5e:c3:71:d5:b4:c7:32:8f:52:e5:7f:29:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:54:97:8D:DF:77:15:9F:DF:BB:07:50:B6:4D:94:64:B0:8F:28
X509v3 Authority Key Identifier:
keyid:8E:7C:A0:81:19:85:CD:BD:24:52:6B:DC:89:22:FC:0B:84:3B:DD:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJZEnmQ9KKyn3LQJaULXd2kDoafc5wyMQXD7CTxMXrRv/0/8E7CA0811985CDBD24526BDC8922FC0B843BDD14.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:17:52:f8:91:56:af:ff:b7:c7:3c:a2:b3:09:40:dd:36:bb:
82:fd:29:3a:69:8b:93:dc:ef:62:e8:44:c7:29:88:e4:99:e4:
1d:e4:5d:84:32:36:48:75:bd:fd:2a:9e:18:8e:11:59:55:08:
a3:28:c2:83:e8:93:71:6c:1f:9c:4a:25:ba:c4:20:64:9f:78:
f4:32:9b:2a:31:fa:1b:68:95:2d:e3:61:b7:6a:48:77:1e:9d:
d2:66:9c:ca:6d:d2:f6:b2:55:ff:40:93:25:c7:4e:39:cd:bb:
0c:89:67:50:c3:eb:24:40:4c:63:61:60:f0:e3:a8:3b:1b:ad:
32:78:2f:55:73:fb:0c:3b:e7:e9:38:85:2c:b1:f4:9d:25:6b:
88:3b:8b:53:43:76:4a:77:b5:3b:92:64:c7:36:7c:ba:3d:a2:
be:e0:df:b7:46:fa:8f:41:56:cb:12:62:c0:5d:5e:29:dc:75:
7e:3c:08:c6:5c:be:9e:44:7d:f4:a2:f2:e1:fd:25:d1:09:82:
b2:8f:b2:0d:67:fb:5c:06:57:71:26:e4:0b:6f:f4:6a:7a:5a:
d1:8d:7e:ea:a4:45:09:97:a5:15:00:a5:c0:5a:2b:f4:24:a7:
44:b0:d4:5d:7b:02:36:8a:97:b7:96:c4:bb:6b:f3:79:6a:46:
50:06:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:25:29 2026 by rpki-client