
$ rpki-client -vvvf rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
File: D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft (raw, json)
Hash identifier: V3Fkr6r1bgMlkpTl5iiJcvkQAQMdPlryhrCz03vtWuQ=
Subject key identifier: 9B:C9:44:E5:B6:2E:C8:4E:D2:A2:31:92:B1:93:A2:9E:8D:45:74:34
Authority key identifier: D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00
Certificate issuer: /CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
Certificate serial: 228EAC3505FC83BF304A382C8F61B5E69941D973
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
Manifest number: 38
Signing time: Sat 22 Aug 2026 10:39:16 +0000
Manifest this update: Sat 22 Aug 2026 10:34:16 +0000
Manifest next update: Sun 23 Aug 2026 13:09:16 +0000
Files and hashes: 1: 323830343a316135303a3a2f33322d3334203d3e203631383533.roa (hash: o2cRHB8VLaulYEsD7EXAfKSLpkE/joxRBXT/iIJXwu4=)
2: 3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa (hash: uHnjdQrQPrfAXqaQE1CfLJcDudQ8gZIF7o8xe9UB3Wc=)
3: D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl (hash: H2vzjEy5ESVHrn2b+UfBeHu0bL6fBHcl71rt/bcazY8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl
rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 13:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8e:ac:35:05:fc:83:bf:30:4a:38:2c:8f:61:b5:e6:99:41:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
Validity
Not Before: Aug 22 10:34:16 2026 GMT
Not After : Aug 23 13:09:16 2026 GMT
Subject: CN=9BC944E5B62EC84ED2A23192B193A29E8D457434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:e5:fa:8c:34:12:13:14:5e:5a:26:e6:ef:
87:90:0d:e3:13:f0:07:38:92:29:55:15:fe:1e:5f:
84:8e:22:a9:77:a4:cc:ac:1e:6f:37:9f:c1:8b:c5:
83:25:18:e9:50:19:7b:4c:1b:fd:c6:80:af:4c:27:
d9:e5:75:bb:33:4e:81:27:dd:bc:19:42:9b:5e:ea:
18:2e:06:ec:f6:20:f4:74:5c:2b:fc:c2:22:98:78:
79:3e:28:6b:18:9b:33:1c:fa:19:87:19:cb:6b:04:
2e:23:0d:08:47:fb:77:70:c6:75:8d:48:72:c9:66:
69:ff:29:47:17:23:f6:ba:34:c3:d9:e4:ec:cf:a0:
8c:33:2f:7e:62:76:90:ee:b7:10:c3:d7:31:5a:94:
36:82:78:42:13:d5:eb:c3:1d:69:88:27:3e:ba:fb:
14:23:82:07:8f:13:f7:b0:8d:43:16:3a:9e:21:9b:
c0:23:be:da:2d:37:8e:ab:18:80:55:6d:17:d8:3c:
46:bb:4a:41:82:ad:a4:f4:41:0a:d3:39:c3:07:91:
b0:81:20:6f:14:6c:a2:1a:28:a0:d3:0e:ad:9d:fd:
e3:ea:c8:6a:a9:62:cd:f6:0c:eb:5d:b3:75:a3:20:
3f:6f:72:b9:d4:c2:c6:4c:ce:c5:16:1d:51:cf:44:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:44:E5:B6:2E:C8:4E:D2:A2:31:92:B1:93:A2:9E:8D:45:74:34
X509v3 Authority Key Identifier:
keyid:D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1b:c9:db:ac:1f:53:97:9a:e8:a7:27:e2:52:6d:28:12:d0:
87:85:ab:88:e6:0d:99:ab:f8:a5:ce:80:29:48:67:5f:98:8f:
77:f4:11:70:bc:7c:6c:0a:47:63:b9:47:80:1a:fc:69:bf:f2:
e5:1a:7f:b0:9c:2f:1a:f9:78:49:b6:27:0d:5e:29:87:f0:66:
2f:8d:ae:56:36:60:82:0c:6a:bc:95:2b:97:ce:14:55:57:6f:
10:83:22:0a:7f:90:ef:25:af:a1:1e:fc:19:6a:e4:54:91:7e:
fb:32:13:b7:c1:ee:98:f6:83:0a:01:52:48:89:80:bf:9c:35:
20:1c:be:15:3a:48:17:d0:bf:e8:05:de:53:e1:04:93:32:f5:
18:7f:1a:78:a3:f7:16:55:59:62:1f:59:f9:cf:2d:1c:47:3c:
3a:89:b1:77:b4:af:4b:25:87:50:a6:90:5c:ac:c0:95:89:f2:
8b:7f:c1:c4:2d:6a:a0:ec:a3:88:21:71:e4:54:1a:9e:fb:cc:
f1:cc:29:bc:95:e6:e7:49:3b:6b:83:fc:e7:4e:6f:93:81:09:
f4:f4:72:77:12:f8:6c:7a:c2:67:52:89:11:ad:ed:c1:1a:09:
e2:bc:ee:17:61:03:e0:ab:39:72:f3:4f:d2:52:d4:b6:63:0b:
51:f0:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:05 2026 by rpki-client