
$ rpki-client -vvvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
File: 859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft (raw, json)
Hash identifier: nq3wBqoZQMLABruT8HVVrRnFn8AfPfgOyrPUWDjiPfQ=
Subject key identifier: BE:02:DA:A0:26:B2:FF:52:82:AE:C6:9B:62:05:58:81:99:2D:A2:E7
Authority key identifier: 85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
Certificate issuer: /CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Certificate serial: 412AA1520671189FA19C45849AA75F4FA68D752A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
Manifest number: D4
Signing time: Sun 23 Aug 2026 02:32:04 +0000
Manifest this update: Sun 23 Aug 2026 02:27:04 +0000
Manifest next update: Mon 24 Aug 2026 05:28:04 +0000
Files and hashes: 1: 859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl (hash: hx/ybGA3Tj6H/nRLZ0jYs8WH8dlQ7OATPEGBpICdhGc=)
2: 323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa (hash: fL35lLIJqdSlnvV5yi6iNGXtH8hEnxFtjwmuyKkeQAo=)
3: 323830343a366564383a3a2f34302d3430203d3e20323730363232.roa (hash: 6XbwwSQ4bxfUhZ8KSrUOyq/hju9rI6Hr7G0xVI6Xf1o=)
4: 3138392e35302e3231312e302f32342d3234203d3e20323730363232.roa (hash: 0hQqQbnw5D8Q38qhX4brtADh7gRLZbpMiyZ+Mmd2Ef8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 05:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2a:a1:52:06:71:18:9f:a1:9c:45:84:9a:a7:5f:4f:a6:8d:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Validity
Not Before: Aug 23 02:27:04 2026 GMT
Not After : Aug 24 05:28:04 2026 GMT
Subject: CN=BE02DAA026B2FF5282AEC69B62055881992DA2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:71:2b:5e:a9:29:19:3a:dc:8c:4e:1f:2e:
c5:46:6b:75:57:dc:26:c8:93:97:da:c5:97:b0:3d:
06:a8:be:36:b0:c6:58:2c:2f:30:ed:66:6a:52:5d:
36:ff:48:cc:c5:d6:28:7d:62:22:ae:63:30:b3:0d:
cc:de:e3:e6:df:8f:91:73:2d:26:f8:0b:73:c2:b1:
d2:5f:a3:88:1c:49:25:9d:d6:1f:14:f6:a9:f1:b2:
0d:4c:31:6f:5d:43:4a:79:1a:fd:38:ee:3d:ac:08:
e0:7e:1b:01:25:22:27:88:e4:f7:f3:1a:dc:9f:f2:
7d:45:5b:e8:7c:00:25:8a:c3:1b:50:59:4c:af:49:
21:f8:32:f0:5c:a2:2b:0c:28:ec:c6:31:28:76:52:
8c:33:70:c0:ec:28:7f:95:ec:0d:2b:09:c4:35:77:
ae:8f:db:66:42:fb:1e:c1:d3:ec:b6:31:17:4d:b5:
63:59:2f:53:3a:d4:30:f0:8a:fe:76:fa:e0:87:21:
68:3b:2d:ce:9f:9f:43:5d:75:b4:23:72:c0:67:81:
d2:87:26:ce:aa:63:54:7d:8b:2d:a7:06:ec:d7:25:
97:5d:9e:8a:56:ee:9c:f3:06:7d:be:3f:bf:61:a9:
62:8d:80:ba:53:ab:bf:1d:03:ff:fb:5a:04:5c:6f:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:02:DA:A0:26:B2:FF:52:82:AE:C6:9B:62:05:58:81:99:2D:A2:E7
X509v3 Authority Key Identifier:
keyid:85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:16:bc:6f:55:6a:dd:af:ef:6f:51:3d:ce:bc:e2:a4:ba:
ac:3c:8f:2d:b6:2d:f4:b7:ca:b5:75:a3:76:8b:97:f9:a7:12:
73:39:78:4a:37:ab:96:2d:25:30:c8:da:1a:65:2b:25:83:33:
84:d7:ff:66:1a:d9:e9:54:7e:75:7b:c0:5c:7b:14:d9:1c:ca:
ae:b0:2a:81:7b:63:28:ab:be:3c:f8:c3:a5:07:77:fa:e2:ea:
59:98:09:e4:88:b1:eb:d5:31:d6:68:45:f5:b1:0e:17:d0:94:
a0:1c:dd:64:1d:5d:6b:28:b6:61:8b:fd:22:fb:d6:c8:1f:c5:
97:24:80:dc:64:2a:17:c3:de:8e:50:44:65:e2:61:c4:58:cb:
0e:9d:a4:9f:13:8f:12:a2:7f:fe:3a:f3:6b:33:dc:0d:2b:84:
42:c9:87:fb:d2:f7:fa:1d:d8:82:89:7d:e2:c8:7e:cb:31:9f:
c7:89:e4:68:41:a0:47:51:c1:71:23:59:cb:c8:cd:8f:37:40:
85:0c:af:55:4b:34:e3:6b:bf:52:df:e4:b5:d8:ab:d2:23:9d:
91:33:5f:c4:32:4b:30:a7:36:f7:4b:df:50:e9:5d:d8:b9:95:
ea:3c:4c:68:2e:54:fd:0a:6b:b3:a2:19:ce:5c:b3:02:b4:6f:
8f:fc:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:35:53 2026 by rpki-client