
$ rpki-client -vvvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.mft
File: 0495B6D2DC1A4F1C6D4825592CC2905D65B28070.mft (raw, json)
Hash identifier: 2ErskUuALsKR8ufl7mZBgnQO6WLGweQCQ60e7TaSPCY=
Subject key identifier: 3C:31:96:06:9C:CB:93:80:5A:7F:56:26:61:50:19:E8:EC:FF:BD:1E
Authority key identifier: 04:95:B6:D2:DC:1A:4F:1C:6D:48:25:59:2C:C2:90:5D:65:B2:80:70
Certificate issuer: /CN=0495B6D2DC1A4F1C6D4825592CC2905D65B28070
Certificate serial: 0798033374C37DD8382EE9A00AC6F5AFD57E3ED1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.mft
Manifest number: DA
Signing time: Sun 23 Aug 2026 15:30:00 +0000
Manifest this update: Sun 23 Aug 2026 15:25:00 +0000
Manifest next update: Mon 24 Aug 2026 18:04:00 +0000
Files and hashes: 1: 323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (hash: 3cxmTDFSspBZsBe9EX8mSKM1cwIbRS/iEPWO1//PAME=)
2: 0495B6D2DC1A4F1C6D4825592CC2905D65B28070.crl (hash: hjfN94TVWT5GCkNMhUjRbu2uKKez71Srm5YnDHe5vYM=)
3: 3133382e3231392e3232302e302f32322d3332203d3e20323633393633.roa (hash: GDNe5saF/pPj6NNqdd7lkj4ltsr9Ly7IJ0suIFtN81U=)
4: 3137302e3234362e3136382e302f32322d3332203d3e20323633393633.roa (hash: XPdnR/l4vj6mWG1noDpLBvCftdS1AhGoqWRK/Rg3a/U=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.crl
rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 18:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:98:03:33:74:c3:7d:d8:38:2e:e9:a0:0a:c6:f5:af:d5:7e:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0495B6D2DC1A4F1C6D4825592CC2905D65B28070
Validity
Not Before: Aug 23 15:25:00 2026 GMT
Not After : Aug 24 18:04:00 2026 GMT
Subject: CN=3C3196069CCB93805A7F5626615019E8ECFFBD1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:cb:2d:7c:21:36:90:e1:2f:1f:6b:c4:27:
f2:47:2b:cc:dc:a2:b9:f0:76:e6:1b:b7:53:4c:08:
05:44:2c:b2:91:fa:50:2e:41:7d:f7:20:86:1e:e1:
3a:62:83:60:e7:3d:b9:49:ea:85:f0:e8:dc:27:5b:
da:97:96:ca:a5:60:c8:7a:2d:42:60:a1:64:7d:0e:
6b:f6:79:af:41:8c:e7:1a:0f:47:9e:5e:11:9b:94:
0e:48:62:41:0f:7c:f4:a4:64:e8:e3:6a:19:0c:4a:
15:4b:4b:d9:17:94:21:1b:55:c3:37:41:05:94:fd:
0e:bb:ec:d6:fc:5c:f6:59:66:cb:8a:75:c2:a2:e5:
e1:d4:44:7d:d5:57:89:76:5a:87:3a:c1:c8:78:e1:
7f:b5:19:1e:77:f6:17:85:da:ab:05:11:c9:6e:3d:
39:0c:21:f0:f1:04:ec:20:a1:c7:7e:2f:3f:bc:f3:
f9:8a:ca:9e:86:6c:98:ae:36:94:fc:de:5c:37:50:
51:3a:8f:82:0f:9b:53:0e:cb:0f:74:08:ac:0e:15:
d0:f9:de:ad:6f:f9:93:51:21:0f:52:2b:38:8d:37:
95:98:9f:f9:89:af:cc:aa:66:28:13:9b:c0:22:92:
af:61:3a:1f:d6:28:97:fb:c0:9b:1a:74:a0:de:40:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:96:06:9C:CB:93:80:5A:7F:56:26:61:50:19:E8:EC:FF:BD:1E
X509v3 Authority Key Identifier:
keyid:04:95:B6:D2:DC:1A:4F:1C:6D:48:25:59:2C:C2:90:5D:65:B2:80:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/0495B6D2DC1A4F1C6D4825592CC2905D65B28070.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c6:27:3c:69:e4:8e:df:01:27:ef:8d:da:15:77:f0:e6:04:
40:56:83:cd:13:e9:56:d8:7e:16:1e:45:5e:05:7d:65:be:88:
7f:56:19:91:7d:63:8a:d8:d7:4a:6a:4e:af:56:36:58:d3:91:
27:7b:05:b4:29:41:75:f8:a1:07:16:b6:67:d1:48:d7:d2:55:
06:66:20:ee:7a:be:20:7b:76:16:5c:47:23:9f:b7:9a:ea:0b:
5b:4b:64:51:60:07:8e:d7:d9:6e:c8:2a:60:13:2b:c5:b8:4c:
0c:a3:1c:2f:33:20:46:5a:e2:bf:b8:96:cc:e2:fb:50:4d:03:
39:2a:e4:af:ee:32:de:db:f5:ed:17:35:9a:01:3b:4d:bd:d3:
f2:b4:1f:bc:18:bd:bc:56:79:49:64:b7:71:6c:87:b5:f4:e7:
17:e7:e6:7a:dc:f3:8e:ee:7f:88:e5:63:9d:2a:2d:ec:43:b8:
e5:dc:eb:60:95:15:93:67:dc:21:71:c2:c5:4f:49:b7:ba:87:
7b:09:43:0a:9c:8d:8f:04:da:f4:59:bd:79:d0:84:57:76:b8:
7e:fa:5a:f4:fb:4a:0c:f4:a5:3a:20:65:9b:11:b4:c1:a0:1d:
81:c3:5d:67:71:25:c1:49:fd:a1:92:0f:cd:c5:1e:9f:0d:b2:
a1:27:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:26:43 2026 by rpki-client