
$ rpki-client -vvvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft
File: CD80D41420A0BFC389650757D11352D7D304E5E9.mft (raw, json)
Hash identifier: ZwOx5x3ahyLox5DXLu87jkfbSAyTr0CgrS20wNn/xsY=
Subject key identifier: D5:50:83:B2:04:B6:67:2F:15:11:DB:18:63:F1:94:04:9F:60:5E:9B
Authority key identifier: CD:80:D4:14:20:A0:BF:C3:89:65:07:57:D1:13:52:D7:D3:04:E5:E9
Certificate issuer: /CN=CD80D41420A0BFC389650757D11352D7D304E5E9
Certificate serial: 2A0F94808E07CC8C1AA50E8C03DFA7FDA887205C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD80D41420A0BFC389650757D11352D7D304E5E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft
Manifest number: D7
Signing time: Thu 29 Oct 2026 23:45:09 +0000
Manifest this update: Thu 29 Oct 2026 23:40:09 +0000
Manifest next update: Sat 31 Oct 2026 03:30:09 +0000
Files and hashes: 1: 34352e342e35322e302f32322d3332203d3e20323636303430.roa (hash: oFsIlLGB5Pghch570AdobuGej/XNl7Fw3kXeYepDVGk=)
2: 3138362e3139362e3132302e302f32322d3332203d3e20323636303430.roa (hash: VWU5oB2JC7OIkj2oW1WKr4gahRWIiCPw9N2v5qcCQiM=)
3: CD80D41420A0BFC389650757D11352D7D304E5E9.crl (hash: eI0tZChdvEITLXZNG2gQszrfHSe9gNGidhtqWRzKotY=)
4: 323830343a333961303a3a2f33322d313238203d3e20323636303430.roa (hash: 5nxaOjf68+E1T6OqRBfcWpo48m+PehG3/wq/7mBuFTc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.crl
rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD80D41420A0BFC389650757D11352D7D304E5E9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 03:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0f:94:80:8e:07:cc:8c:1a:a5:0e:8c:03:df:a7:fd:a8:87:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD80D41420A0BFC389650757D11352D7D304E5E9
Validity
Not Before: Oct 29 23:40:09 2026 GMT
Not After : Oct 31 03:30:09 2026 GMT
Subject: CN=D55083B204B6672F1511DB1863F194049F605E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:e9:2e:6c:79:81:59:6a:3d:2e:e3:a8:e7:
d9:62:06:80:e9:10:db:fc:b4:1e:fd:aa:ac:28:1f:
6a:07:65:a3:51:a2:22:7d:6d:93:c3:ad:a6:74:22:
84:64:7d:f5:ab:36:98:d6:65:f2:0a:db:09:5b:10:
37:06:7d:ac:ff:91:3d:c2:dc:5d:16:1f:f3:79:4c:
13:62:4a:43:6c:c2:f5:c9:16:61:ca:b6:e2:67:eb:
ae:15:46:55:19:15:36:8e:43:15:73:b8:d9:5c:ab:
85:0e:8b:61:c6:24:ad:93:6f:83:26:18:bc:81:c6:
be:9e:18:a7:89:f0:c1:47:d7:95:99:34:e0:d6:ed:
49:09:f7:da:28:10:e9:01:d4:27:06:74:47:08:f2:
9d:c2:ed:0d:c4:41:ca:9e:ab:79:21:14:18:c3:06:
8e:98:85:af:bf:54:a1:12:a7:e7:59:b8:2e:f7:29:
64:65:7d:08:d8:22:cd:a5:59:4a:e7:d7:13:8a:6b:
50:cc:43:b1:76:ec:68:21:cc:1f:04:c5:2c:05:00:
1b:1e:5f:97:0f:f8:0b:8c:6a:f1:b5:81:7c:a2:b9:
3d:90:9d:9e:5e:8f:84:a7:f2:0a:0a:57:28:fe:11:
b6:2b:89:b9:b7:cb:09:03:4f:6b:a5:8b:77:ac:52:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:83:B2:04:B6:67:2F:15:11:DB:18:63:F1:94:04:9F:60:5E:9B
X509v3 Authority Key Identifier:
keyid:CD:80:D4:14:20:A0:BF:C3:89:65:07:57:D1:13:52:D7:D3:04:E5:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD80D41420A0BFC389650757D11352D7D304E5E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/2/CD80D41420A0BFC389650757D11352D7D304E5E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:1b:46:46:1a:5e:cb:7d:a8:3e:1d:e2:73:30:fb:a5:92:
f1:78:4e:43:0d:30:ed:21:76:df:c7:c1:4f:d0:ed:7d:46:17:
b9:d5:4c:98:9c:4c:c5:ca:b7:16:4e:dd:1f:27:9d:52:a0:6a:
b1:64:4e:fe:b1:2c:87:bd:c2:6c:18:9e:16:3c:e2:93:d9:62:
79:8b:e7:b2:e4:f5:bb:74:c9:c2:cf:fa:21:49:e0:2c:f8:fb:
33:d9:47:d9:34:0b:4b:24:b1:98:a1:8a:08:3d:5e:d7:fe:88:
a6:0f:ae:2d:4e:1f:8d:59:00:f7:0a:49:6a:79:c8:eb:e1:b1:
83:90:13:a2:08:1c:da:84:42:96:a6:32:37:3f:c5:7c:87:44:
dd:d5:4c:14:a6:06:1e:05:ac:11:c2:19:69:85:9b:8f:39:89:
fd:ab:d1:94:ca:24:dd:82:94:b4:ce:b1:b3:6b:6a:19:ca:94:
04:d7:c8:6a:1b:c7:99:05:e0:34:5c:3d:cb:9e:09:ee:85:08:
a1:fc:0d:9d:32:3d:00:3c:3d:87:f2:74:b7:82:1f:9c:98:49:
06:59:65:e4:6c:64:be:4f:dc:d1:80:c4:31:26:41:1d:4e:e3:
e9:08:c2:b4:55:f0:6a:33:23:7a:d8:10:dc:6c:88:a3:e4:b3:
ca:c4:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:12:36 2026 by rpki-client