
$ rpki-client -vvf rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
File: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft (raw, json)
Hash identifier: +bzPnMjUZDlXyyEdqn47v5qfhj1r/cSKsKiv0jiMbd0=
Subject key identifier: 28:25:82:01:22:D1:12:2F:59:C4:9E:1F:21:75:DD:BF:F5:06:59:A4
Authority key identifier: 0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05
Certificate issuer: /CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
Certificate serial: 3D6849F45AD895EEB36470E370C99F04D36A618D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
Manifest number: CA
Signing time: Sun 22 Feb 2026 21:10:06 +0000
Manifest this update: Sun 22 Feb 2026 21:05:06 +0000
Manifest next update: Mon 23 Feb 2026 22:09:06 +0000
Files and hashes: 1: 323830343a323066343a3a2f33322d313238203d3e20323634353233.roa (hash: iHbjXbQYJnpbLyThD8ntb7N9gcirtc1ZLnFEEOo/IsY=)
2: 0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl (hash: SZFhNIkelWR5ss3VJl9p4MJw9o/Jf66odOyaO9qRE8g=)
3: 3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa (hash: UMQhuETAP3mo2VT6DbKKQ75ltp0Z6mOrCpfi41HCarM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl
rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 22:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:68:49:f4:5a:d8:95:ee:b3:64:70:e3:70:c9:9f:04:d3:6a:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
Validity
Not Before: Feb 22 21:05:06 2026 GMT
Not After : Feb 23 22:09:06 2026 GMT
Subject: CN=2825820122D1122F59C49E1F2175DDBFF50659A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:68:d7:4f:8f:3b:88:b9:2b:ef:a4:ef:6c:
b1:53:da:8c:d2:a6:16:1f:34:c8:8a:83:14:5a:b7:
c4:18:29:0e:32:c9:a3:c8:67:cf:2d:35:76:02:79:
07:99:f4:9c:d0:32:26:42:56:f7:9f:1d:f1:83:ca:
e2:45:5f:cd:5b:3c:21:57:34:64:31:59:2c:d2:49:
ba:fa:5b:87:35:a4:3f:c9:80:ce:1d:6c:b3:06:d1:
da:f4:68:a0:40:2e:a2:66:f3:e4:10:db:bb:1a:8b:
ad:a1:78:2c:35:a4:11:19:d3:0f:35:2b:cf:da:29:
42:e1:08:01:51:cf:2e:20:e3:61:1a:36:3a:e7:9a:
dd:57:1b:45:7c:77:a9:85:d1:f5:9c:b9:67:da:60:
44:8f:ef:f7:b7:2b:63:83:a7:34:ff:c4:c9:fb:0b:
4f:ef:3d:5b:6a:b0:49:09:b9:34:8c:dc:46:f7:63:
05:83:39:1b:76:aa:58:f3:6f:9a:ce:e2:1e:76:bd:
57:c4:14:e3:37:2e:b4:4d:91:e7:8b:27:2e:3b:7f:
00:4c:bd:94:3e:25:6b:06:68:92:ca:6b:7d:f7:88:
9a:6a:03:fc:b2:dd:f9:10:70:74:ea:b3:ac:87:23:
9d:c1:b0:1b:5e:26:91:a1:9b:5c:c8:56:fa:78:06:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:82:01:22:D1:12:2F:59:C4:9E:1F:21:75:DD:BF:F5:06:59:A4
X509v3 Authority Key Identifier:
keyid:0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:91:46:d4:0c:00:6f:c7:b7:92:5d:a4:f1:09:b2:29:e4:
66:7e:30:8e:2d:bd:72:fa:d4:eb:58:a0:10:a2:2e:8c:d9:c6:
9a:89:e3:1b:be:3f:65:03:ec:99:72:f0:d8:09:96:7c:38:c6:
d5:47:8a:e9:f8:8f:5c:6f:21:0b:9a:46:a9:4c:c4:95:59:e7:
b0:57:52:2c:d5:67:98:a0:55:36:c5:7d:96:dc:b7:ab:29:fe:
ea:ea:2d:4b:ce:9c:ad:ea:db:97:4b:91:8b:a1:d4:3f:c9:59:
19:c9:bb:ba:f8:5d:fd:b2:5f:d0:23:4b:69:71:4b:45:94:23:
90:6d:a3:2e:9a:48:c8:ea:85:3f:29:48:ee:31:4e:b7:f8:67:
2e:6d:f5:d2:62:e3:af:c4:22:f8:e9:f9:f9:30:ba:0b:48:39:
1b:6d:a3:22:95:ec:67:df:36:27:85:48:ad:ba:b0:5a:83:b3:
0e:92:b0:56:ff:02:3a:bd:c2:f1:96:01:b6:c4:60:27:30:80:
38:bf:59:a5:5e:82:08:db:9f:7d:40:34:31:36:61:cf:d2:35:
3d:74:de:da:79:47:d0:53:21:4a:e2:72:4a:8c:79:74:6e:72:
4d:fe:6b:e8:08:ca:a5:33:90:01:3c:b8:95:4a:e5:74:1c:9a:
74:15:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:38:56 2026 by rpki-client