
$ rpki-client -vvvf rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
File: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft (raw, json)
Hash identifier: Gd0gOOK5s2AkALFlYiiz3cAeAhiXkTauHp5Odi+B2s4=
Subject key identifier: B9:CC:E0:A2:04:6B:1D:64:53:01:BB:DB:7A:92:1B:A3:F8:5D:06:FE
Authority key identifier: 47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD
Certificate issuer: /CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD
Certificate serial: 62E1A0864A959793BC74B7EB502C01A8E02FF2B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
Manifest number: 8F
Signing time: Mon 24 Aug 2026 12:39:29 +0000
Manifest this update: Mon 24 Aug 2026 12:34:29 +0000
Manifest next update: Tue 25 Aug 2026 15:29:29 +0000
Files and hashes: 1: 3230312e3133312e34362e302f32342d3234203d3e20323731343538.roa (hash: T+ZoX/D494ZjPRGKzAG75vxr0zRdD68JcXiQ29/f8w0=)
2: 3138372e3130322e3131312e302f32342d3234203d3e20323731343538.roa (hash: vUrHsqnj9kkb6VSuSoIhEa9dNFN+RZ7bkeXLb9XytA8=)
3: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl (hash: TXD7W5wG5u/mxDo+pPQoAaNa95HOEeoMB+ueozBmthg=)
4: 323830343a376264383a3a2f33322d3334203d3e20323731343538.roa (hash: gAdoA7SSa86gPBQqVPbdnELj5dkdm5Iz7zHaY4p2xU4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl
rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 15:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e1:a0:86:4a:95:97:93:bc:74:b7:eb:50:2c:01:a8:e0:2f:f2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD
Validity
Not Before: Aug 24 12:34:29 2026 GMT
Not After : Aug 25 15:29:29 2026 GMT
Subject: CN=B9CCE0A2046B1D645301BBDB7A921BA3F85D06FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:79:d4:ad:6d:cd:e4:e7:10:c3:b0:d2:7d:
cf:c4:b3:eb:df:7f:60:00:96:71:49:8e:9a:d8:04:
06:3d:d5:d7:48:fd:5a:f3:81:3e:80:b6:ec:27:9c:
2e:c3:77:0e:4d:1b:11:a6:30:24:1e:15:5b:40:da:
7b:75:7f:3b:05:1e:9f:74:eb:3f:e3:8b:45:a8:e0:
1a:e7:ca:d4:df:01:b1:89:03:aa:b0:5b:85:7e:c8:
ff:3f:99:10:f9:d0:a0:cf:ed:37:ae:4f:c2:c2:24:
c1:96:2d:2f:d7:a4:5e:a1:90:fc:1b:8a:66:34:fc:
5b:31:91:ff:c1:f0:7d:b1:45:6b:1d:94:e5:0e:8c:
c9:dd:51:3f:24:da:42:35:75:af:bc:54:32:08:a2:
f0:48:8b:53:6f:a1:53:bb:22:eb:97:89:b0:2e:a2:
be:b8:63:ce:a2:a6:b3:82:57:cc:75:b9:36:9d:70:
76:f7:13:5c:af:eb:a1:c7:f4:30:b9:cf:6c:18:ac:
8b:e4:09:6b:c7:eb:c7:6f:fb:ca:11:b7:7d:65:77:
09:42:a7:32:35:42:6d:7a:ed:83:6b:e8:ce:88:7d:
1a:f5:e6:56:c7:3e:5a:cc:b3:da:78:d3:ed:07:04:
58:98:f5:2b:93:ad:02:94:ba:bd:6f:ed:95:2b:a2:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:E0:A2:04:6B:1D:64:53:01:BB:DB:7A:92:1B:A3:F8:5D:06:FE
X509v3 Authority Key Identifier:
keyid:47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:78:cb:d3:0a:0f:b4:b0:66:86:35:83:c3:f7:fc:88:f5:c8:
7b:9d:d1:ac:a0:31:b7:ab:89:d0:02:5d:7d:a3:d8:42:51:c8:
b3:47:a1:0a:7e:3b:bb:ea:60:5d:88:7c:a5:7a:7c:c0:e5:0c:
b1:71:07:09:e5:fd:78:3d:dc:2f:48:82:2b:81:08:8f:08:a9:
98:35:37:00:49:f3:81:b3:c7:9d:60:03:af:27:dc:d4:62:0f:
79:1b:08:df:97:f5:f9:85:5c:8d:68:11:92:e7:eb:f5:92:01:
3d:a5:4f:1e:f7:69:67:74:1f:a3:53:d9:43:c0:7d:5b:96:29:
ff:cf:a7:6e:fc:46:16:dc:a9:b2:73:f2:6c:35:ae:96:b6:7d:
f8:79:8b:43:ed:3b:97:32:91:36:9f:f1:1d:f3:b2:14:da:e9:
b3:a4:9b:45:4e:d9:34:fb:99:fd:d8:bf:a0:78:d0:c3:12:43:
05:b2:11:5b:93:62:db:96:91:1e:a2:cd:f4:fa:ef:1d:2f:be:
48:60:19:48:ca:ef:fd:90:b8:75:0f:69:03:22:ad:9f:6f:75:
dc:25:7a:e9:67:20:7b:a0:1d:77:0a:91:08:29:c2:a6:60:6e:
27:fc:63:77:97:8e:d6:68:0b:7a:e4:5d:ef:7a:ad:a1:33:77:
9f:06:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:00:16 2026 by rpki-client