
$ rpki-client -vvvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
File: CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft (raw, json)
Hash identifier: lr80JpRhpt17RILhmCGdeJzQe95OhI/fcEsZzttzHtU=
Subject key identifier: 71:AE:86:E6:69:0A:4C:CF:0B:8D:BA:BE:94:0D:EE:80:A4:92:5B:E2
Authority key identifier: CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
Certificate issuer: /CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
Certificate serial: 78B8E9FC3A4A488CB3B9859B0F5E836FF28C6907
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
Manifest number: 0124
Signing time: Sun 23 Aug 2026 04:01:15 +0000
Manifest this update: Sun 23 Aug 2026 03:56:15 +0000
Manifest next update: Mon 24 Aug 2026 06:43:15 +0000
Files and hashes: 1: 323830343a366630303a3a2f33322d3438203d3e20323730363332.roa (hash: y/Kq10xhU57gJ8/zejAiUS1it9/5JtYLSY+VUSsjqxQ=)
2: CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl (hash: pKjN5XfKXOfR+rhggCpanWOs+OjlGdUXH1+sERCCDNU=)
3: 3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (hash: ayaNax4Cw2y8qb4GbPzr68tbqtw7CyLzvM4rGoe554A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl
rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 06:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b8:e9:fc:3a:4a:48:8c:b3:b9:85:9b:0f:5e:83:6f:f2:8c:69:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE4A495E5B6607ACF501EEC8AD41166BA1F809FC
Validity
Not Before: Aug 23 03:56:15 2026 GMT
Not After : Aug 24 06:43:15 2026 GMT
Subject: CN=71AE86E6690A4CCF0B8DBABE940DEE80A4925BE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:4c:06:7d:b1:87:44:a9:e1:01:28:41:31:
e6:39:ed:f5:ce:20:bd:8f:0b:12:ab:19:0f:0b:d1:
28:12:a8:ef:b0:4e:26:fe:8d:5d:0f:25:0c:d3:26:
b8:5c:34:e4:e9:5f:df:99:3e:53:1e:03:12:a1:f5:
6f:06:e9:64:67:0f:5f:8d:25:c9:da:fd:0a:ab:60:
32:f2:ee:81:82:a1:87:88:b5:29:4f:68:c7:06:02:
fc:ac:dc:7f:92:72:d9:1e:e8:e3:9d:a2:9d:a6:e6:
7c:ca:17:a9:40:5e:46:94:ea:f1:44:93:c3:de:f6:
50:72:0d:32:d2:c7:ba:ce:19:86:70:4f:3d:54:97:
e5:ef:0b:52:10:8f:b2:b0:39:16:a0:58:30:59:a9:
a6:4e:98:41:cd:fd:fa:3f:9c:fe:df:25:65:9d:65:
1d:fe:40:5f:cf:ff:43:8a:d7:e0:a0:3b:49:d7:2d:
de:2e:2b:c2:ed:1d:b2:78:26:b5:a7:88:68:d8:a9:
a2:91:1e:4c:60:1c:ba:48:79:91:53:8d:ad:db:0e:
08:75:d9:5b:7a:9d:8b:cd:45:7d:ab:f7:87:ca:8b:
7c:93:c6:84:b6:bb:8b:8f:96:14:03:8c:db:4d:d3:
00:bc:52:ce:0d:e2:47:25:42:42:ea:3b:39:d5:59:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:86:E6:69:0A:4C:CF:0B:8D:BA:BE:94:0D:EE:80:A4:92:5B:E2
X509v3 Authority Key Identifier:
keyid:CE:4A:49:5E:5B:66:07:AC:F5:01:EE:C8:AD:41:16:6B:A1:F8:09:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/0/CE4A495E5B6607ACF501EEC8AD41166BA1F809FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:91:e3:75:bd:e2:32:ca:c9:fd:73:b9:fb:69:f9:e4:34:
df:0e:69:63:8b:ac:54:8a:ec:0c:fa:62:95:7f:85:65:a0:d0:
71:42:6f:7a:bd:eb:d2:07:78:73:bf:36:04:80:39:53:f7:d7:
fa:a3:a3:96:5b:2d:38:0a:72:5f:b1:77:8e:3d:45:3f:bf:d7:
c0:8a:95:ee:e7:7d:18:14:45:8e:70:45:25:26:c4:e7:48:ca:
57:20:d0:ed:4b:a5:65:ab:61:74:9e:7a:e4:3a:10:85:67:17:
2c:4f:cd:99:12:bb:b9:b8:a0:7f:88:10:cc:a1:17:55:76:00:
ac:bb:1c:fc:ba:5a:42:72:c0:aa:9e:41:2f:2c:f4:e2:bf:3d:
f2:fb:2e:15:2c:1e:13:51:3d:14:89:16:1b:d8:86:e6:2d:b1:
dc:67:87:a1:35:ad:7c:8c:2b:b4:4d:fe:8c:9e:01:96:7c:ec:
f9:4b:70:e1:a5:3b:a6:6a:c1:02:23:2e:ef:75:cd:f0:f9:bf:
b0:6b:f9:a4:b1:be:3e:dc:de:23:00:18:02:32:fb:e4:8f:c1:
27:fe:d4:1d:22:2a:71:a5:6f:a2:3e:5a:df:6d:2a:c9:b2:af:
f9:9a:8b:f8:ba:9b:eb:da:8a:2b:71:76:22:c8:e2:43:b0:80:
c7:19:a8:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeLjp/DpKSIyzuYWbD16Db/KMaQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U0QTQ5NUU1QjY2MDdBQ0Y1MDFFRUM4QUQ0MTE2NkJB
MUY4MDlGQzAeFw0yNjA4MjMwMzU2MTVaFw0yNjA4MjQwNjQzMTVaMDMxMTAvBgNV
BAMTKDcxQUU4NkU2NjkwQTRDQ0YwQjhEQkFCRTk0MERFRTgwQTQ5MjVCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/UwGfbGHRKnhAShBMeY57fXO
IL2PCxKrGQ8L0SgSqO+wTib+jV0PJQzTJrhcNOTpX9+ZPlMeAxKh9W8G6WRnD1+N
Jcna/QqrYDLy7oGCoYeItSlPaMcGAvys3H+Sctke6OOdop2m5nzKF6lAXkaU6vFE
k8Pe9lByDTLSx7rOGYZwTz1Ul+XvC1IQj7KwORagWDBZqaZOmEHN/fo/nP7fJWWd
ZR3+QF/P/0OK1+CgO0nXLd4uK8LtHbJ4JrWniGjYqaKRHkxgHLpIeZFTja3bDgh1
2Vt6nYvNRX2r94fKi3yTxoS2u4uPlhQDjNtN0wC8Us4N4kclQkLqOznVWeWZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUca6G5mkKTM8Ljbq+lA3ugKSSW+IwHwYDVR0j
BBgwFoAUzkpJXltmB6z1Ae7IrUEWa6H4CfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRBRkNHTUdzZ3J1MWV5RGtleTNwSGRDWEtZYzMyVXd5MVR3cTd2QWlz
a2EvMC9DRTRBNDk1RTVCNjYwN0FDRjUwMUVFQzhBRDQxMTY2QkExRjgwOUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNEE0OTVFNUI2NjA3QUNG
NTAxRUVDOEFENDExNjZCQTFGODA5RkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SkRBRkNHTUdzZ3J1MWV5RGtleTNwSGRDWEtZYzMyVXd5MVR3cTd2QWlza2EvMC9D
RTRBNDk1RTVCNjYwN0FDRjUwMUVFQzhBRDQxMTY2QkExRjgwOUZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiH+R43W94jLKyf1zuftp+eQ03w5pY4usVIrsDPpilX+FZaDQcUJver3r0gd4
c782BIA5U/fX+qOjllstOApyX7F3jj1FP7/XwIqV7ud9GBRFjnBFJSbE50jKVyDQ
7UulZathdJ565DoQhWcXLE/NmRK7ubigf4gQzKEXVXYArLsc/LpaQnLAqp5BLyz0
4r898vsuFSweE1E9FIkWG9iG5i2x3GeHoTWtfIwrtE3+jJ4Blnzs+Utw4aU7pmrB
AiMu73XN8Pm/sGv5pLG+PtzeIwAYAjL75I/BJ/7UHSIqcaVvoj5a320qybKv+ZqL
+Lqb69qKK3F2IsjiQ7CAxxmoNw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:17 2026 by rpki-client