
$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier: nNGbGgKtvbLhJseUlOjF0wA7onOOz+5ZnAUn1ADVNlk=
Subject key identifier: 0D:9D:14:B6:6E:31:53:B3:03:A0:E6:BF:47:B6:30:26:F3:71:C3:3B
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer: /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial: 155E4176F93001D468515E99FC282B641948ABCC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number: 0134
Signing time: Thu 09 Apr 2026 06:30:00 +0000
Manifest this update: Thu 09 Apr 2026 06:25:00 +0000
Manifest next update: Fri 10 Apr 2026 07:16:00 +0000
Files and hashes: 1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 3h6SfhzIPmrfXblR02cl5n5u6+4bnzhiT4vzZuMnS64=)
2: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: VyE9iHz3xhEfhzvHNmYrZfWFUzLKuAQo+FzkgAdY7ME=)
3: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: Wjg+m1cx/X8oT/gw6pxe4W9jSLnGzKtWU2X8tEoWje4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 07:16:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5e:41:76:f9:30:01:d4:68:51:5e:99:fc:28:2b:64:19:48:ab:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Validity
Not Before: Apr 9 06:25:00 2026 GMT
Not After : Apr 10 07:16:00 2026 GMT
Subject: CN=0D9D14B66E3153B303A0E6BF47B63026F371C33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:4d:2f:17:cf:1c:35:47:18:26:e3:42:09:
a4:ad:9c:7a:02:ba:48:e3:e1:ce:37:e0:f7:33:7b:
74:0e:51:19:1b:77:d0:a5:40:ac:f1:61:61:25:ad:
0e:37:50:07:b5:02:ce:bc:27:e7:dc:56:4c:0d:ae:
df:f2:b4:8c:80:a8:cd:a9:9b:b7:73:8a:72:8d:57:
b1:6d:02:49:7f:3f:5b:3c:e9:6b:2a:0c:cd:b6:7d:
b0:4b:db:ce:68:5b:d4:66:ed:02:21:62:49:e5:30:
c7:ef:53:a3:93:8d:bb:12:98:e2:09:29:3d:56:da:
2a:4c:38:7f:24:54:56:f8:44:20:27:76:45:fd:01:
d5:f8:02:2a:e3:89:ad:19:0b:ab:0a:c5:85:15:ea:
48:b8:48:78:59:a9:34:0b:ee:9c:44:3d:ca:d2:4d:
3f:77:74:a7:35:93:e7:0c:3d:83:42:04:6f:b6:33:
79:07:e2:cc:78:08:5a:0f:15:47:50:36:80:5f:1d:
55:b6:ca:46:3f:30:73:1a:3c:d8:c0:94:83:35:fd:
8d:28:6a:00:8f:cd:6e:0f:f2:75:23:68:45:cf:3d:
df:6d:06:1f:68:75:b2:31:4b:f9:5a:7a:51:5c:ad:
66:0f:d3:6f:86:7b:96:ab:e2:93:8e:f9:59:7a:af:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:14:B6:6E:31:53:B3:03:A0:E6:BF:47:B6:30:26:F3:71:C3:3B
X509v3 Authority Key Identifier:
keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3b:4c:4c:f7:23:1b:50:d7:07:f3:5c:10:af:b4:6d:d0:75:
f3:d7:c0:44:4d:97:d8:a1:39:b8:1c:b2:1c:a4:1a:55:5a:74:
bf:c9:08:e9:03:37:ba:02:e5:48:e1:4d:fe:c3:72:40:db:1b:
38:cf:d3:7c:89:4c:e8:77:7c:84:01:3c:19:68:a0:5d:32:cd:
fa:2b:6b:9d:ad:fe:83:d7:3c:31:3f:03:5b:9c:1b:b5:92:b8:
54:53:61:29:00:11:d6:1d:32:d8:7a:b2:9d:05:e9:2c:74:0a:
55:cf:2c:c8:eb:bd:42:22:7c:6e:92:30:4c:97:d1:d9:ca:8f:
33:a6:40:11:2c:10:7a:34:33:cc:75:70:01:e4:94:78:1d:60:
a1:29:cc:af:09:df:7e:22:53:0e:ec:62:09:e0:60:07:09:0b:
cf:3d:ad:69:81:92:80:6e:b8:ce:c0:4b:85:a3:6a:22:71:dc:
7e:e8:5d:fe:5e:21:cb:fe:25:18:ff:7e:e4:ec:e3:ec:86:39:
6e:39:4f:84:06:94:6d:47:07:a3:58:54:e8:28:09:5f:a9:c7:
5e:c9:1a:8a:34:2f:88:fc:13:d2:54:8a:cf:be:ce:27:e1:e9:
00:a9:49:b8:d0:f7:8e:79:1f:4a:a0:06:00:67:85:7a:90:df:
21:51:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:14:27 2026 by rpki-client