
$ rpki-client -vvvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
File: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft (raw, json)
Hash identifier: hrx4GCEroPrhSjhuuEZwlFq1XX/qlPzOLZMh3JSCam0=
Subject key identifier: 75:D6:C1:91:0F:45:1C:63:BD:C0:4E:44:6E:78:8D:E0:2F:5D:38:CE
Authority key identifier: 42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88
Certificate issuer: /CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88
Certificate serial: 73A5403EA4C01F9133701ADB445691CD48E0C3CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
Manifest number: 9B
Signing time: Tue 13 Oct 2026 03:46:13 +0000
Manifest this update: Tue 13 Oct 2026 03:41:13 +0000
Manifest next update: Wed 14 Oct 2026 04:48:13 +0000
Files and hashes: 1: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: 8bTI6STV9myie2O7jjWabFesGEs4DvpRnx5NUft7YyM=)
2: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: S+1YM580MYl2/Ez26cZdvbOuNQSh+xfPKBssmmPx6uY=)
3: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl (hash: 1H+eVgfLeovEshKHF9jqUQ5QfM+JEt+7ygx/LFiScBI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl
rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 04:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a5:40:3e:a4:c0:1f:91:33:70:1a:db:44:56:91:cd:48:e0:c3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88
Validity
Not Before: Oct 13 03:41:13 2026 GMT
Not After : Oct 14 04:48:13 2026 GMT
Subject: CN=75D6C1910F451C63BDC04E446E788DE02F5D38CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:98:9b:0c:51:00:f8:16:04:48:65:58:e1:
56:2a:81:0e:38:53:f9:ca:67:58:37:01:ab:15:64:
23:f4:22:15:23:ab:67:cc:e6:0a:91:b1:bb:19:39:
ff:6a:41:7a:39:fd:2f:f5:e7:43:47:ea:aa:9f:4a:
78:a9:ca:7a:0b:be:92:48:d2:29:04:5e:33:6a:e9:
cf:6f:ef:7b:f5:55:44:1d:9a:43:da:31:33:83:2d:
9c:ce:9e:5e:d8:8c:c6:77:58:bb:aa:9d:79:e7:fe:
1c:2b:1a:80:e2:42:90:64:61:84:1f:b3:eb:d9:37:
7c:12:41:57:57:70:a3:8f:16:b7:d3:a6:e3:3b:6f:
16:81:43:60:9b:e5:c3:0f:f2:eb:83:3f:7f:fc:2f:
28:3c:ee:8d:d0:43:76:27:fe:9d:f7:31:ff:ba:6a:
cb:48:82:32:3d:93:a9:bd:6b:03:d0:60:28:e6:dd:
34:ca:a4:1f:5b:a6:62:40:88:3e:e0:75:4a:07:6e:
ee:e0:11:84:22:6e:9a:bc:0c:76:f5:22:50:38:f3:
80:a5:77:69:b9:47:2a:8f:ef:e0:f9:00:c0:ad:41:
00:7b:88:1d:7d:2f:a8:92:02:68:3c:96:2e:70:93:
70:2d:b6:63:dd:3f:92:69:5c:d1:1c:13:34:93:5e:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D6:C1:91:0F:45:1C:63:BD:C0:4E:44:6E:78:8D:E0:2F:5D:38:CE
X509v3 Authority Key Identifier:
keyid:42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9b:41:75:25:87:d8:fc:1e:f0:e1:fe:45:77:62:89:e2:4a:
f4:55:3e:2c:27:aa:da:da:1c:e0:97:d2:af:29:8c:78:9e:13:
84:de:b8:11:43:f3:a4:47:c6:a1:75:1a:17:5b:4e:d5:64:22:
6e:37:b5:3a:a5:1d:0b:c6:ac:b0:c9:60:96:ea:44:7f:fc:0a:
5f:56:eb:31:fb:79:21:b5:01:0b:d1:02:17:e2:41:fc:17:2f:
64:93:41:8f:4d:70:9a:fa:74:1c:93:05:1f:90:0f:c9:f0:ee:
8a:41:d4:39:fe:38:f9:d4:85:8c:1f:9f:5b:5c:20:97:e4:3d:
1d:1b:e0:18:a9:f8:bf:e0:75:b0:97:2a:dd:f9:99:1f:ad:16:
3b:d8:1c:5b:72:1c:fb:b1:e3:d9:8e:03:32:09:91:a8:71:a0:
23:4c:05:30:0f:b2:21:c2:98:a2:d5:77:f1:bb:e0:68:14:42:
8a:d8:b9:39:2a:46:07:e0:f0:46:6d:66:fc:f3:61:1e:7d:28:
10:b5:46:cc:d3:4f:69:a3:be:75:2d:4f:29:52:00:3d:16:46:
5c:6a:39:35:7b:3d:c0:a0:33:7d:39:5a:a6:d1:f0:b7:a9:9c:
7f:86:cb:20:59:e8:0c:32:54:6a:9f:58:8f:0a:ce:da:cc:6a:
4e:50:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:49:17 2026 by rpki-client