
$ rpki-client -vvvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json)
Hash identifier: K2YuPtbHUMcAUvpIEmy1o7wiUgU7cJsbTDX1zxbmtZA=
Subject key identifier: FF:FF:88:D5:6C:EA:37:A7:58:CD:42:85:79:73:F4:B2:5A:42:C2:3E
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial: 52B895134E270A67EFB1D8C9580459A959BFD88A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
Manifest number: 04CA
Signing time: Wed 14 Oct 2026 15:56:31 +0000
Manifest this update: Wed 14 Oct 2026 15:51:31 +0000
Manifest next update: Thu 15 Oct 2026 17:39:31 +0000
Files and hashes: 1: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: cTqm/rvgz4qO/kqtsCcG4TxcjbMjdPsB9mUm0EvydEA=)
2: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: 2u21MGTV0ZKz5Jp6CdwaoFcBc2mvcxSeibhtvBbE01I=)
3: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: XbdASgJk5TxKqahbMc1NT5FGG0f9IFxN3UL47BXKw/A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 17:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b8:95:13:4e:27:0a:67:ef:b1:d8:c9:58:04:59:a9:59:bf:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Validity
Not Before: Oct 14 15:51:31 2026 GMT
Not After : Oct 15 17:39:31 2026 GMT
Subject: CN=FFFF88D56CEA37A758CD42857973F4B25A42C23E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:d0:fd:19:70:0c:78:95:c2:29:f9:9f:de:
15:2a:48:fd:24:4f:d1:1c:5f:9d:59:e3:da:b9:1b:
c4:82:38:66:15:5a:60:73:a9:3a:90:ed:6f:06:1a:
44:9b:01:30:a1:3f:23:f2:3f:ad:d8:9f:5b:79:fc:
56:c7:52:0b:3d:0e:35:eb:a3:29:52:6c:b2:cf:9a:
7e:f8:91:12:b3:f2:76:ac:3d:d6:4c:11:5c:bb:05:
a3:ee:3e:48:16:02:ad:41:5a:61:e2:a5:cb:8c:17:
f7:b2:8f:4b:4b:3e:65:25:aa:7b:e8:e7:c4:d8:60:
aa:d9:84:07:52:e7:7b:57:41:44:25:4d:42:64:b0:
9c:f7:43:52:60:c7:f2:fb:c3:95:e3:31:f1:d4:0e:
51:af:2b:04:3d:64:6c:e4:8f:fa:e6:94:76:7f:1c:
52:0f:e4:b9:63:ef:ba:be:1a:ef:97:34:82:d7:44:
ca:f9:1e:86:8d:41:f4:00:8c:9c:cd:92:65:9d:e0:
23:fc:31:14:f2:02:9f:a7:0a:42:26:87:43:d6:96:
0b:b6:b4:77:a7:d4:e4:cb:1a:66:d9:e5:7d:df:c5:
2b:6c:86:2a:00:43:95:a5:a8:be:53:cd:4b:81:c6:
4d:d8:93:b8:bc:16:52:35:4c:19:b4:2d:17:61:a7:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:88:D5:6C:EA:37:A7:58:CD:42:85:79:73:F4:B2:5A:42:C2:3E
X509v3 Authority Key Identifier:
keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:37:38:93:c6:9f:0d:92:c2:47:e9:9f:01:73:9e:65:ab:
53:4a:a5:3f:a7:27:3a:54:ae:6e:9f:de:d2:44:4c:72:5c:eb:
01:00:75:46:25:e9:d6:fe:45:b7:4f:ba:c3:f0:f4:dc:34:f8:
56:a3:6a:1c:85:71:b4:6c:f1:07:85:4d:62:ed:33:9a:bc:5e:
87:d8:44:e1:5b:0c:75:c7:03:85:53:57:bd:e9:88:f1:1a:49:
35:3e:eb:25:48:5f:ec:75:9d:c9:84:39:a5:dd:98:83:82:50:
b1:4d:2e:ae:6a:fb:59:b5:cd:c0:86:68:53:83:80:92:87:e8:
e4:83:e9:03:1d:8a:78:ed:5b:24:45:01:84:56:53:5c:39:6f:
bf:f4:74:98:33:36:58:17:80:c5:c0:a1:05:8a:5b:77:f5:6d:
8e:60:b9:0e:7f:88:d4:8d:ec:9c:22:59:2c:6b:f6:76:3f:9e:
be:d4:d2:3a:9d:a0:60:e6:7b:e3:f0:b9:df:ce:b9:3a:ae:65:
52:de:58:c8:5a:d0:aa:33:73:5a:8b:2d:e5:e5:2a:57:95:4f:
0d:c6:b5:b3:6f:2a:b8:72:84:20:3e:9f:58:98:be:35:19:b1:
b4:af:df:58:37:ce:64:b3:02:a1:a8:14:43:4b:ff:79:37:a2:
49:e5:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:41:34 2026 by rpki-client