
$ rpki-client -vvvf rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
File: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft (raw, json)
Hash identifier: hjQK8rJkqPk73xSSYFqRNitknUzhfrwhyO8crliPidY=
Subject key identifier: 7C:E4:8A:90:0D:EA:DF:E4:D3:2E:C0:00:71:6F:9F:07:84:D1:D9:6F
Authority key identifier: CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20
Certificate issuer: /CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
Certificate serial: 23571CF3728FD1D17254BA28A50458D82643ECFC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
Manifest number: 0190
Signing time: Tue 13 Oct 2026 15:26:23 +0000
Manifest this update: Tue 13 Oct 2026 15:21:23 +0000
Manifest next update: Wed 14 Oct 2026 17:05:23 +0000
Files and hashes: 1: 323830343a393732633a3a2f33322d313238203d3e20323734333839.roa (hash: kTr6CKpzTKUFfgoDsLlDzKHFTQvHPRxo2ersppPwDCk=)
2: CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl (hash: xtj7FMOgl9aB46Ra0+svdvfaSJ/EkDrR6DktC8Gjayg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl
rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 17:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:57:1c:f3:72:8f:d1:d1:72:54:ba:28:a5:04:58:d8:26:43:ec:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA8518E6D0B35AA612E2F3C93750EC0B5286E20
Validity
Not Before: Oct 13 15:21:23 2026 GMT
Not After : Oct 14 17:05:23 2026 GMT
Subject: CN=7CE48A900DEADFE4D32EC000716F9F0784D1D96F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:12:33:bf:2c:d0:6e:90:f0:9f:70:66:57:
46:79:c3:65:7e:22:2e:c4:59:af:39:8e:b2:ef:83:
fe:63:b5:5f:1f:96:d2:2f:e8:97:da:84:c2:bc:dd:
a7:1e:68:75:a9:94:f3:98:88:70:d5:bc:85:a9:fa:
01:bc:97:12:1c:da:69:44:d5:ba:fa:2f:b8:fe:8e:
08:d1:f0:31:ae:7d:88:5d:cd:38:43:8d:15:b8:6c:
67:0f:2d:c3:23:29:63:1d:e4:b8:7d:c6:8c:33:3e:
af:c8:81:67:b3:e4:43:fd:49:c8:04:f9:0d:db:fd:
f1:7b:47:ba:bc:d4:f5:9a:94:e2:49:8a:82:c1:a5:
5e:56:14:1a:0e:19:15:c1:ed:4c:95:75:d4:d7:7e:
ab:e6:15:31:2e:dd:2c:53:3a:bc:cc:2d:fe:61:c2:
e4:7a:8c:17:ee:24:05:35:98:e5:49:f5:0f:4b:97:
b9:8f:be:51:67:51:87:9b:f1:98:bd:3a:e1:40:48:
c2:53:67:63:cb:25:e3:b9:84:46:8c:05:ac:c4:97:
d2:9c:a3:b7:c2:42:ca:95:da:03:37:6b:99:17:13:
e7:67:a0:b2:c8:25:9f:f3:3a:d9:be:29:01:3e:66:
f1:06:4c:18:1e:5c:9a:7e:fa:90:10:26:d9:4d:e2:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:8A:90:0D:EA:DF:E4:D3:2E:C0:00:71:6F:9F:07:84:D1:D9:6F
X509v3 Authority Key Identifier:
keyid:CE:A8:51:8E:6D:0B:35:AA:61:2E:2F:3C:93:75:0E:C0:B5:28:6E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/36vH8iAgcjMs63JeqYo2GmHw5dVRUxihjnW9PHMpPv6t/0/CEA8518E6D0B35AA612E2F3C93750EC0B5286E20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:b3:db:0a:3c:00:ad:14:9d:27:7d:4a:8b:51:6a:2b:cf:
76:0b:7c:4f:fe:1e:2e:8d:31:77:f0:33:62:97:00:56:37:1c:
f0:78:2b:74:79:fc:df:b0:02:7d:7a:a7:da:fd:4e:c0:77:07:
37:b3:f9:a5:27:0f:09:fe:67:d7:2e:ab:28:34:42:e6:ea:c4:
dc:37:10:50:c8:d0:b1:c3:60:d4:47:88:3d:ef:ac:7b:6b:3c:
ef:2e:2e:ae:7f:91:fb:c2:05:63:18:4d:d1:52:31:70:b1:2a:
e0:c9:38:39:66:03:9e:80:4d:96:b1:34:30:8b:53:75:a8:50:
02:d9:ba:d6:f8:20:da:ec:61:06:30:21:1a:e1:37:63:a4:09:
d5:d2:54:94:71:09:7f:b0:f3:1d:9a:8e:85:49:ad:62:66:55:
1f:a3:d9:03:d9:b5:df:db:33:b0:9c:82:1c:48:cf:db:87:68:
26:5b:32:36:64:fb:e5:3a:5c:0d:18:01:94:0a:fa:59:f1:84:
cc:21:22:e2:bd:2e:6f:cd:c5:df:89:4d:8f:7e:31:60:61:03:
b3:b6:e8:c7:8c:ef:c1:3f:c7:cb:74:a2:63:d7:26:b3:fe:88:
ac:3b:1f:b3:b5:47:df:8f:80:e5:63:1c:43:a2:c5:70:62:6c:
0b:3e:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:45:46 2026 by rpki-client