
$ rpki-client -vvvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
File: 9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft (raw, json)
Hash identifier: yY4XqbTB601i5UQBxb3TB/8bpNY+aPlzvj/OM4lK3r4=
Subject key identifier: 03:F3:00:21:EF:6F:31:B7:31:03:69:2E:9E:21:1E:30:52:EB:71:83
Authority key identifier: 9A:FF:E4:1F:94:28:4A:C5:68:8E:8D:87:74:ED:A7:CE:81:8E:4D:89
Certificate issuer: /CN=9AFFE41F94284AC5688E8D8774EDA7CE818E4D89
Certificate serial: 796F7F9CC097B50A42DB05BB906311720165817D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
Manifest number: CD
Signing time: Thu 15 Oct 2026 07:29:37 +0000
Manifest this update: Thu 15 Oct 2026 07:24:37 +0000
Manifest next update: Fri 16 Oct 2026 10:07:37 +0000
Files and hashes: 1: 9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl (hash: klGV18H1XWjJto2oCMChOcC62v1DoXhz/deGhEjqOF0=)
2: 3137392e34382e3138342e302f32322d3332203d3e20323731303935.roa (hash: 2lO7vjfyDEWbfSNoSg6jqpC8X3B6myT4sWIIw2LtugM=)
3: 323830343a373633303a3a2f33322d313238203d3e20323731303935.roa (hash: uMbIskNOBOpS9ow1hpatypkHDuCnFp6jOVXYaHmtZmQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl
rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 10:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:6f:7f:9c:c0:97:b5:0a:42:db:05:bb:90:63:11:72:01:65:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFFE41F94284AC5688E8D8774EDA7CE818E4D89
Validity
Not Before: Oct 15 07:24:37 2026 GMT
Not After : Oct 16 10:07:37 2026 GMT
Subject: CN=03F30021EF6F31B73103692E9E211E3052EB7183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:8a:fe:54:5f:1a:dd:8b:77:dc:b7:ae:59:
d6:0b:8d:b0:10:75:af:d8:13:67:78:e2:f2:51:ef:
4c:8d:37:33:96:40:d9:96:c9:9d:15:91:f1:48:ac:
5a:e9:23:88:dd:97:84:a3:d5:33:0b:5f:5c:eb:42:
48:5d:cd:38:51:d7:16:35:7e:60:b2:36:b4:2f:e0:
16:e1:b7:b2:d9:bb:87:03:c8:7e:ba:f0:58:7f:c1:
4e:ea:a5:9a:4e:3d:bf:8e:86:8d:e2:50:3f:d0:54:
c2:0d:08:56:95:f6:5b:23:e2:b7:56:e2:2d:6b:51:
95:9d:f0:c7:b0:18:12:9d:ad:af:13:db:6a:28:e9:
ad:8b:c1:e8:4c:3c:90:0a:93:86:0f:66:e5:b2:36:
aa:cd:e9:0c:a3:6f:6a:50:7b:b7:ad:cd:8b:76:74:
92:7b:22:5b:a8:fb:0a:83:82:d8:78:ba:af:37:69:
cc:6b:5d:70:ac:24:a1:13:43:d6:30:48:76:1f:8d:
e6:84:e1:c4:90:6e:22:3c:25:db:ad:47:c9:69:bc:
a1:c4:d0:c8:80:34:a1:5b:44:30:9d:99:93:7c:d5:
cf:18:08:17:cb:92:6f:0b:90:d5:f0:be:80:6b:fc:
c6:05:6e:b7:d4:3a:20:7f:12:17:49:2f:e0:2a:f1:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:00:21:EF:6F:31:B7:31:03:69:2E:9E:21:1E:30:52:EB:71:83
X509v3 Authority Key Identifier:
keyid:9A:FF:E4:1F:94:28:4A:C5:68:8E:8D:87:74:ED:A7:CE:81:8E:4D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7f:bb:bc:d7:df:01:83:e6:bc:59:df:d5:d9:5b:c4:81:d1:
ec:4b:70:a7:31:52:f6:3c:56:6f:26:65:64:8f:9a:eb:9f:18:
1b:ca:11:e2:a0:cc:59:d4:c6:f2:c6:d3:f1:54:48:4d:ff:a1:
0a:a9:73:23:29:97:6a:a7:8b:82:88:83:35:aa:f2:5e:3e:ab:
10:41:47:e4:a2:53:e7:d2:04:06:b8:2e:62:7c:20:7e:ea:93:
96:3b:17:e2:8f:b1:ad:93:fd:b4:1f:36:7d:2c:df:85:c0:f0:
53:73:dc:fd:17:3c:94:46:bb:92:53:ca:07:2f:8d:6e:11:6b:
75:49:ac:ad:51:f7:53:dc:1a:17:52:f3:a5:04:b6:0b:e4:c4:
14:62:12:84:68:12:9f:b8:db:94:24:67:ed:db:8f:68:35:a7:
6b:8a:1d:3d:84:57:cc:fd:3c:95:2f:7f:38:6d:a6:f1:98:33:
3f:ef:55:7e:f0:59:e8:ad:40:2c:95:ac:4c:84:0d:f4:6c:54:
6e:97:ff:f4:72:37:49:27:e0:30:b2:bf:6b:53:02:db:51:ae:
19:e0:3e:14:46:b1:df:4f:ed:1a:cc:0d:e5:70:5c:6c:58:53:
ac:36:74:3e:c3:71:88:f5:1c:d4:37:39:ba:24:21:8c:bd:cb:
0b:e7:c5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:21:41 2026 by rpki-client