
$ rpki-client -vvvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
File: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json)
Hash identifier: rPdZztgC6v/BzcSVXFzcodKms8IJK/T1TUfrIJIm67I=
Subject key identifier: 3C:A2:DD:95:34:E9:67:1A:CE:F3:71:CE:E4:1F:64:55:60:75:E8:47
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Certificate issuer: /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial: 67DD5363FDE472E40A27FDEAD6545B2BC57ADAC7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
Manifest number: 042D
Signing time: Sat 10 Oct 2026 08:16:41 +0000
Manifest this update: Sat 10 Oct 2026 08:11:41 +0000
Manifest next update: Sun 11 Oct 2026 10:20:41 +0000
Files and hashes: 1: 34352e372e31322e302f32322d3332203d3e203631363738.roa (hash: 5naDD0zitt7PIirZU/YwT0lkSbQqx7ZCEn7ZHzN8E3o=)
2: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: LQfEs5BsnJRWNQT6AAbr+cgTKDJiMzbQS+Ni1JHpza0=)
3: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: lvy8tIKgp/AGimEazggtqQ9hXrE/1Yk1zHJMunpN+DM=)
4: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: tlR4y5t9LIns2FHrpFk0pedEKjfE0nyP7jxIwrmH4ZQ=)
5: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ERXeEDdPGxuxbhWYHNqcE8ExZ8Cxyb4ER4OqtsO0Z8o=)
6: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: E/Et19r3lpNjQPCWLAmS3AuFupx/WGnCwz+KuUlSuA4=)
7: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: yi5NHf81xSrwdLikf640t+ZSO3q9F/irBW2g0xWm15s=)
8: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: k+OYIPafOPyxewPaNEllAN4XrYOU55urLV+aDorsq9s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 10:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:dd:53:63:fd:e4:72:e4:0a:27:fd:ea:d6:54:5b:2b:c5:7a:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Validity
Not Before: Oct 10 08:11:41 2026 GMT
Not After : Oct 11 10:20:41 2026 GMT
Subject: CN=3CA2DD9534E9671ACEF371CEE41F64556075E847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:66:7b:69:70:3d:85:19:c0:d0:5c:ec:b4:
6f:ee:9c:0d:89:ca:a6:62:ea:1e:d8:36:f3:50:c5:
32:e9:b8:55:fa:dc:92:8e:4f:ee:6b:bb:89:8c:5e:
15:51:07:21:e4:74:ee:f7:af:e0:01:d8:6b:22:dc:
97:7b:4d:1c:4a:3b:0a:13:1d:89:4a:fe:72:d7:99:
bc:92:0a:1f:9d:c7:2a:5b:38:d8:0a:a2:61:a0:4b:
dc:96:1f:d8:db:a1:d2:17:e5:78:0d:57:ec:86:7a:
cc:25:ff:32:24:58:ea:5b:d1:1d:4a:c0:5b:fe:07:
d3:9a:45:cb:96:97:8f:92:28:5d:d4:9e:91:27:6c:
59:d9:ea:ef:20:b4:e9:d0:b9:38:ff:32:34:4d:a5:
b7:79:06:47:82:98:b3:e8:41:85:fa:fa:08:02:23:
00:31:22:25:94:ba:12:be:32:5a:9d:f7:f0:c4:12:
e4:fb:ab:a6:2f:30:e1:b1:ce:87:ec:6c:f3:6d:05:
bb:87:64:ac:ce:eb:66:6a:2b:65:08:f3:e8:fc:d6:
dc:e4:ec:94:48:e2:43:75:24:ae:1f:79:c2:01:95:
05:4d:b9:6b:dc:a5:46:c4:45:11:66:e2:ed:82:00:
a8:d4:23:cc:44:42:83:c2:e9:e1:35:3c:90:bb:03:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A2:DD:95:34:E9:67:1A:CE:F3:71:CE:E4:1F:64:55:60:75:E8:47
X509v3 Authority Key Identifier:
keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e4:d6:2c:ed:5b:fa:73:a3:ec:71:b8:66:d4:7c:d7:19:a5:
58:39:eb:ca:53:b9:b1:c7:a6:ef:80:ae:60:65:ca:a9:97:ff:
c7:b0:1d:ce:78:97:af:1b:0f:10:fa:51:49:66:eb:de:d2:45:
3e:32:85:53:e7:e7:53:ef:5d:74:be:94:59:b7:40:32:3e:db:
c6:d2:2e:6e:96:b6:d2:51:90:f4:e0:d4:9d:68:ef:a1:d9:f0:
49:07:9a:e3:45:f8:a6:76:73:48:b9:51:fa:c9:ad:b6:bb:42:
43:09:18:a4:6f:89:ac:e9:70:8d:cd:57:2c:e4:11:54:3f:de:
1c:41:4a:bc:15:e1:d3:19:e1:c2:ee:3a:f1:1e:97:b4:a9:d5:
35:7c:28:ee:83:02:eb:c5:0e:d6:7a:5f:bc:9e:9a:6a:5b:50:
14:e1:41:9e:1e:12:0a:26:db:e3:3e:53:7d:57:8e:5a:e1:ff:
8c:cd:b4:1f:94:64:1e:5c:9d:1f:9f:ac:8a:a6:66:b2:a3:39:
09:3d:1e:37:66:26:2d:c4:f6:b2:5d:0d:52:f6:f1:fe:f5:e9:
a0:de:99:de:6b:e2:0e:61:67:db:f2:a6:fa:c5:06:73:fa:4e:
f5:a3:79:1c:d1:20:25:12:27:4e:4a:42:1f:2a:3d:0a:dc:87:
5e:fc:ad:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:38:34 2026 by rpki-client