
$ rpki-client -vvvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json)
Hash identifier: FqY2GjjAxx3hgoYskDA/6cG/P1Fo/Bu+S9Hy7hD9ASU=
Subject key identifier: 13:7C:D9:E8:47:11:6D:BC:0B:6E:9D:DB:F0:28:8D:D9:78:78:08:E1
Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Certificate serial: 5C37353603DFB9D243214185B1BBD7F59A650D63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
Manifest number: 0309
Signing time: Fri 30 Oct 2026 04:38:09 +0000
Manifest this update: Fri 30 Oct 2026 04:33:09 +0000
Manifest next update: Sat 31 Oct 2026 06:14:09 +0000
Files and hashes: 1: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: Fzkbt6+bDg45FHge4eVjFdmeR+Zts5Y2bHYh8Nn0uwQ=)
2: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: Bg0WrGxy0o11irk8tHnLpD6z0EbMsFqcm/KtkgEhuDQ=)
3: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: tFuHKz/s3BdjJM4pioXyxGPu891yBfBk8UFhPUldP30=)
4: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: A23b5UkF2jEVo2OGAZ7Hi0+sfgnbV7WaHxabvCl9A8E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl
rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 06:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:37:35:36:03:df:b9:d2:43:21:41:85:b1:bb:d7:f5:9a:65:0d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Validity
Not Before: Oct 30 04:33:09 2026 GMT
Not After : Oct 31 06:14:09 2026 GMT
Subject: CN=137CD9E847116DBC0B6E9DDBF0288DD9787808E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:6d:56:46:a4:c9:7d:d2:0b:50:82:c2:02:
8c:73:01:2f:01:46:60:6b:ca:5e:de:8c:ca:f6:7e:
88:69:7a:80:bb:72:cb:50:ee:20:c5:5a:fa:aa:63:
3f:26:c4:14:60:b4:6f:90:7c:ee:33:86:33:b8:99:
75:e9:df:9c:86:27:2f:ad:e1:8b:6c:1d:62:e6:66:
f7:06:15:3f:14:e6:c2:03:89:74:ad:0e:5d:36:00:
90:28:59:fa:45:1d:0f:1c:71:ed:22:91:f4:e7:d8:
65:a5:73:b5:5d:98:31:fc:40:b0:ac:e3:81:bc:6e:
0c:36:bf:ca:7a:15:45:4a:cf:42:b1:a9:8a:0a:14:
31:08:9a:34:72:05:c1:57:6b:ee:2b:c5:7e:1c:51:
2b:58:ed:4d:a7:e0:1c:26:a1:48:94:b4:7e:18:9e:
81:5e:06:5c:42:bc:41:75:b8:2d:c1:f5:95:c8:2c:
ee:88:24:e5:a4:75:05:c9:c7:2d:a7:c3:e4:6f:09:
16:78:be:06:17:31:ee:44:84:74:f8:6e:af:ad:5f:
3c:73:b4:18:ff:1b:b5:d4:11:61:df:47:17:eb:19:
d9:a0:d6:c2:51:c7:06:37:38:66:04:c6:b5:cb:53:
47:9a:e6:e5:a8:22:7f:39:7b:37:f6:37:c6:a4:67:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7C:D9:E8:47:11:6D:BC:0B:6E:9D:DB:F0:28:8D:D9:78:78:08:E1
X509v3 Authority Key Identifier:
keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f4:68:6a:94:cc:a3:b0:ac:b3:65:a6:3f:d7:fb:45:2c:9a:
ce:67:ba:02:35:a8:75:d4:c4:86:0a:e2:e8:5f:28:b4:c9:6d:
17:ef:d5:68:27:3d:56:32:0e:14:26:7d:f8:4c:2c:4e:17:83:
df:5f:46:b6:28:3b:2d:18:82:c5:fe:1b:2b:d1:aa:b5:e7:e4:
b2:f0:3a:86:fa:7a:0d:6b:28:14:4b:b0:4e:bb:12:91:e8:21:
a9:00:50:e9:e0:37:5e:a0:df:68:59:21:3b:14:a1:72:9c:f8:
68:d5:93:17:8f:d7:60:0a:76:c2:95:6a:2e:2d:1b:b3:6f:ed:
d2:8e:17:6d:75:40:ef:c7:5e:8d:b0:f9:68:f7:a4:7c:5b:98:
26:12:c6:99:1a:7d:c0:1e:de:d7:04:83:95:e8:58:1f:8f:5e:
4e:1d:f0:3d:50:38:5e:23:f7:f7:f7:2e:50:9c:4f:1f:fc:81:
d2:ff:2d:c3:c7:1b:7f:ed:85:2e:89:34:82:a5:4f:0d:4d:4d:
4a:84:b8:42:78:63:cd:a4:77:a6:af:4c:4a:36:b1:7d:be:ca:
d7:a9:5f:ff:96:30:a4:64:d1:8d:39:99:d8:ff:03:85:7e:d5:
90:d4:76:bb:ab:a1:96:11:c7:8d:03:ef:d0:a5:aa:23:de:ae:
55:ed:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:15:20 2026 by rpki-client