
$ rpki-client -vvf rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.mft
File: 8AA3F421F78BAA3CE733941452880E102D4611B2.mft (raw, json)
Hash identifier: FfT3booVDNSYeQ4quAM1X6znsKH4fxB9im5/AlNG458=
Subject key identifier: AF:24:9B:C3:4B:6B:B8:D3:D4:1D:AB:EA:0D:C5:EE:3C:54:09:2A:F1
Authority key identifier: 8A:A3:F4:21:F7:8B:AA:3C:E7:33:94:14:52:88:0E:10:2D:46:11:B2
Certificate issuer: /CN=8AA3F421F78BAA3CE733941452880E102D4611B2
Certificate serial: 1A7E62B37FC33339E8837F88DF355DADD4CD5782
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA3F421F78BAA3CE733941452880E102D4611B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.mft
Manifest number: 7D
Signing time: Thu 23 Jul 2026 09:36:39 +0000
Manifest this update: Thu 23 Jul 2026 09:31:39 +0000
Manifest next update: Fri 24 Jul 2026 12:08:39 +0000
Files and hashes: 1: 323830343a366534343a3a2f33322d3430203d3e20323730353835.roa (hash: lAzBJ1bMPuQJ9FbDEhYDUXPJBu66t7GW4c+CrUD6njM=)
2: 3137372e3135322e39362e302f32322d3234203d3e20323730353835.roa (hash: XUMgyHbQj0Qr8Vu3TxUw4E1grdLCQNsA/yfk/ceNjXc=)
3: 8AA3F421F78BAA3CE733941452880E102D4611B2.crl (hash: LctWO7XrUdJKTmEDbIKeY1sc079XYqYhg4cXjuAKFVs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.crl
rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA3F421F78BAA3CE733941452880E102D4611B2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 12:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7e:62:b3:7f:c3:33:39:e8:83:7f:88:df:35:5d:ad:d4:cd:57:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AA3F421F78BAA3CE733941452880E102D4611B2
Validity
Not Before: Jul 23 09:31:39 2026 GMT
Not After : Jul 24 12:08:39 2026 GMT
Subject: CN=AF249BC34B6BB8D3D41DABEA0DC5EE3C54092AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:b1:32:90:f1:39:cd:8d:7f:a1:94:2d:c5:
a6:22:09:4b:1d:e5:72:d8:67:a9:ad:34:03:7f:84:
bc:99:c3:d9:f0:30:bd:d2:ee:fe:cd:6e:e7:81:79:
cb:84:0c:1b:77:7f:16:80:e0:c0:3d:75:3f:9a:33:
be:61:56:a8:75:47:4b:13:f2:2c:ee:9b:cf:a3:82:
2c:f6:bd:7c:1e:ea:d7:1a:fd:a9:5e:8f:d5:e2:99:
c2:77:47:98:94:2b:24:25:3c:7a:d7:4c:11:f0:74:
3f:31:07:3b:f6:0c:eb:a1:7f:7f:f4:2f:0b:fb:d5:
08:21:19:61:35:5f:3e:8c:0b:d6:11:8d:38:f7:ca:
ca:bb:cc:d0:0f:55:b8:ba:68:b8:3b:63:6f:18:de:
52:e5:d3:83:cc:46:fa:79:58:d0:f9:a8:7e:db:86:
d1:5f:2d:4a:91:fe:87:d2:bb:6a:8a:6b:88:98:87:
dd:4c:50:f9:28:e4:82:c7:7b:d8:78:e0:8c:62:31:
14:80:88:c9:0a:35:7d:9a:51:82:a7:52:f7:bf:07:
f0:33:7c:85:5b:08:b9:fc:00:48:95:2e:cf:46:42:
22:aa:ab:2c:cb:5c:12:c0:66:54:00:f7:cf:f0:86:
b8:0c:5f:82:ad:00:df:60:b8:d9:f6:5a:e1:12:3d:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:9B:C3:4B:6B:B8:D3:D4:1D:AB:EA:0D:C5:EE:3C:54:09:2A:F1
X509v3 Authority Key Identifier:
keyid:8A:A3:F4:21:F7:8B:AA:3C:E7:33:94:14:52:88:0E:10:2D:46:11:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA3F421F78BAA3CE733941452880E102D4611B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qdMA3ocxrNbTSAgCKrgJchFVzE3PkDWEn3jeftWg7uU/0/8AA3F421F78BAA3CE733941452880E102D4611B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:01:e2:2b:7f:9d:35:2f:0e:8d:bd:e2:67:da:3e:83:9b:0e:
37:07:6c:68:b0:94:c9:fe:25:dd:20:ec:19:b8:42:d9:88:64:
50:7e:84:51:8f:f4:85:1c:7f:ae:c6:f0:38:05:93:79:89:f2:
fc:5b:5f:c1:96:ef:88:0c:c8:79:83:dc:a8:e5:cd:f6:5a:47:
11:4b:30:8b:cb:09:35:15:4d:c1:ed:43:f5:ec:bf:46:d6:b2:
6b:30:ba:17:49:de:03:31:1d:e3:76:b4:b0:b0:9e:f7:13:1b:
df:a8:b1:3d:e0:74:6e:87:a8:74:02:94:f4:48:13:65:93:22:
4f:71:1c:b2:80:e4:b0:59:dd:58:d9:40:35:20:43:9e:f5:2e:
aa:8c:32:74:68:3a:a9:a9:0a:bd:05:cf:e5:2c:8b:71:3a:c5:
88:56:ee:f4:ae:a2:6d:cd:bc:06:de:bc:55:ae:ed:07:7f:a7:
b1:c9:b1:fa:26:21:c1:ff:a4:22:21:5e:05:c8:f9:55:2d:fe:
14:73:d1:3c:c5:de:a1:79:03:2c:cd:18:a5:56:0e:2a:44:b2:
f8:50:eb:94:f5:33:b2:e9:d0:3b:ca:d0:fe:82:5d:f1:c6:1a:
64:7f:34:2d:9b:21:b6:eb:00:33:62:32:10:b8:0b:51:13:80:
bf:87:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:42 2026 by rpki-client