
$ rpki-client -vvvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
File: 952E367CCE60CE462735A409663E7DE3B0470E97.mft (raw, json)
Hash identifier: i1kGcj4rwd6d65xPaEQN0Jr2O6kVVMm50l8oE0Jrz0I=
Subject key identifier: EB:0F:44:8E:40:25:86:8E:5F:ED:19:E5:36:13:F8:4E:34:B0:8E:38
Authority key identifier: 95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
Certificate issuer: /CN=952E367CCE60CE462735A409663E7DE3B0470E97
Certificate serial: 3C09D36D8EB67F0A74C4B81C4DD6E519A095A788
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
Manifest number: EF
Signing time: Wed 14 Oct 2026 02:33:20 +0000
Manifest this update: Wed 14 Oct 2026 02:28:20 +0000
Manifest next update: Thu 15 Oct 2026 04:36:20 +0000
Files and hashes: 1: 323830343a333966383a3a2f33322d313238203d3e20323636303632.roa (hash: takW0mXB06WO9vEwuFO68z+5UDiAGVideGG60HppjIA=)
2: 34352e342e3133322e302f32322d3332203d3e20323636303632.roa (hash: xQA94nCA0Qi8N28ZaHpj6C3/5aZy8e1p2I3wfeGE+ic=)
3: 34352e362e3132382e302f32322d3332203d3e20323636303632.roa (hash: +QkLsURiy3BTvubhLZKKzhgordViFOx6F12ZuwuFJjg=)
4: 952E367CCE60CE462735A409663E7DE3B0470E97.crl (hash: K+WpxFPj2atqQYOIRks6RU58AIOrJI1gCPsxUZTzKfU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 04:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:09:d3:6d:8e:b6:7f:0a:74:c4:b8:1c:4d:d6:e5:19:a0:95:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952E367CCE60CE462735A409663E7DE3B0470E97
Validity
Not Before: Oct 14 02:28:20 2026 GMT
Not After : Oct 15 04:36:20 2026 GMT
Subject: CN=EB0F448E4025868E5FED19E53613F84E34B08E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:7d:88:5e:23:d8:55:e7:29:f4:01:4c:a7:
90:a4:46:ca:b9:13:fe:5a:24:ff:35:e0:3c:71:dc:
6f:61:b8:15:60:52:60:13:65:8d:9b:14:c2:ce:95:
fb:07:ba:3c:1b:e1:a4:64:0f:50:68:0d:f2:23:1c:
60:70:fe:8d:c5:6b:32:4a:de:1c:5c:54:59:41:6d:
84:87:e7:f0:5e:82:6c:94:72:3a:4a:54:b8:48:22:
38:9b:20:b9:7e:66:d2:97:ac:98:f1:6d:58:f0:38:
51:0a:f5:d4:af:fd:5c:e6:a1:44:5c:5f:5b:26:76:
c5:7a:06:a5:a8:e9:a1:91:0e:7c:a5:41:bd:f2:c7:
25:e7:40:df:02:04:c8:93:72:48:52:8b:92:7e:dc:
3a:23:0c:5c:4d:3f:ff:a4:df:bf:67:00:1f:6c:7c:
62:75:c0:60:f7:a2:b1:8a:90:ab:91:99:b8:36:ec:
8f:8c:ee:e2:5a:2c:0a:4f:4f:6f:a6:09:15:38:0b:
95:23:6e:03:54:da:e9:d5:37:3d:d0:84:8d:fa:bc:
41:9b:88:90:fd:a7:7f:24:5b:f0:aa:5d:0e:4c:15:
44:c1:19:75:a2:4b:05:a4:92:2a:f9:53:cf:cb:9f:
72:ca:c3:79:92:9e:a9:ba:df:00:4d:5f:3e:c6:8a:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0F:44:8E:40:25:86:8E:5F:ED:19:E5:36:13:F8:4E:34:B0:8E:38
X509v3 Authority Key Identifier:
keyid:95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bc:a3:69:b9:5f:65:4e:f4:14:10:20:bc:0e:eb:47:1b:19:
f6:8b:1a:27:28:8a:61:97:f4:5e:e2:44:20:6f:13:36:4e:b2:
2c:02:bb:2a:e5:5b:8f:1f:f1:1e:3b:49:d1:15:b1:3d:c3:a4:
f0:31:fa:79:56:00:49:ea:15:ac:7c:66:25:21:bb:6e:85:d5:
28:a1:9b:c7:2b:a4:d6:47:55:5e:43:5a:8a:e7:18:77:14:ac:
5d:1b:fc:4e:4b:d9:1e:a7:9c:20:46:94:d8:95:4b:69:a0:03:
71:ad:3e:b7:41:8e:56:93:ed:78:69:b6:fb:d5:cc:f9:eb:35:
83:72:40:0a:a2:93:3a:52:ad:f3:8b:60:11:9c:2f:96:c2:84:
f9:a2:0e:48:de:04:b0:bd:06:e7:52:28:cf:0a:fc:97:ee:12:
2e:00:1e:1b:07:23:64:a3:7e:fa:27:50:a5:b6:1a:59:2e:e9:
cd:4e:4d:26:9e:c1:f5:2e:a0:6e:1c:2c:a9:85:5b:68:c5:6f:
e6:61:2c:f5:87:62:ab:c9:a4:93:40:72:fd:3f:b6:da:58:45:
82:94:a4:26:6a:da:20:af:c3:dc:1d:d0:e5:8f:3b:fc:f4:b4:
b4:d7:73:b2:ad:eb:c4:a6:a1:86:ae:3c:47:7d:e7:dc:be:87:
5b:a2:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:13:34 2026 by rpki-client