
$ rpki-client -vvvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
File: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft (raw, json)
Hash identifier: gmoJfBa4hFnvK9QdPWx0pvVyVRdsPVuk9iZTE0Xpr68=
Subject key identifier: 57:6E:84:51:D6:89:D6:5A:0D:EC:10:46:C2:4C:7F:A9:0F:B1:76:7A
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Certificate issuer: /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial: 514BA72491548559AD4E4AE95A8F4BE9F642E40A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
Manifest number: 020A
Signing time: Tue 13 Oct 2026 19:42:55 +0000
Manifest this update: Tue 13 Oct 2026 19:37:55 +0000
Manifest next update: Wed 14 Oct 2026 19:58:55 +0000
Files and hashes: 1: 323830343a373138303a3a2f33322d3438203d3e20323730373933.roa (hash: /cnoHZgdUWTcaft/c1KLJ667UIUwF4Yh4h1C7lgkkhg=)
2: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl (hash: Fy5CsCoivnbGLU2xTnKKDlo1GRraGafwYBlV9YTprQE=)
3: 3230312e3135392e3136302e302f32322d3234203d3e20323730373933.roa (hash: P7vGRRMCg+oPr+XYjl61Memq1sfL0vwdVUE94kTUuqM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 19:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4b:a7:24:91:54:85:59:ad:4e:4a:e9:5a:8f:4b:e9:f6:42:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Validity
Not Before: Oct 13 19:37:55 2026 GMT
Not After : Oct 14 19:58:55 2026 GMT
Subject: CN=576E8451D689D65A0DEC1046C24C7FA90FB1767A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:90:ee:41:62:0c:06:d1:31:7f:52:0c:d6:
82:03:49:78:f4:81:6c:f4:e6:00:0d:b8:b3:05:92:
c3:a0:5f:78:d4:d7:62:a6:88:11:e5:38:b5:c5:4a:
60:81:d3:26:ab:b5:55:dc:75:f1:3f:7a:72:c6:ee:
4b:eb:1d:27:7c:a9:64:1f:e1:81:36:c8:46:0b:0f:
b7:b8:bd:ea:4b:61:09:05:bd:fc:ac:fe:0a:ee:e9:
6f:a4:3e:fe:ae:2c:00:34:75:1d:6f:c2:db:18:f7:
b9:e1:24:54:f3:84:20:b4:fb:3b:eb:52:af:16:52:
d0:cf:0d:95:91:c4:c7:c0:c9:55:5c:38:e8:89:6e:
fe:c2:28:da:71:18:2c:4f:5b:a4:ac:db:37:6e:82:
a0:dc:1a:69:c7:96:8b:05:e7:32:cc:5d:53:0f:59:
9f:f2:d4:7c:11:3c:c2:34:7a:e0:e2:04:18:d2:31:
70:4d:f3:37:d2:b5:35:cb:8a:cf:c0:9c:bc:ed:d8:
20:3a:3d:c6:38:4d:87:39:9d:cc:40:c5:94:14:9b:
50:1e:2b:b1:b9:f7:e6:60:09:fe:74:90:79:24:24:
cb:34:e3:f7:38:5e:da:59:ec:74:cb:88:3c:9e:25:
0c:43:fe:38:b0:86:07:e0:fa:8e:75:6e:88:30:fb:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6E:84:51:D6:89:D6:5A:0D:EC:10:46:C2:4C:7F:A9:0F:B1:76:7A
X509v3 Authority Key Identifier:
keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b8:d0:31:d6:8c:75:fd:a5:14:a3:5b:0c:0d:c1:fb:c0:a1:
cc:12:1a:3e:ac:06:97:f8:10:43:5c:58:76:7a:32:ae:88:46:
bc:65:02:ea:64:a4:28:f2:34:55:13:30:2e:85:52:c3:0c:99:
84:6a:46:5c:6a:1a:98:9c:52:d5:fe:8c:fb:63:08:4a:30:78:
db:a7:54:5a:57:9d:fa:79:89:5e:16:23:5a:e2:fe:e5:48:c1:
f4:0d:76:f8:a5:d4:2c:44:a4:f5:1b:92:2a:c4:39:e5:92:6a:
c1:f2:f9:43:3d:1e:84:e0:10:9a:0e:e4:ab:7f:38:c1:04:2c:
20:32:bb:5f:ad:8b:eb:2f:c6:55:77:fe:a6:b0:f6:22:ab:2c:
77:93:b5:e0:15:1b:c4:33:40:dd:bd:11:5f:52:90:03:ad:3f:
17:62:59:66:c1:97:8d:ce:8c:69:a5:cb:02:d1:0d:3d:9f:ab:
97:5e:8c:6a:a7:5f:6e:86:35:24:e6:68:ba:4a:88:9f:04:0d:
11:c0:71:cf:c1:c6:36:17:7e:34:75:51:9f:08:47:4e:41:57:
90:b2:a3:33:89:18:84:c4:ee:68:c3:f0:ed:49:0a:89:5a:81:
1d:a4:06:f2:a1:3c:65:e5:d5:7f:1d:35:b7:f4:d4:13:7f:93:
e5:5a:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:02:30 2026 by rpki-client