
$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
File: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft (raw, json)
Hash identifier: +zwBwOUg/rj/BKB44N3YZewOxjWYYHmVKi7uwJVJbAg=
Subject key identifier: 09:61:5C:F5:88:2C:20:9E:BD:DF:B6:8E:E8:34:30:77:69:D8:36:4A
Authority key identifier: 86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
Certificate issuer: /CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Certificate serial: 2697C9E1BA3DBE2A4D6F9331323323FDFB55EAC5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
Manifest number: A7
Signing time: Thu 23 Jul 2026 05:02:03 +0000
Manifest this update: Thu 23 Jul 2026 04:57:03 +0000
Manifest next update: Fri 24 Jul 2026 07:05:03 +0000
Files and hashes: 1: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: zO4x1TXCAHr1YUywwb/WdCGyvwPecOUmoq9Q9dERssA=)
2: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: r0sAOrwALk90vhCFY+SkiJV3smIjQ3FbEG1QzGe8ygA=)
3: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl (hash: 93xmBEXtIgbK5qQmgavtp/nlrIyi2wqRxi4mATXgyus=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 07:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:97:c9:e1:ba:3d:be:2a:4d:6f:93:31:32:33:23:fd:fb:55:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Validity
Not Before: Jul 23 04:57:03 2026 GMT
Not After : Jul 24 07:05:03 2026 GMT
Subject: CN=09615CF5882C209EBDDFB68EE834307769D8364A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:e5:a9:37:f0:a1:c6:0d:86:e3:1c:75:58:
88:a7:11:55:2d:de:50:c1:05:1c:ab:9b:f8:9f:66:
4a:3d:aa:01:00:d9:14:56:28:5d:60:2d:31:78:35:
76:a0:d2:a7:20:0f:20:21:2e:71:55:af:33:34:b8:
4f:7c:a3:0f:03:55:23:08:00:50:f8:f8:08:7d:a9:
f1:ed:9e:13:56:ce:19:e4:66:2d:69:9c:17:2e:5d:
b1:20:38:23:0e:47:8e:15:f6:9e:92:28:6a:a5:dc:
9a:06:60:d7:b1:c9:bd:91:fc:f1:06:c6:da:83:cb:
7e:d6:50:01:8d:b4:9a:0e:59:47:ea:ff:87:5b:88:
e3:85:fa:db:3b:2e:21:a6:2e:8a:5f:e5:9e:41:d7:
43:a2:92:3e:70:b8:5a:f9:50:4b:ea:e6:a9:39:03:
be:ee:c8:a3:e1:a6:7a:7b:ee:ee:30:06:86:6a:8b:
bd:c1:46:8b:5c:4e:3d:88:1f:3e:72:3e:c2:ff:82:
1b:e8:f8:3b:79:6f:35:6e:e2:75:07:18:2b:b7:d9:
4e:98:a1:0e:ab:67:a1:5d:09:ac:0b:54:6b:5a:4a:
71:b3:70:89:d5:bf:02:37:b4:3e:a4:9c:8c:68:dd:
19:0d:06:87:3f:1a:1a:fa:7e:8d:c2:36:a2:65:36:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:5C:F5:88:2C:20:9E:BD:DF:B6:8E:E8:34:30:77:69:D8:36:4A
X509v3 Authority Key Identifier:
keyid:86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d2:8c:f4:ce:aa:81:61:32:d8:74:35:f1:38:75:95:1b:b0:
3f:e6:1b:9a:b9:67:44:80:14:75:22:53:88:35:e3:de:f6:13:
7e:7f:d9:7a:c5:fe:73:22:e3:c3:5e:53:bd:36:3b:56:49:f3:
27:43:03:12:53:51:2e:ac:3d:44:75:19:a8:7f:9d:16:57:2f:
18:8b:44:da:25:b1:0f:83:aa:d4:f1:43:21:e6:86:ea:62:1d:
54:ab:9e:1e:50:42:83:9d:b3:1b:da:a7:f9:2a:e9:d8:69:02:
96:21:d2:0a:20:05:50:da:65:a4:7b:ed:8f:0a:9f:4f:c4:65:
45:2f:57:07:fd:f5:58:cb:28:4c:73:a8:78:9a:e0:15:df:87:
75:03:87:4c:c7:d8:5c:ea:aa:d6:63:28:ff:68:49:41:d3:c5:
91:af:1c:44:b5:26:42:ff:e7:31:a7:77:e6:48:f4:59:36:9b:
8e:33:29:d3:9b:15:5c:34:84:b5:4c:90:62:90:d7:7b:d3:c7:
ab:56:76:4a:ea:f9:85:d1:fc:1d:78:1c:44:7b:40:91:c0:03:
a1:54:cd:2c:8c:e2:fe:49:d8:db:99:84:1f:72:08:2d:0c:88:
55:7f:52:9b:86:ae:db:f1:13:00:94:d8:6f:e7:f7:2a:62:18:
dd:30:5c:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJpfJ4bo9vipNb5MxMjMj/ftV6sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyMEVGNEFDNTlCNUE4NjU3OTJGMEU2NzY1MkZBMUE3
QzVBQTQzQTAeFw0yNjA3MjMwNDU3MDNaFw0yNjA3MjQwNzA1MDNaMDMxMTAvBgNV
BAMTKDA5NjE1Q0Y1ODgyQzIwOUVCRERGQjY4RUU4MzQzMDc3NjlEODM2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFwuWpN/Chxg2G4xx1WIinEVUt
3lDBBRyrm/ifZko9qgEA2RRWKF1gLTF4NXag0qcgDyAhLnFVrzM0uE98ow8DVSMI
AFD4+Ah9qfHtnhNWzhnkZi1pnBcuXbEgOCMOR44V9p6SKGql3JoGYNexyb2R/PEG
xtqDy37WUAGNtJoOWUfq/4dbiOOF+ts7LiGmLopf5Z5B10Oikj5wuFr5UEvq5qk5
A77uyKPhpnp77u4wBoZqi73BRotcTj2IHz5yPsL/ghvo+Dt5bzVu4nUHGCu32U6Y
oQ6rZ6FdCawLVGtaSnGzcInVvwI3tD6knIxo3RkNBoc/Ghr6fo3CNqJlNhV3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCWFc9YgsIJ6937aO6DQwd2nYNkowHwYDVR0j
BBgwFoAUhiDvSsWbWoZXkvDmdlL6GnxapDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNY
WEMvMC84NjIwRUY0QUM1OUI1QTg2NTc5MkYwRTY3NjUyRkExQTdDNUFBNDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MjBFRjRBQzU5QjVBODY1
NzkyRjBFNjc2NTJGQTFBN0M1QUE0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNYWEMvMC84
NjIwRUY0QUM1OUI1QTg2NTc5MkYwRTY3NjUyRkExQTdDNUFBNDNBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQtKM9M6qgWEy2HQ18Th1lRuwP+YbmrlnRIAUdSJTiDXj3vYTfn/ZesX+cyLj
w15TvTY7VknzJ0MDElNRLqw9RHUZqH+dFlcvGItE2iWxD4Oq1PFDIeaG6mIdVKue
HlBCg52zG9qn+Srp2GkCliHSCiAFUNplpHvtjwqfT8RlRS9XB/31WMsoTHOoeJrg
Fd+HdQOHTMfYXOqq1mMo/2hJQdPFka8cRLUmQv/nMad35kj0WTabjjMp05sVXDSE
tUyQYpDXe9PHq1Z2Sur5hdH8HXgcRHtAkcADoVTNLIzi/knY25mEH3IILQyIVX9S
m4au2/ETAJTYb+f3KmIY3TBcOw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:08:29 2026 by rpki-client