
$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
File: 08CF424E6FE1980B284A93E6736C3E8628D381CA.mft (raw, json)
Hash identifier: Ht9UyBgd6SA7QEsUt2jfsBIwPD6kvkUquWpkue9wNYE=
Subject key identifier: E6:FE:60:AB:14:B0:FC:48:F4:DC:DE:2B:6E:F8:91:A3:07:4F:CB:B4
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Certificate issuer: /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial: 3A24299FFF644A90E1AD182C6A13ADED79449F9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
Manifest number: 0149
Signing time: Wed 13 May 2026 14:44:20 +0000
Manifest this update: Wed 13 May 2026 14:39:20 +0000
Manifest next update: Thu 14 May 2026 16:47:20 +0000
Files and hashes: 1: 3137372e39332e36342e302f32312d3234203d3e20323633313337.roa (hash: M/qY9z7KJ0sdMDhdS+zWWCVPkw7NbeXln4juApbMLok=)
2: 08CF424E6FE1980B284A93E6736C3E8628D381CA.crl (hash: 59339vRD98TmdPuayTQiyhBJiSZOO/0mM4kSyqiefiY=)
3: 323830343a313735343a3a2f33322d3438203d3e20323633313337.roa (hash: 2pYNoB0nzMjsHVlF53HbQfxAIHIUNDTF1t94z66lpOQ=)
4: 3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa (hash: tdHzWepgJjgudC2yhCBD8JneXIfij9C0XXUgfdzTwBM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 16:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:24:29:9f:ff:64:4a:90:e1:ad:18:2c:6a:13:ad:ed:79:44:9f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Validity
Not Before: May 13 14:39:20 2026 GMT
Not After : May 14 16:47:20 2026 GMT
Subject: CN=E6FE60AB14B0FC48F4DCDE2B6EF891A3074FCBB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:95:2c:5f:51:ff:ab:03:fa:f3:bc:7f:92:
3a:22:7d:bf:d8:b1:ac:52:1b:79:d0:22:3b:54:e9:
00:7f:47:cf:28:ef:a4:e9:fa:49:ce:32:cc:c8:61:
f3:3c:ca:fc:41:cd:21:a8:69:ed:fa:f7:e3:4a:c7:
fd:18:66:c4:16:4c:9c:dc:a4:28:a2:eb:69:f5:47:
b8:9e:91:32:51:fe:20:a0:ff:90:0f:fb:8c:01:60:
a3:d2:f2:23:20:45:a1:6a:10:09:61:98:df:a5:1e:
c0:3e:ac:5e:5a:6d:7c:64:d9:15:41:32:cd:da:7d:
f8:3a:db:16:16:1b:14:2b:3b:54:ef:b8:0a:32:d7:
ed:e8:2e:73:92:c1:6d:06:b8:63:60:e5:db:e0:e3:
ba:ca:77:ef:0a:66:e6:72:3b:45:0f:6e:36:1e:fc:
0b:41:37:bf:41:11:a2:1c:4e:cd:bb:95:66:88:87:
d4:90:91:e8:22:b4:20:71:7c:0d:1e:6f:0c:13:ab:
0d:46:ef:cb:53:20:f7:0c:a1:6f:da:83:98:4a:4b:
1c:81:12:49:27:c9:0f:53:4d:e8:3b:5d:1f:22:ac:
69:39:6a:21:7c:74:d6:d2:a2:0d:d9:ef:36:cc:4d:
e2:95:41:1b:a6:d5:05:97:5a:2a:1c:b9:bf:47:d4:
8a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:60:AB:14:B0:FC:48:F4:DC:DE:2B:6E:F8:91:A3:07:4F:CB:B4
X509v3 Authority Key Identifier:
keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:15:59:05:f8:fc:94:3c:f3:04:8e:35:3b:1a:31:cb:60:dc:
ea:48:15:9e:0d:a1:40:32:37:ae:f6:61:4c:b9:0c:5b:4f:5b:
25:2c:fe:52:39:58:98:15:70:d9:5b:e0:ff:f9:d8:36:f6:46:
0f:84:ec:4b:e1:ed:cc:bb:9a:90:87:a2:e7:68:52:f3:cd:d9:
5c:69:b8:6b:9b:6b:f4:4d:e9:29:31:ab:83:b6:51:be:8b:53:
61:ec:9e:4d:82:90:eb:a9:93:23:f5:b4:74:fe:83:ac:10:0a:
bd:45:10:1b:b1:0a:e9:b1:7a:0a:b9:87:8b:27:f1:f3:a5:27:
0d:84:07:c8:b7:8e:71:05:57:53:94:1a:78:bb:ad:31:fe:83:
65:16:e2:db:c9:08:92:f1:ba:4f:97:81:55:4d:f8:d7:b4:2a:
04:91:c6:4e:eb:36:32:28:25:68:ab:46:ff:ca:b6:6a:ae:de:
bf:1f:bf:fe:86:d0:3f:4e:5b:47:3a:47:b1:cd:5f:1f:80:7c:
ed:a3:3c:43:a8:bf:69:f8:f1:2c:7a:d2:5e:d7:4b:05:e0:a0:
3f:87:e1:f2:6f:a7:05:37:af:d5:61:e1:f9:d5:f7:0c:25:e6:
c1:76:88:e1:98:57:ca:fc:c8:9a:d1:d8:4e:26:20:14:03:c6:
fb:91:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:09:09 2026 by rpki-client