
$ rpki-client -vvvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft
File: 9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft (raw, json)
Hash identifier: dhEbKDbD5VWhKMRRHXqXbDAz7u2M7GYFZSgs2m9sDSE=
Subject key identifier: 3A:91:A7:29:2C:A0:81:05:89:C9:84:1E:47:3F:EE:94:82:B7:40:E3
Authority key identifier: 9A:FB:03:F5:D6:83:97:69:4C:28:76:0F:EF:53:EF:9E:19:BF:FB:19
Certificate issuer: /CN=9AFB03F5D68397694C28760FEF53EF9E19BFFB19
Certificate serial: 06DD34132D2E74F9B092FD56FC9CD651A80C1A36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft
Manifest number: 9D
Signing time: Fri 30 Oct 2026 15:09:25 +0000
Manifest this update: Fri 30 Oct 2026 15:04:25 +0000
Manifest next update: Sat 31 Oct 2026 18:14:25 +0000
Files and hashes: 1: 34352e372e3130302e302f32322d3332203d3e20323636353833.roa (hash: snatUesUJjdlYnArU41Sqs3lgAeYSCpP3csEXVbyj+k=)
2: 34352e3232382e31322e302f32322d3332203d3e20323636353833.roa (hash: CJVIg23bji+64oSAgc9NbCD7aMTQAUoz2vGVWg42Shw=)
3: 323830343a336534303a3a2f33322d313238203d3e20323636353833.roa (hash: NLvUboxUmBiqFWJSSa3vEnRYfCiBtZtlqzSDkn+D2tA=)
4: 9AFB03F5D68397694C28760FEF53EF9E19BFFB19.crl (hash: gHph8wOypJRoIvRquP3+sFeVSt+vEpk/YhY6wini8io=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.crl
rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 16:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:dd:34:13:2d:2e:74:f9:b0:92:fd:56:fc:9c:d6:51:a8:0c:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AFB03F5D68397694C28760FEF53EF9E19BFFB19
Validity
Not Before: Oct 30 15:04:25 2026 GMT
Not After : Oct 31 18:14:25 2026 GMT
Subject: CN=3A91A7292CA0810589C9841E473FEE9482B740E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:9a:77:dd:ba:40:5a:c0:7a:2e:57:33:8f:
3a:91:64:29:ff:a1:56:0b:92:a6:31:88:a9:60:59:
87:98:a8:81:87:fb:b4:cc:24:6f:f2:15:74:9e:df:
3d:ac:c5:d3:29:93:84:dc:a2:77:d0:f9:07:fb:ae:
a6:e5:cb:b1:b4:0a:0c:dd:8c:ba:f9:5b:87:47:94:
29:50:c0:82:bc:71:1a:b4:7b:80:31:a0:ac:c5:7a:
ea:49:b1:1d:d9:e6:c2:df:dd:c2:f4:9d:97:27:1e:
31:0b:ad:54:e3:bf:bd:cc:7c:36:76:e6:03:f2:46:
17:79:47:cb:1a:b9:7a:d0:32:c6:53:6d:78:49:47:
92:08:33:b0:1c:e8:42:0d:23:67:81:67:63:3f:29:
30:d5:0e:28:77:c5:bb:70:39:a8:cb:c0:16:eb:cd:
09:e6:53:2a:68:4f:c5:d2:dc:7b:42:c1:c0:75:07:
fe:16:81:b3:15:d9:cc:d0:2d:70:22:2e:90:5d:1f:
89:b7:ed:bf:76:83:c8:7c:1c:4c:b5:2c:9b:05:89:
2f:24:f5:8c:f9:18:16:3c:c2:30:04:c7:91:03:97:
14:5c:76:b9:f2:94:0c:6d:8e:74:e5:b6:3e:52:0f:
df:22:a6:e9:7e:00:56:7d:51:f2:aa:eb:01:97:e3:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:A7:29:2C:A0:81:05:89:C9:84:1E:47:3F:EE:94:82:B7:40:E3
X509v3 Authority Key Identifier:
keyid:9A:FB:03:F5:D6:83:97:69:4C:28:76:0F:EF:53:EF:9E:19:BF:FB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:c9:56:87:93:3e:07:f9:33:10:e6:8e:bf:e1:12:cb:d3:
5f:08:30:a5:95:c5:7c:1c:e9:3c:86:1d:17:fd:c7:23:6b:07:
a0:31:72:f9:9e:c3:ac:70:2c:ad:d6:6b:16:73:19:d0:57:d3:
e4:bf:99:61:a3:33:82:97:66:ac:2c:fe:bc:cc:ba:20:cf:76:
6f:fb:6b:e4:1d:46:c1:14:df:85:48:ad:00:6e:7a:07:a3:00:
95:8c:a1:57:b8:f9:81:20:95:e4:8a:0c:a5:22:3b:9a:6d:0f:
59:3f:97:ab:73:e4:80:8b:6f:22:b7:50:0b:1a:bf:06:e2:e7:
e6:36:a3:12:d2:29:c1:86:31:27:67:50:f8:80:a3:20:ec:6d:
bf:81:03:08:2c:a8:2d:d4:a3:21:9e:85:88:d2:6a:9b:66:c3:
a7:dd:77:e1:a9:9c:06:39:c0:b3:bc:f5:19:7e:eb:76:80:4f:
9f:70:75:70:ed:e6:7b:ca:c3:db:79:91:90:5d:de:7e:cd:cb:
f8:c1:80:bf:25:da:8f:40:43:4c:fa:eb:f7:53:8b:62:f1:ff:
f7:e2:ae:89:c9:67:c3:a2:8b:28:d1:6c:29:06:c4:be:9f:20:
d2:40:ab:92:88:62:51:7b:ed:79:ce:a2:ac:e1:e2:06:ea:a4:
75:44:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:36:05 2026 by rpki-client