
$ rpki-client -vvvf rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
File: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft (raw, json)
Hash identifier: X+O+gOJlXO9hxszKk7yj2CEYL8gM6LHtFxrN7b7KeD0=
Subject key identifier: 29:8F:50:8D:FE:4B:D5:C9:15:49:1C:88:B5:E2:5E:33:51:60:6F:92
Authority key identifier: 47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD
Certificate issuer: /CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD
Certificate serial: 6A4AFB124B0C288F02BB789757D076AC1AD4CE6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
Manifest number: D5
Signing time: Fri 16 Oct 2026 09:05:41 +0000
Manifest this update: Fri 16 Oct 2026 09:00:41 +0000
Manifest next update: Sat 17 Oct 2026 12:13:41 +0000
Files and hashes: 1: 323830343a376264383a3a2f33322d3334203d3e20323731343538.roa (hash: gAdoA7SSa86gPBQqVPbdnELj5dkdm5Iz7zHaY4p2xU4=)
2: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl (hash: xkUG+Qj6YXmyc3YULQEzeu2ZhdY3dXfJayJfhYbbxnU=)
3: 3138372e3130322e3131312e302f32342d3234203d3e20323731343538.roa (hash: vUrHsqnj9kkb6VSuSoIhEa9dNFN+RZ7bkeXLb9XytA8=)
4: 3230312e3133312e34362e302f32342d3234203d3e20323731343538.roa (hash: T+ZoX/D494ZjPRGKzAG75vxr0zRdD68JcXiQ29/f8w0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl
rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 17 Oct 2026 12:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4a:fb:12:4b:0c:28:8f:02:bb:78:97:57:d0:76:ac:1a:d4:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD
Validity
Not Before: Oct 16 09:00:41 2026 GMT
Not After : Oct 17 12:13:41 2026 GMT
Subject: CN=298F508DFE4BD5C915491C88B5E25E3351606F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:1b:39:f1:d0:95:23:fa:3f:79:99:3f:7c:
85:ec:ec:e8:04:c3:dd:13:73:03:af:fc:98:cf:08:
6a:9a:06:b7:af:d5:88:e7:1c:25:37:d7:51:d3:bb:
0e:64:09:7b:02:4a:f4:71:65:04:17:17:d5:21:f2:
79:a2:df:5e:b2:97:84:ec:9b:47:0a:ad:fa:65:46:
3f:ef:e8:7b:87:bf:52:f1:5d:45:87:20:a2:ad:53:
80:e5:db:34:44:43:45:11:c4:3d:4f:cb:3a:6d:33:
13:6e:c1:45:45:ef:26:26:dc:d5:2d:7b:57:e2:72:
8e:f1:2f:29:4a:5a:9e:71:d7:15:5c:9b:1b:04:86:
87:81:7d:f5:f6:47:20:98:81:c0:42:d5:51:a9:e9:
d7:4f:8a:b2:4f:e3:fa:87:76:22:51:23:a8:36:b2:
06:fd:6b:30:4c:ae:c3:32:9e:21:44:f0:6e:20:ef:
83:39:36:84:e0:31:8b:ab:41:8b:79:95:21:b7:8d:
52:6f:33:95:3f:08:45:2c:d0:2b:f3:f1:eb:28:08:
0c:af:1c:86:86:6a:38:37:54:f4:66:61:eb:eb:fb:
bc:5a:e6:8f:8f:6d:4f:ee:86:9d:f5:de:91:96:14:
18:57:4d:67:51:cf:16:fb:58:2e:d9:f4:82:28:d9:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:50:8D:FE:4B:D5:C9:15:49:1C:88:B5:E2:5E:33:51:60:6F:92
X509v3 Authority Key Identifier:
keyid:47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a5:30:23:d4:22:37:f2:9e:63:48:fd:31:5f:36:94:75:ad:
16:60:88:37:c1:49:da:83:ba:41:3c:c2:b8:e2:14:f4:f7:32:
5e:b7:6c:2c:0b:ba:7e:b1:52:e7:58:1a:7b:e0:7c:de:6e:a2:
14:29:a5:77:d0:d6:03:f7:83:b7:80:9c:c7:db:7c:be:1a:a4:
dc:30:f4:41:ba:bd:09:fa:33:b8:cc:9c:fb:23:f8:69:64:a4:
55:c3:f3:5e:9c:4e:8c:ac:5e:51:3b:29:2c:a1:7e:5b:f9:d2:
ef:aa:d1:47:58:4b:5b:a6:70:ec:6d:83:65:6a:5c:20:bb:88:
9a:55:2d:a5:e1:7c:b5:33:84:f5:70:e9:a7:d9:97:7b:f7:b4:
1b:46:0c:f9:4e:38:47:71:0d:93:90:3f:22:be:08:8a:7d:25:
9b:7c:3b:88:73:cc:af:e6:27:80:79:63:bd:7d:b3:bb:aa:66:
74:06:e0:58:4b:ea:8a:2e:15:1f:23:88:39:92:63:47:a3:7c:
5d:9b:3a:f7:d5:9f:9c:ad:43:49:cc:da:61:4d:82:94:9b:56:
e7:31:42:5d:56:6e:94:17:8d:2e:dd:5b:d4:83:a8:ef:af:52:
03:d0:b0:bb:45:72:53:a0:6b:8f:91:0b:01:86:7d:14:9a:53:
a8:86:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:32:00 2026 by rpki-client