
$ rpki-client -vvvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
File: A4C9B133126401D92DA5457C573EA0078BF42BA8.mft (raw, json)
Hash identifier: 2OK9GokZy243dShEKHlLirREtH36/riziWxTEE9porU=
Subject key identifier: BE:DC:24:DD:7D:3C:DE:E4:A8:C7:49:FD:F5:E8:16:BE:F4:75:DC:9F
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Certificate issuer: /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial: 04863F6CB4BA9DF899873895C1B6C7D65A6751C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
Manifest number: 04DC
Signing time: Tue 13 Oct 2026 12:55:36 +0000
Manifest this update: Tue 13 Oct 2026 12:50:36 +0000
Manifest next update: Wed 14 Oct 2026 16:39:36 +0000
Files and hashes: 1: A4C9B133126401D92DA5457C573EA0078BF42BA8.crl (hash: 8tglrXyqu+k1nqQUd3GPitXjBD+Tyl6X98DRahV1rGg=)
2: 323830343a333332343a3a2f33322d313238203d3e20323635333737.roa (hash: YWPvyv0MK7t4cNjrZOaeGWdwja2gl183zw9EnUIdOtc=)
3: 3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa (hash: V2l6zSpJS7pKeSL0qVkQMBRprNxxsQq75q1RS2INOr0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 16:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:86:3f:6c:b4:ba:9d:f8:99:87:38:95:c1:b6:c7:d6:5a:67:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Validity
Not Before: Oct 13 12:50:36 2026 GMT
Not After : Oct 14 16:39:36 2026 GMT
Subject: CN=BEDC24DD7D3CDEE4A8C749FDF5E816BEF475DC9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:fb:90:cd:33:f1:dc:45:02:f2:0f:90:d0:
a4:48:86:4a:68:89:f4:cf:86:e6:cc:20:7f:c6:5e:
16:91:49:80:53:1c:3f:db:fc:e2:f3:56:35:30:a9:
40:88:c3:e4:6e:71:52:1c:2c:33:9b:1a:f3:9d:70:
58:53:b5:bc:ff:ff:ae:2d:d0:71:04:b8:9a:ca:70:
18:6f:b3:5a:09:78:a6:e0:b4:26:ca:67:12:97:21:
b2:80:71:b0:83:94:6c:ec:16:24:16:2f:44:ff:42:
f7:0c:c6:2d:5e:ae:f0:22:8c:52:49:d5:31:aa:fa:
11:e9:34:07:0c:c9:7d:ea:0b:6a:df:db:25:8f:f3:
c3:c1:d1:73:a4:0d:9b:f6:5b:24:ec:9e:d6:eb:99:
02:16:74:d0:18:39:3a:9f:3c:f9:c6:8d:0c:61:05:
ab:7b:b6:90:97:ee:f7:28:cc:f1:69:fe:10:ef:50:
9e:9d:11:b6:66:3f:65:a6:43:32:7a:82:a6:62:48:
14:87:99:3b:d2:34:9c:be:bb:14:e7:28:a7:c2:a3:
7c:4d:37:6d:67:df:52:23:38:af:c0:f9:08:4f:c3:
60:8f:bc:d7:f7:04:dc:9e:bc:6b:69:bb:20:90:7c:
71:2a:72:58:7d:75:8b:ed:7f:d4:69:a9:1d:6f:6e:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:24:DD:7D:3C:DE:E4:A8:C7:49:FD:F5:E8:16:BE:F4:75:DC:9F
X509v3 Authority Key Identifier:
keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:00:84:61:80:aa:1b:2d:d3:79:1c:e3:a9:13:6e:cb:69:ad:
03:66:a9:b8:a0:34:7a:b9:9e:c9:40:59:7e:31:3d:99:9e:a8:
42:e4:88:60:4c:d4:61:6e:49:90:23:1a:73:9b:51:e5:52:6c:
0b:9a:62:d8:53:d9:ba:69:a2:21:50:33:bf:8f:dc:49:de:af:
6b:f5:32:3a:47:77:87:db:b0:23:41:cd:12:8c:8b:19:84:7b:
23:0b:80:93:95:78:a4:63:d1:31:0c:a5:b4:a0:ec:1a:ae:67:
c0:b1:45:c2:9e:3d:b4:4b:8c:56:8c:93:a6:13:ed:d5:cc:35:
f6:23:db:31:a1:df:4d:93:03:72:a1:3b:8a:8b:51:a7:7c:b6:
f9:f1:4e:f9:eb:b4:7d:8d:dd:d4:bd:30:b5:c9:da:86:94:57:
17:9a:45:ed:68:c8:10:f2:e1:2f:27:49:73:8f:cf:6e:da:17:
6d:6c:1b:c8:11:bd:b5:32:0f:e1:62:e9:42:3b:08:25:bd:18:
96:13:fe:5c:27:57:c3:2e:53:cd:63:19:bc:23:c9:3f:31:4d:
5c:fa:3e:e5:c2:c5:01:7c:03:bc:2c:0f:de:0a:8d:35:6e:a0:
76:41:e6:e5:fc:48:1f:2d:4c:97:f5:14:f2:bc:21:3a:14:50:
94:29:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:43:25 2026 by rpki-client