
$ rpki-client -vvvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
File: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json)
Hash identifier: SLEwj1f6YwLybIssAiW8acIgqxiwCHovkyEvD+MY1FA=
Subject key identifier: E8:CB:47:B8:C2:4C:FE:40:2E:FF:E2:6C:F5:7D:3A:D8:30:63:5A:F3
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Certificate issuer: /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial: 0FF7BC13506A37D26AFD6D72C117C508FB61C711
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
Manifest number: 04B2
Signing time: Sun 01 Nov 2026 05:23:03 +0000
Manifest this update: Sun 01 Nov 2026 05:18:03 +0000
Manifest next update: Mon 02 Nov 2026 09:15:03 +0000
Files and hashes: 1: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: T2S/jPoysHz/jvNREo8+4cMIZTsQXLzIo/A7kF2mrN8=)
2: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: YEpIAjcyJ7k1L6Ogb0wjzj9MU+wc8ir4fkvnNS0jG+c=)
3: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: mjl6DMezaowi9D4N5YeDVH1cv1POuhZAtb/O13IbmOM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 09:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f7:bc:13:50:6a:37:d2:6a:fd:6d:72:c1:17:c5:08:fb:61:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Validity
Not Before: Nov 1 05:18:03 2026 GMT
Not After : Nov 2 09:15:03 2026 GMT
Subject: CN=E8CB47B8C24CFE402EFFE26CF57D3AD830635AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:23:42:b5:eb:c3:a3:5d:88:a5:41:00:87:
4d:a8:28:42:bc:02:19:5e:ae:78:a5:81:22:01:21:
df:00:23:be:92:ae:a3:c5:3f:d6:38:c0:1b:dc:85:
55:1c:c5:34:27:e9:e6:77:b8:5c:ff:c3:36:e9:e7:
4c:ac:03:81:b0:42:db:8f:85:cc:a7:e0:7a:fa:86:
b2:44:dd:97:66:6d:cf:2c:2a:0e:b4:cc:e8:38:d8:
3a:f3:44:db:90:0b:b6:fd:6e:d3:d2:98:83:a9:99:
5a:a0:cd:4d:9d:8f:19:69:8b:26:18:4c:54:c2:e5:
bf:ed:e5:95:33:ab:c3:47:42:12:8b:aa:3f:3f:40:
a7:a6:2e:d0:fc:93:a0:44:1a:46:f3:a8:6f:e7:72:
4a:bb:03:77:86:0d:18:0c:45:74:ec:bf:1f:36:4d:
ec:d6:90:30:ba:6e:46:cc:7c:60:70:15:61:55:06:
23:4e:77:f9:1a:22:c1:59:98:50:e9:c7:cd:4b:aa:
01:c3:9a:9b:f8:d1:c8:f6:87:1b:14:5d:c1:2f:92:
89:41:e8:1b:cc:e0:e5:94:29:73:9d:61:9b:15:7e:
b0:0f:49:11:c8:69:0d:f7:ae:21:cc:5d:58:42:b0:
2c:f5:9f:77:1f:95:fe:9b:af:13:41:2a:5a:40:40:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CB:47:B8:C2:4C:FE:40:2E:FF:E2:6C:F5:7D:3A:D8:30:63:5A:F3
X509v3 Authority Key Identifier:
keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:cb:21:da:09:cc:b5:91:6c:d1:48:0c:c9:19:27:15:d5:
0a:ff:4d:ee:55:d1:87:f3:a3:a6:c9:33:d5:01:84:f7:87:b4:
5c:ca:ed:3f:04:93:dd:72:84:85:af:c6:50:14:88:36:b9:09:
03:12:75:79:90:34:dc:99:a3:c1:18:a2:51:73:9b:ff:99:bc:
48:14:b0:2c:82:cb:ca:10:51:a0:ad:27:ea:65:23:1c:ac:3b:
b7:85:af:10:de:ba:ae:f4:21:f7:86:82:f7:cb:95:1e:66:da:
65:22:dc:e3:21:06:64:39:8c:cc:3f:1d:4f:45:1d:08:af:08:
ff:9e:64:34:c9:9f:6e:f6:48:03:ba:83:0e:c4:79:8b:ac:d0:
4e:a4:e5:63:4b:23:10:84:04:71:91:f2:55:3e:19:61:95:ba:
47:1e:d1:80:93:6c:3d:c4:79:49:dd:c8:df:84:96:18:8e:e2:
a3:b9:4d:c8:32:67:4a:d5:67:ef:7c:6a:42:1e:da:2e:2c:66:
6a:e3:3f:21:4a:36:b7:02:03:46:4e:3c:f3:3d:16:24:35:56:
02:b4:5a:67:6b:c2:c4:f9:0a:ae:98:b5:46:8f:80:e6:93:30:
65:6c:76:ed:1d:b4:fb:75:74:62:df:f1:43:67:b1:2b:1e:53:
5f:88:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:50:11 2026 by rpki-client