
$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
File: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft (raw, json)
Hash identifier: +XwEKXfbcRU3x/Z+jhVDruYFFaZE3WKfhojzEargpTo=
Subject key identifier: C8:8A:F5:F0:BE:DF:11:A9:78:32:35:11:9E:3E:98:C9:16:63:CD:A7
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Certificate issuer: /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial: 7B229A0354D213A3D328179CF6F4160C60101927
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
Manifest number: 038E
Signing time: Mon 02 Mar 2026 15:54:38 +0000
Manifest this update: Mon 02 Mar 2026 15:49:38 +0000
Manifest next update: Tue 03 Mar 2026 17:36:38 +0000
Files and hashes: 1: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (hash: sVkWMTSLFioieTFlhkF9iFbkwUXuTcAibeLsKdPaEcc=)
2: 323830343a323161303a3a2f33322d3438203d3e20323634353635.roa (hash: lJcFKWsPgwGzvx2EWYMBKk/P8ls9fbPWHfgJAbojuCk=)
3: 3133382e33362e34342e302f32322d3234203d3e20323634353635.roa (hash: PaL5PuzRVfUDEYyVqNiuWp1mTRshQPvGeZsx+SntzJ0=)
4: AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl (hash: XmGIa9rjg7KueOMyrl4zwJSac9z3p69DythGAJBjVOQ=)
5: 3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (hash: z4/MzAdQOYmWeNRJnvuERmw2hfJru6wpeS85nk5yUBw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 17:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:22:9a:03:54:d2:13:a3:d3:28:17:9c:f6:f4:16:0c:60:10:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Validity
Not Before: Mar 2 15:49:38 2026 GMT
Not After : Mar 3 17:36:38 2026 GMT
Subject: CN=C88AF5F0BEDF11A9783235119E3E98C91663CDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:a1:79:6c:b8:82:bf:f0:db:be:82:f6:ed:
47:b7:5a:90:ff:17:b5:a3:52:7a:55:72:ff:2e:6b:
33:2a:92:87:1e:c1:9f:6b:a1:82:c4:5b:52:16:61:
94:bd:83:10:4c:f5:86:6e:c2:1e:a2:86:d1:a8:4b:
6e:6d:5e:08:07:83:c0:f2:c2:f2:76:22:c3:17:3f:
68:2f:21:fc:2c:77:14:ca:02:a8:76:e4:95:e6:cf:
f5:6f:32:0b:47:f9:bb:9c:9b:20:4d:f4:79:c9:c5:
eb:3d:d3:44:02:f7:ee:7c:2b:0d:ff:49:2c:3d:42:
f7:e0:17:ca:c9:ba:42:7e:54:76:00:e2:7b:8d:77:
19:56:3a:72:b4:9f:a8:d5:e4:4b:d5:cf:e9:f8:66:
64:96:3a:1e:10:fa:6b:0f:b1:e7:65:16:59:6a:73:
c2:9d:77:aa:20:fe:5e:8d:b6:ca:72:e9:f6:b7:32:
4f:57:2e:49:27:51:ae:5a:7a:66:6c:5a:21:01:f0:
83:ba:4f:9a:12:7c:e9:60:49:80:9c:8b:9a:67:58:
1d:53:85:1b:0b:ba:f1:21:3b:ac:5f:8e:b8:36:4e:
f8:36:33:d0:d6:e6:17:77:e0:a9:6b:26:20:92:62:
8a:df:e8:be:e5:b0:9f:3a:ed:e5:09:69:5b:65:72:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8A:F5:F0:BE:DF:11:A9:78:32:35:11:9E:3E:98:C9:16:63:CD:A7
X509v3 Authority Key Identifier:
keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:02:aa:89:ce:dc:ef:6c:ff:8e:cd:3e:b0:b3:66:dd:2a:
49:d3:ab:b6:54:6b:07:ee:79:c6:65:2f:eb:2a:b5:b2:ae:79:
87:ef:de:d9:9c:5e:cd:41:12:8b:9e:e5:f6:9d:e5:7f:3c:fe:
b2:ab:25:52:75:d6:28:bc:31:4a:5e:95:09:c1:19:3f:a4:12:
8e:34:2d:f1:fd:83:6d:4e:27:7f:35:97:e4:a7:19:9b:bc:2d:
34:b1:13:b1:74:0d:41:84:00:eb:a7:51:39:d2:43:4e:46:12:
f7:5e:be:30:3d:c8:69:8f:90:68:35:87:5d:bf:90:7d:f6:0a:
5d:0d:88:a9:d6:53:ac:34:c4:2f:4c:2f:db:73:f6:ee:29:56:
d6:1e:93:b1:5d:79:4d:33:0e:77:f1:50:77:3e:a0:44:4f:4b:
b2:52:0e:28:34:5d:b3:81:c2:e2:2d:a8:b1:81:19:6f:8d:9e:
dd:00:2a:a7:8b:33:2e:c6:d5:58:f0:02:6b:54:27:ec:03:31:
ff:43:80:5e:91:74:13:9c:17:3a:04:b8:31:a9:33:01:ac:16:
00:a2:0e:95:5d:92:3f:4d:44:c0:67:ee:ba:0b:d3:68:7e:4b:
dd:a6:a8:d4:5f:8c:0c:54:76:76:98:10:0d:c4:27:c4:e3:5d:
9a:87:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:11 2026 by rpki-client