
$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json)
Hash identifier: j/zj2XWM9Ve8bB36xgktW0XZRB74Brgi5U8x5qdjG3w=
Subject key identifier: 40:79:38:65:0F:E3:47:B1:79:85:6C:78:94:60:B3:79:97:CF:9F:F3
Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Certificate serial: 7F7CCA728E1DC6A96097CEC440C1F201C5E9B08E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
Manifest number: 03A4
Signing time: Mon 02 Mar 2026 10:42:18 +0000
Manifest this update: Mon 02 Mar 2026 10:37:18 +0000
Manifest next update: Tue 03 Mar 2026 12:53:18 +0000
Files and hashes: 1: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: b1S9k9SkTo3AXY8yP4Lo7FHs8J7j0uakNkT2QkkPqI8=)
2: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: qne9dJGCDKG9RRSwu0DRim1UZkNvabaAwr9ahurrNng=)
3: 323830343a386566303a343a3a2f34372d3437203d3e20323733343537.roa (hash: SUmLEg8kb6XKx6NKYqf3IeVCbffV6D4xIgJGrq8TI6A=)
4: 323830343a386566303a323a3a2f34372d3437203d3e20323733343537.roa (hash: dqdT0Z2X2ujGOU5wllrriRCiSwGcK/M1ZPuIhoxu7I0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7c:ca:72:8e:1d:c6:a9:60:97:ce:c4:40:c1:f2:01:c5:e9:b0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3
Validity
Not Before: Mar 2 10:37:18 2026 GMT
Not After : Mar 3 12:53:18 2026 GMT
Subject: CN=407938650FE347B179856C789460B37997CF9FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:71:c9:9c:68:99:d8:42:ec:9b:48:3a:54:
34:d0:7c:39:f6:93:13:dc:7d:14:d8:2e:6b:59:60:
4b:49:dd:05:97:3f:93:97:b2:16:63:98:ca:70:99:
82:d2:0f:ce:af:b8:ce:72:c8:fc:1c:20:29:00:88:
99:68:38:34:13:f8:cc:b1:44:f0:72:a6:28:8d:6a:
88:0e:b7:5a:50:23:91:de:99:a8:4f:16:6f:6b:8f:
c2:ca:03:a5:ed:3a:55:b3:6e:51:db:2d:bd:ec:05:
34:4c:62:9f:17:7e:39:00:0f:57:fc:5f:da:32:66:
75:cd:78:d9:b2:9d:a3:aa:b0:c7:6f:c4:ba:9f:1c:
c7:23:af:93:0a:ff:51:6e:48:ba:f3:5a:e5:83:91:
0b:cc:7b:76:79:d1:9f:bd:7e:37:b1:af:ad:7c:6e:
71:d7:a1:e0:78:c1:82:79:80:4c:b6:6c:17:a3:da:
aa:01:bb:b7:28:50:ea:21:fc:45:70:d3:de:6f:46:
5b:df:20:74:b6:07:9a:3e:ab:3c:b5:d8:9c:af:54:
9c:fe:28:1d:1a:c8:10:87:87:48:57:28:e4:d0:e4:
e8:a5:b6:e5:a1:00:5d:a9:eb:9d:ed:2b:d1:aa:f9:
c9:53:bd:1d:0c:50:be:d5:2c:a4:cb:02:4f:d8:03:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:38:65:0F:E3:47:B1:79:85:6C:78:94:60:B3:79:97:CF:9F:F3
X509v3 Authority Key Identifier:
keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:6f:fb:54:b3:09:95:75:e8:8b:53:a0:be:e1:c0:a9:e5:
fd:7e:69:56:74:ee:4f:d0:b5:44:6b:6e:15:e7:9c:9b:f3:41:
f6:d1:c4:63:b2:05:be:da:4c:bc:88:82:74:89:39:ad:2f:a3:
d2:d9:1f:16:be:50:a2:85:11:98:96:08:12:79:69:07:fd:cb:
33:ef:9e:cf:b6:94:ec:1a:70:11:66:64:ed:b8:7c:84:61:10:
5f:e9:99:1e:05:cc:94:95:51:d1:89:88:a7:95:85:79:84:cc:
d7:13:27:b0:9c:9c:f7:d8:f8:59:e4:a9:dc:c9:5b:64:b7:5f:
8f:02:6f:67:c4:56:82:94:67:36:22:7f:4f:c5:5a:9e:df:a8:
84:cb:59:31:9e:60:d4:7a:69:1e:48:d1:2f:22:f2:28:09:e0:
ac:fc:45:49:1a:09:f4:e8:67:6e:ff:40:3f:73:d1:e7:da:b9:
47:eb:aa:ea:9e:e0:e8:8b:29:64:0f:94:cb:48:28:d1:db:af:
69:59:68:ef:44:17:0d:34:66:26:91:6d:d9:d8:56:86:5d:29:
4b:55:82:8b:f0:96:ec:6a:d2:85:b6:c2:a2:63:4f:25:76:c1:
d6:25:ed:fa:d0:3d:09:18:7b:2e:8c:e8:2d:ec:93:bd:4a:7d:
bf:8a:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:39 2026 by rpki-client