
$ rpki-client -vvvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft
File: D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft (raw, json)
Hash identifier: 6WJlaqTrjMbsPV6kOgpr5K9ZuJ89Q9BA8YJFv5Tfn7I=
Subject key identifier: 40:AA:08:F3:A9:79:85:2A:15:B1:9B:AB:F4:A6:16:65:BD:AE:B0:15
Authority key identifier: D3:51:47:4F:BD:E0:33:87:D8:C4:C8:8D:6E:48:62:DB:52:48:E4:FE
Certificate issuer: /CN=D351474FBDE03387D8C4C88D6E4862DB5248E4FE
Certificate serial: 445F2149F2105A1C0F95FD8FDD8E6BF7A98931BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft
Manifest number: 88
Signing time: Mon 02 Nov 2026 23:37:16 +0000
Manifest this update: Mon 02 Nov 2026 23:32:16 +0000
Manifest next update: Tue 03 Nov 2026 23:50:16 +0000
Files and hashes: 1: 323830343a3634383a3a2f33322d313238203d3e203533303338.roa (hash: 4ubFVccbIs0B2fmCXkl+T0MKKUPN2HpConl3QsE5erg=)
2: 3137372e37332e3233362e302f32322d3332203d3e203533303338.roa (hash: nGjlJRXAqnVFw7e99Cv8LJ8ASbox/eDUY4NdT6wHmRU=)
3: D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl (hash: V0EJImGb0dhBpFQdEEpF1LVrB79ib85yzEPBWbIqGvs=)
4: 3137372e37332e3233322e302f32322d3332203d3e203533303338.roa (hash: ILvw/AYGjzK9kr1bRwrYd8ZDYBBZ/lmXcpyhpXoJ3+4=)
5: 3137372e3135342e3137362e302f32302d3332203d3e203533303338.roa (hash: Dg6+2LvQrZT9UliiJ6RK7RfF3pGb2UrTWMmuaRDJ7Tk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl
rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 23:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5f:21:49:f2:10:5a:1c:0f:95:fd:8f:dd:8e:6b:f7:a9:89:31:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D351474FBDE03387D8C4C88D6E4862DB5248E4FE
Validity
Not Before: Nov 2 23:32:16 2026 GMT
Not After : Nov 3 23:50:16 2026 GMT
Subject: CN=40AA08F3A979852A15B19BABF4A61665BDAEB015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:b2:4a:6d:cc:54:a2:76:b7:62:fb:4f:9a:
76:9b:c4:3f:01:17:8d:e8:83:b5:9b:74:53:a0:ed:
04:20:68:dd:b3:9a:1b:05:b3:4c:50:bd:db:8e:45:
b5:9e:7d:00:32:c4:de:cb:a3:5d:90:79:07:bf:ab:
4b:4b:78:8d:63:4d:08:b5:91:18:5f:91:8c:cd:29:
e9:84:77:43:35:4f:af:0b:fd:fb:c1:79:f8:b7:46:
54:ec:7f:3e:4d:56:48:5c:34:db:85:aa:cc:00:9f:
3d:95:54:24:8a:db:24:70:1b:67:00:19:c5:f5:8e:
f9:5c:6c:47:54:c9:2c:47:b2:ae:35:3e:df:7d:11:
fa:7b:c0:8c:ad:33:d8:29:58:ff:ab:7c:f1:4b:44:
d3:1c:8c:9c:3d:c3:23:5e:e5:df:27:36:f4:34:80:
99:13:0e:1b:c9:87:6d:14:c4:f9:fa:f6:56:0a:39:
79:93:be:4e:ff:fa:2f:a2:e5:3b:35:d5:5e:4a:f2:
78:2b:53:fd:3c:5d:df:83:ee:df:06:f4:36:80:a5:
a9:e0:2a:d7:5f:f3:b9:fa:f7:e1:dc:4f:25:1b:53:
c3:a3:69:1f:21:26:e3:78:e1:5d:f1:7d:f6:71:17:
1a:b6:d9:a2:38:d2:17:bf:2a:cd:c4:34:c1:7e:6e:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:08:F3:A9:79:85:2A:15:B1:9B:AB:F4:A6:16:65:BD:AE:B0:15
X509v3 Authority Key Identifier:
keyid:D3:51:47:4F:BD:E0:33:87:D8:C4:C8:8D:6E:48:62:DB:52:48:E4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:ef:79:23:96:e3:5f:6f:14:b5:83:cf:db:33:e2:cf:4d:
71:b6:59:8c:a5:89:07:60:57:0f:dd:dc:a5:d0:f6:47:aa:c4:
95:86:79:6c:5f:b7:d6:07:a0:ab:c4:c2:ea:8f:2b:a3:48:bb:
b0:cf:2e:8c:a3:01:2a:7d:b7:36:a6:43:f7:98:55:e7:06:87:
b0:e7:64:9b:f5:5b:35:84:69:26:10:46:75:f4:12:b7:7c:bf:
eb:b7:2a:b1:02:8f:00:ff:6f:b4:15:d2:05:c4:07:89:50:f7:
5a:86:a3:38:c1:b8:72:f6:9a:17:fd:03:70:7a:8b:df:b2:be:
d5:4d:90:6e:98:63:7d:a8:32:c5:f7:1f:ac:cf:b5:72:e7:7d:
4b:21:75:9d:8f:a7:20:e0:05:a9:e0:6f:d1:c9:65:ec:1d:79:
0e:63:d0:5a:07:fe:e5:a7:2d:8a:a5:ed:c0:68:62:96:7e:56:
25:eb:24:5c:59:bf:fd:89:23:5f:38:00:5e:52:52:b9:44:70:
fc:1d:4a:ec:af:a1:d2:8d:ed:73:b0:05:6f:11:d7:ea:cb:23:
99:cf:eb:bb:c6:63:61:61:54:cd:e0:ef:57:cd:ef:82:4b:30:
a9:f3:09:6b:32:bd:67:78:81:ad:50:15:ec:a7:e2:2e:45:56:
cb:fe:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 14:35:37 2026 by rpki-client