
$ rpki-client -vvvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft
File: 340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft (raw, json)
Hash identifier: kBaDW33JZqAFC2Sx2T/sRgi1/49uNZX2KtRllcMa8F4=
Subject key identifier: D3:73:53:0A:6B:09:03:71:AF:95:AD:04:A6:30:90:1F:BE:3D:93:3B
Authority key identifier: 34:0A:D0:42:C7:48:E4:44:BC:9C:E7:CC:90:AE:14:01:5B:6E:3B:AE
Certificate issuer: /CN=340AD042C748E444BC9CE7CC90AE14015B6E3BAE
Certificate serial: 485E5471E9ED730DE4F84CC14F26F37C1AD98ADD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft
Manifest number: 35
Signing time: Sun 11 Oct 2026 04:48:24 +0000
Manifest this update: Sun 11 Oct 2026 04:43:24 +0000
Manifest next update: Mon 12 Oct 2026 06:40:24 +0000
Files and hashes: 1: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: FLAegkpt7994/Nd5OxXCw3RqcoLwU+x5nynF9ivVWW4=)
2: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: 8pZycFEFv+imQ+mtcRak9YCzQdDpQW3zkPA6LLnF7a0=)
3: 340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl (hash: WItgYuz8y6riRYN36MUs1/5OBP6k7CQIDnaWu5C3gMc=)
4: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: JczwydLDkdNzKk6Cnq/rkI8Jh7uMVayXhsixOY3NYF8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl
rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 06:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5e:54:71:e9:ed:73:0d:e4:f8:4c:c1:4f:26:f3:7c:1a:d9:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340AD042C748E444BC9CE7CC90AE14015B6E3BAE
Validity
Not Before: Oct 11 04:43:24 2026 GMT
Not After : Oct 12 06:40:24 2026 GMT
Subject: CN=D373530A6B090371AF95AD04A630901FBE3D933B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:ee:66:7f:9f:36:f9:3f:55:fb:a5:0a:1a:
e0:11:6e:d6:5b:19:26:13:d4:ef:15:25:8a:e0:5e:
77:c0:8f:57:66:3c:e7:81:c7:53:a5:d8:cd:fd:45:
90:cb:00:48:8c:c8:5b:07:cb:69:18:2c:cc:96:91:
91:15:dc:18:95:bd:de:ce:fd:d1:e0:d9:ae:1b:b6:
d6:36:af:fb:fd:27:88:3d:cf:10:33:43:47:d9:b2:
0a:6c:48:6b:a5:c8:62:45:c7:9d:12:de:4e:58:8e:
3b:d3:ac:8d:f8:b4:60:cc:16:5d:31:a6:d1:54:33:
a5:32:b8:00:fd:d6:9e:f8:21:ec:67:c2:8d:d7:e1:
f6:76:0f:d4:e9:3e:b2:7a:cb:13:bc:89:04:c7:ff:
da:02:d0:9a:5b:1c:e9:f2:b1:21:5a:29:dd:66:9c:
a8:ae:28:94:49:3f:05:68:45:87:1b:34:54:74:30:
a1:00:8a:3a:36:16:a7:2e:97:de:aa:37:7d:03:72:
a2:fb:a4:0f:17:24:b9:06:39:64:55:e3:db:04:98:
4b:e2:70:cf:ee:e2:18:57:f2:2f:43:a2:af:67:ba:
5a:54:4d:8b:02:64:c2:22:87:4d:98:62:51:7b:77:
08:e2:8a:d4:40:2d:f5:46:d9:6c:50:8e:43:73:9d:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:53:0A:6B:09:03:71:AF:95:AD:04:A6:30:90:1F:BE:3D:93:3B
X509v3 Authority Key Identifier:
keyid:34:0A:D0:42:C7:48:E4:44:BC:9C:E7:CC:90:AE:14:01:5B:6E:3B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:a6:41:10:12:a0:77:bd:e8:64:d0:ba:6e:05:f5:2f:65:
fe:8f:97:17:1d:0b:81:e8:70:77:a6:51:19:d2:91:5f:2a:1a:
04:ed:93:82:03:51:16:8c:6c:03:c8:f2:05:d2:ae:5c:a0:df:
ff:21:5c:d2:3f:99:45:25:8b:93:62:21:d4:ef:31:80:4c:e6:
a9:de:15:a2:81:6d:b8:48:88:2f:8b:b2:ef:eb:68:53:58:3f:
7c:94:5e:90:45:0c:01:9f:09:70:3d:17:1a:ca:79:c7:b8:fc:
8a:27:cb:68:d5:28:03:1d:3c:43:c3:45:4d:28:fb:26:ad:95:
7f:50:22:71:67:f4:bb:23:7b:77:47:aa:8e:ae:17:61:48:9d:
e7:47:2c:1a:dd:c0:a3:69:e1:d0:62:75:d1:41:38:9e:7f:a8:
45:bf:29:4a:e0:23:fc:90:0e:d8:e0:6f:b5:25:cb:b9:a2:c4:
3a:59:a9:d1:9f:1c:e2:71:c5:28:ca:7f:88:5b:06:ae:4e:bd:
63:7c:f3:c0:27:41:e0:2f:2d:1d:d2:62:fd:ef:9d:b7:48:c7:
e1:a5:68:f3:18:ec:36:99:1f:ae:45:15:bd:94:a9:b3:41:54:
1a:04:fa:2c:05:15:76:6b:5b:cb:87:ef:ab:cd:4f:a1:ec:8d:
0c:ac:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:56:23 2026 by rpki-client