
$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier: gzcWqwUBee8PgTE+zzSZlFuo71z+ffenlRFFFkBvmkE=
Subject key identifier: 2D:A4:29:CD:D6:BF:D0:2F:5C:A6:C8:FF:DB:B3:5D:17:8D:D0:9E:85
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial: 4AD5F3CCF2CA15F690C840C7CB417CF6CF0BDE88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number: 039A
Signing time: Sun 01 Mar 2026 07:05:07 +0000
Manifest this update: Sun 01 Mar 2026 07:00:07 +0000
Manifest next update: Mon 02 Mar 2026 10:27:07 +0000
Files and hashes: 1: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: dTA3boB0PEjWqE5HcDP10vdCzoKwoMf1WNjQhWymjFk=)
2: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: aFrAdZ+heX1JwAjk9+yLnN++Dbt7GfogZYb5E5HDg3k=)
3: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=)
4: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: mbA18wNYwlSwgf+rnxvU0zp+nQhkLa27TRyV/C7qbao=)
5: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: eLKhpfPx/+V7Pj+9dS5wyYKo8jQJGUk49qGZGYk4KNY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 10:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d5:f3:cc:f2:ca:15:f6:90:c8:40:c7:cb:41:7c:f6:cf:0b:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Validity
Not Before: Mar 1 07:00:07 2026 GMT
Not After : Mar 2 10:27:07 2026 GMT
Subject: CN=2DA429CDD6BFD02F5CA6C8FFDBB35D178DD09E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:7e:e1:e9:f5:da:d0:7b:17:a9:81:11:4f:
f8:83:7a:34:a8:4c:11:dd:bf:8c:b6:8e:63:76:86:
34:42:f4:b8:90:15:91:3d:55:f9:77:82:d5:64:2a:
e5:ae:68:80:d2:f4:06:31:e3:31:32:07:61:b3:69:
e3:e0:95:d9:5d:1b:47:39:70:c9:c4:a2:86:53:35:
7b:47:35:d1:a0:66:57:65:2b:94:3d:b3:cb:2a:56:
70:e6:00:17:a3:8b:46:a2:72:90:93:28:8d:dd:5f:
96:ea:de:3d:05:5e:2d:69:9f:82:64:dd:da:06:48:
08:44:60:c8:af:e2:6c:93:16:70:72:7b:ce:3f:4d:
34:c8:dc:32:57:80:e2:0e:0b:05:e5:5d:9a:53:fb:
d9:0b:f4:ce:11:ff:97:f0:d7:bc:ff:5e:a8:4b:18:
20:10:f6:62:8e:69:5c:53:7e:e5:f2:e3:b1:ae:e0:
18:4c:6b:21:a1:12:04:d9:c8:24:0c:10:a2:91:3e:
19:82:8f:ea:3b:85:59:4b:72:22:e7:8a:04:11:0e:
7e:83:1c:bd:d8:da:b3:d8:84:2a:c5:bb:61:d9:cd:
a5:2c:c0:2c:d2:cc:fe:1a:6b:30:f3:7e:f4:8e:89:
7d:7d:d0:e1:d5:11:79:38:f5:06:d9:78:7a:d9:3d:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:29:CD:D6:BF:D0:2F:5C:A6:C8:FF:DB:B3:5D:17:8D:D0:9E:85
X509v3 Authority Key Identifier:
keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:56:d8:d9:b0:1a:60:8e:de:2e:39:d9:42:65:0a:79:8e:cf:
ee:65:63:61:04:71:05:4a:a3:29:5a:b8:80:3e:73:52:50:f9:
fc:9a:0d:d2:b1:76:8d:ae:2c:81:16:65:94:45:f6:b2:d3:f8:
9e:df:77:4b:01:36:b8:b6:0b:0a:07:1e:ac:27:66:67:83:82:
f5:d0:d6:f7:39:fe:38:d7:b0:ae:ad:51:69:18:ff:bf:13:55:
48:e7:a5:be:02:f1:a3:aa:96:76:d5:3b:d1:2f:ff:63:d4:ec:
66:05:40:67:29:1f:a3:7d:4c:f3:cf:ca:d9:67:5c:e6:b6:1e:
1d:5c:6f:e2:5e:5d:59:5d:db:2b:70:67:c8:10:bb:4c:c0:d1:
8a:fb:83:9b:58:e7:f7:f1:51:3b:62:1f:4d:62:c9:2f:46:e8:
32:67:d3:00:ce:ef:d6:12:8f:b5:10:5d:46:ba:52:85:bf:e4:
6b:f5:ee:70:8a:22:fd:6b:78:5c:28:59:55:28:0e:ba:ee:0b:
c0:87:52:a6:96:85:c4:37:16:b5:cc:bd:cc:42:39:4b:6a:d5:
4c:bd:8f:0f:3d:96:ce:b6:fc:40:eb:35:58:72:b9:a5:b2:a8:
fd:11:a7:2f:ed:8c:14:05:8e:45:a4:3f:85:15:d6:9c:dc:8a:
c0:92:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:17:06 2026 by rpki-client