
$ rpki-client -vvvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier: 3nYyrmAd9S/N9s/fYi6sVIKmvzoMb6a5/hJd3aG/IO4=
Subject key identifier: B1:73:A5:0F:C4:66:79:2B:C4:19:26:30:73:C7:3F:02:0B:7D:D5:20
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial: 648D397C5B022B6C79E31BBA6BC56B8AF1847751
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number: 04DE
Signing time: Tue 27 Oct 2026 03:18:04 +0000
Manifest this update: Tue 27 Oct 2026 03:13:04 +0000
Manifest next update: Wed 28 Oct 2026 05:55:04 +0000
Files and hashes: 1: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: XZIW/gluGpmnKLiYq12FOjXlsr+KCp7Gf1Fg6DD/Hw4=)
2: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: BXqLPyDzzCYhGVqlktrFoIOUQfeMGR4u3sXs6+l2szM=)
3: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: Y4ZOYJJ1biMgslS1IzAz8sTCAjI/fd+fuo6g1GIDcE8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 05:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8d:39:7c:5b:02:2b:6c:79:e3:1b:ba:6b:c5:6b:8a:f1:84:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Validity
Not Before: Oct 27 03:13:04 2026 GMT
Not After : Oct 28 05:55:04 2026 GMT
Subject: CN=B173A50FC466792BC419263073C73F020B7DD520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:70:3d:60:35:7f:ce:5d:71:81:1e:d8:38:
9b:07:97:cb:54:b5:d5:32:93:4a:61:d5:0d:19:79:
de:7a:b4:78:bd:eb:b0:3b:bb:de:b9:ec:9d:92:0b:
e0:8b:9b:6e:b2:79:02:d5:80:f5:db:71:15:58:84:
76:0e:38:20:ea:12:eb:b9:8f:8e:f3:81:ea:5e:2a:
6b:13:34:c5:93:26:2d:22:6c:00:6c:4e:c7:08:d9:
65:63:8d:27:c9:82:a1:5e:a1:55:ab:1d:08:6c:71:
c3:d8:fb:8c:a3:b2:37:6e:df:29:fe:d6:7b:5a:6b:
6f:3d:a0:83:c0:20:dc:58:43:bc:dd:bb:9a:ec:24:
d6:e4:7a:85:4d:b5:d5:83:6f:94:12:be:cc:76:d7:
53:de:3c:65:e8:a1:42:fe:4d:6b:0f:c3:d3:d2:7f:
00:1f:e3:e6:9c:04:f4:21:f7:47:8a:3f:23:12:72:
b4:7d:c5:fb:c2:2e:74:4f:e7:3b:99:e2:27:9e:11:
44:42:72:28:cd:62:8a:ea:3f:9e:f7:44:e0:e8:8b:
8c:5e:73:ca:ee:d9:ac:a8:06:74:aa:54:60:28:de:
40:a5:e4:6b:44:cd:af:ce:96:cb:1d:f1:ee:b1:a8:
5d:03:66:45:39:85:d6:bf:34:7c:52:c1:62:ca:7a:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:A5:0F:C4:66:79:2B:C4:19:26:30:73:C7:3F:02:0B:7D:D5:20
X509v3 Authority Key Identifier:
keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a9:12:69:63:d1:f1:a0:68:08:fa:9e:1e:3d:d4:70:fb:0b:
74:8d:01:dc:33:af:8f:22:df:ad:bf:9a:5a:f8:1d:33:23:3d:
16:84:f1:56:cc:af:72:5a:af:4d:1c:d9:60:44:0f:b8:ec:61:
c7:a5:0a:9a:65:b4:39:58:4f:a0:82:f7:ed:6a:b6:12:13:9c:
ce:1c:7c:ca:da:89:79:b3:04:ef:f8:61:3e:a4:84:0f:f4:f2:
97:7e:ab:2f:eb:b8:8a:59:42:47:80:45:71:dc:42:b0:78:33:
c7:4a:5d:0d:ab:02:e5:5f:9b:a8:ba:ed:be:98:04:5d:0e:8b:
88:91:05:e8:fe:d5:76:bd:99:93:58:bf:62:a5:da:43:e0:62:
e7:e6:a2:f6:a5:11:2a:2a:21:65:27:f3:8c:31:81:d0:0a:06:
a2:fa:73:a7:bd:6a:da:39:00:db:47:6f:5b:db:ab:b9:1a:83:
2f:fa:ab:ce:2c:fe:f9:86:c0:ee:5f:01:6b:6d:62:ea:b6:f7:
84:75:18:76:2a:f6:20:6c:96:40:f4:54:ab:88:44:f3:00:24:
76:eb:b4:81:e2:07:db:02:7c:3f:9c:b8:6f:32:a2:7b:2f:0b:
88:c9:16:80:c7:53:a5:5d:ae:3c:dd:c0:bf:8e:0c:e1:19:57:
22:54:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:50:36 2026 by rpki-client