
$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier: TUMWTYmboy1Fbzs7MlGJiwoGymK3VoVzA1Fw2wcvyyI=
Subject key identifier: 83:00:24:A4:4D:9E:6B:27:35:A9:6A:E8:EB:23:5B:6C:21:DB:1D:53
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial: 3F1DDFDF57378AE17F942D953B3DFA032DC877F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number: 03D3
Signing time: Wed 08 Apr 2026 12:10:30 +0000
Manifest this update: Wed 08 Apr 2026 12:05:30 +0000
Manifest next update: Thu 09 Apr 2026 14:07:30 +0000
Files and hashes: 1: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: BXqLPyDzzCYhGVqlktrFoIOUQfeMGR4u3sXs6+l2szM=)
2: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: Y4ZOYJJ1biMgslS1IzAz8sTCAjI/fd+fuo6g1GIDcE8=)
3: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: Y1OQJLvAN4vXwrgmr2VFsN+GXH3wE0WLy6ddOq0Al38=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 14:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1d:df:df:57:37:8a:e1:7f:94:2d:95:3b:3d:fa:03:2d:c8:77:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Validity
Not Before: Apr 8 12:05:30 2026 GMT
Not After : Apr 9 14:07:30 2026 GMT
Subject: CN=830024A44D9E6B2735A96AE8EB235B6C21DB1D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:d8:3b:a4:51:bc:f3:8f:fb:28:31:c2:b0:
0f:6f:7e:f3:d1:aa:2c:c8:d1:40:fc:ac:55:21:b0:
9a:2e:a9:a2:8d:1e:24:df:99:4f:e9:5c:85:b8:f0:
1a:47:0c:d2:80:3d:7f:ba:fc:73:5e:d0:17:c4:47:
43:d9:a5:2e:01:ef:d7:6a:a5:c7:c1:ea:e3:60:3b:
9b:4b:13:c0:23:24:ca:17:15:d7:c5:a5:a3:7e:ae:
90:56:6a:3d:f2:5f:4f:ea:5e:8f:79:fa:82:15:58:
7f:05:b5:4e:74:02:f0:c8:e6:6f:97:fb:ac:4d:03:
92:ed:d9:9d:29:04:3d:e2:1f:35:b2:9d:05:8a:b9:
7b:39:53:70:50:55:2f:8c:d7:02:ed:8c:e7:d7:bc:
3d:fd:52:e6:7d:66:79:d2:a6:84:a7:d5:f2:b6:7f:
27:3e:0c:ef:56:d0:87:f4:13:24:59:de:84:77:c2:
77:26:50:f7:52:20:43:94:cc:59:bd:49:a7:f3:ae:
68:2b:e3:1d:0a:77:3c:02:36:ba:06:d8:d3:94:ae:
a7:a4:92:a7:8f:c1:44:c8:48:2f:9d:c1:b9:99:c9:
3f:a6:fc:7e:d4:73:f7:df:65:03:fb:e4:b6:44:fa:
8a:d7:ad:89:8b:3e:61:c6:86:5e:2a:45:2b:4a:37:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:24:A4:4D:9E:6B:27:35:A9:6A:E8:EB:23:5B:6C:21:DB:1D:53
X509v3 Authority Key Identifier:
keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0e:e8:c2:4a:ba:cd:7f:33:89:bb:0e:ce:0e:13:9e:69:fb:
6a:58:c5:78:b1:5d:59:2a:72:a5:78:f6:b1:a3:40:92:1b:d7:
c5:3b:dc:c8:08:fb:5f:36:85:da:35:bf:a0:c9:f4:a0:f0:f1:
30:5a:11:2f:f2:64:35:3c:70:81:d8:a5:a8:df:08:72:27:ce:
14:63:4f:b3:bf:7b:96:1a:38:db:d2:62:f7:b2:b9:53:f4:c9:
e4:9a:9a:cb:09:f7:ad:8b:56:4d:72:5e:8c:1e:40:c3:e6:4a:
5d:5d:30:6a:f5:07:1e:24:19:0b:74:2b:d5:d1:67:12:b5:16:
b6:4b:96:46:01:7a:ab:62:a4:f1:0e:0f:8d:37:58:45:f2:3e:
50:97:9d:40:5f:06:bf:1e:1b:f5:55:e7:ec:e8:98:32:c6:81:
dd:a3:49:89:de:fb:3e:a1:41:f9:28:26:37:74:4d:c6:30:b6:
cb:a9:85:db:14:10:26:5e:11:5e:8b:0e:99:f1:36:62:94:48:
51:2f:dc:22:2a:1a:c0:b4:8b:e9:33:c2:17:78:2c:f2:59:a9:
e4:b2:f1:30:f3:8f:4c:5e:08:ba:74:dc:de:2b:cf:e8:76:77:
dd:4a:8c:de:69:d2:4f:66:30:ba:e5:3b:64:65:ab:94:a5:22:
1b:49:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:53:52 2026 by rpki-client