
$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
File: 40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft (raw, json)
Hash identifier: Yfkk/4DnXOs1hXgHyStK6Ckg1LVwD6KpWb3TPx51txU=
Subject key identifier: 16:10:4D:DD:41:1F:35:BD:4F:B8:83:5A:70:4E:0D:15:31:C2:EB:7D
Authority key identifier: 40:A6:BC:75:89:FB:54:32:8C:A6:44:8F:98:F0:A6:75:5F:B5:99:3F
Certificate issuer: /CN=40A6BC7589FB54328CA6448F98F0A6755FB5993F
Certificate serial: 105E83D3C900678AE6DA12441BF44081DDAAA48C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
Manifest number: 43
Signing time: Thu 09 Apr 2026 04:23:05 +0000
Manifest this update: Thu 09 Apr 2026 04:18:05 +0000
Manifest next update: Fri 10 Apr 2026 05:03:05 +0000
Files and hashes: 1: 40A6BC7589FB54328CA6448F98F0A6755FB5993F.crl (hash: fN8ph2PPHlwG/LyrSezMYsexTfRx2iBYgmFT2QZgL8Q=)
2: 323830343a343230383a343030303a3a2f33342d3334203d3e20323637343733.roa (hash: Odxt0fqFuxAC3jLNTKS4jDxOIheS3es19XpD5dROduc=)
3: 3139322e3134312e3138342e302f32322d3332203d3e20323637343733.roa (hash: Plj2Nty5zsWVgJNC5SkN1O+1M8/v85KkIf9MOu9oI54=)
4: 323830343a343230383a3a2f33342d313238203d3e20323637343733.roa (hash: OdmkebpM3fBxhbZRYo7DTD76sc+hebKtxJlgX0B+By0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.crl
rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 05:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5e:83:d3:c9:00:67:8a:e6:da:12:44:1b:f4:40:81:dd:aa:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A6BC7589FB54328CA6448F98F0A6755FB5993F
Validity
Not Before: Apr 9 04:18:05 2026 GMT
Not After : Apr 10 05:03:05 2026 GMT
Subject: CN=16104DDD411F35BD4FB8835A704E0D1531C2EB7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:16:f7:4e:f4:17:b5:c4:f2:ef:f5:0b:0b:
ff:48:4f:6d:6c:80:f1:81:13:94:fa:56:86:c1:5a:
d8:6f:13:f0:8a:19:66:be:16:b6:98:b1:e3:59:e5:
92:95:02:1e:78:7e:b5:91:b1:66:16:7c:22:e0:a9:
d6:74:77:d7:9c:14:37:62:e6:de:4f:09:f1:b9:4a:
40:c0:4c:79:28:3f:04:ef:2a:99:78:ea:9c:71:bc:
d5:f9:17:e1:d9:10:3f:43:19:37:e9:b7:15:70:fc:
55:46:9f:6f:dc:3e:f1:23:5f:d7:f5:cb:3a:b7:91:
90:fd:d5:ad:fa:b4:05:e3:a5:cb:df:f1:0b:a6:f2:
d4:71:58:42:54:af:fa:2d:33:d1:47:bb:47:f8:fb:
a1:d2:6a:fc:c8:c8:39:75:bb:61:a9:37:78:66:21:
13:88:89:c4:cb:74:04:83:73:ea:57:3b:36:28:86:
1b:0b:4c:fa:82:1c:85:3d:19:d9:da:c3:7f:0c:68:
07:ab:9b:d3:8e:6b:9d:cd:c5:cf:87:59:e9:fc:91:
0f:9b:96:ab:a2:9c:ce:ec:25:9a:3d:7a:8e:23:24:
fc:e6:0f:48:cf:28:39:5b:fd:71:2e:29:68:2b:cf:
d6:bc:66:52:38:8c:47:bf:be:68:9a:04:af:62:cf:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:4D:DD:41:1F:35:BD:4F:B8:83:5A:70:4E:0D:15:31:C2:EB:7D
X509v3 Authority Key Identifier:
keyid:40:A6:BC:75:89:FB:54:32:8C:A6:44:8F:98:F0:A6:75:5F:B5:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e8:cb:5f:1b:17:07:f0:ec:4d:63:c7:9a:88:f8:bf:50:a0:
aa:a8:b8:cf:ed:77:5b:42:c9:59:3b:c4:97:75:42:31:08:18:
d7:3f:9b:ea:50:0e:5a:14:11:4a:94:7b:f0:c0:0d:20:0a:73:
4d:fe:3a:18:ab:bd:5a:9a:a9:d0:2f:c1:0d:c2:c3:2a:73:92:
1b:f4:af:7d:db:00:e1:28:31:f8:f3:0e:c4:99:a4:75:fc:a3:
95:0c:75:dd:b9:f6:f1:d9:8b:47:48:86:5e:59:e3:29:95:2d:
1b:df:82:14:57:5d:7f:3f:10:9c:b2:85:21:e5:ca:79:6c:42:
c9:6b:e2:ca:02:d9:b9:34:36:ba:a7:3d:b9:9b:f4:cd:a0:fd:
0b:ee:f3:57:3d:9c:18:5b:14:7f:f6:1d:44:f4:e6:29:2e:34:
b6:1c:3f:97:5e:b0:21:ca:18:da:50:6a:62:07:32:5c:3d:d8:
bc:fd:90:56:4e:a0:d3:f3:5c:39:90:8f:a4:4e:8f:61:07:01:
ac:7a:cb:60:11:9b:30:28:2e:fe:4b:2a:df:69:a9:7c:75:a9:
f9:a6:6d:37:f7:8e:41:f6:4b:bb:58:5b:8b:06:c3:60:68:5d:
19:2f:48:91:45:41:8f:ee:28:4b:fe:d3:a3:32:80:70:9b:00:
38:1f:8c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:39:40 2026 by rpki-client