
$ rpki-client -vvvf rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.mft
File: D70DFF7F142709578CA194217E583E38F1885AEB.mft (raw, json)
Hash identifier: xMvBb/SeJzF7SAEmZO3Fwvd8c9z6FoMFNo0kDQfDwDY=
Subject key identifier: 00:6C:A8:DC:7B:48:FD:41:0D:88:D7:3A:5A:80:DF:6B:2C:C2:C2:33
Authority key identifier: D7:0D:FF:7F:14:27:09:57:8C:A1:94:21:7E:58:3E:38:F1:88:5A:EB
Certificate issuer: /CN=D70DFF7F142709578CA194217E583E38F1885AEB
Certificate serial: 5585320D09C74879B868B24549B17C81CE2BA94C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70DFF7F142709578CA194217E583E38F1885AEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.mft
Manifest number: 40
Signing time: Sat 17 Oct 2026 20:11:58 +0000
Manifest this update: Sat 17 Oct 2026 20:06:58 +0000
Manifest next update: Mon 19 Oct 2026 00:04:58 +0000
Files and hashes: 1: D70DFF7F142709578CA194217E583E38F1885AEB.crl (hash: wOmXxV/oq2sE2O3HVTwbNvggneY0VaCMRRAc3NjTYoI=)
2: 323830343a383966343a3a2f33322d313238203d3e20323733363337.roa (hash: bTpbWjtwdqUOD7tR0OnhwpYeWnRNsB2FPI3SPIZdL+U=)
3: 3138372e3132312e3234332e302f32342d3332203d3e20323733363337.roa (hash: w6QVwLikUSM90nRBm+y4Tx7MRe24OloD+T3b+whEUag=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.crl
rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70DFF7F142709578CA194217E583E38F1885AEB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 00:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:85:32:0d:09:c7:48:79:b8:68:b2:45:49:b1:7c:81:ce:2b:a9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D70DFF7F142709578CA194217E583E38F1885AEB
Validity
Not Before: Oct 17 20:06:58 2026 GMT
Not After : Oct 19 00:04:58 2026 GMT
Subject: CN=006CA8DC7B48FD410D88D73A5A80DF6B2CC2C233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:63:32:d3:24:74:11:63:27:c8:5d:ef:3f:
4a:86:7c:30:0f:57:d7:4a:4f:00:96:49:c6:c1:d6:
10:c9:5e:66:18:87:a7:73:9b:3e:51:ee:e6:c6:1b:
ca:bc:0b:f4:a1:c3:3d:4e:f4:9e:dd:1f:c6:71:c3:
59:b9:83:97:95:8c:e9:83:e7:ea:c0:c9:37:fa:03:
ec:e1:d7:2b:d2:b5:34:bc:ac:65:ad:cc:ff:03:97:
e0:65:3d:3f:4b:5d:b4:f2:52:f6:49:28:3b:cd:6a:
e5:2a:b0:9b:5d:ad:d1:f3:5b:8b:44:60:ea:7c:91:
b7:66:d2:e4:d9:43:2f:02:98:52:c3:1d:56:9d:1a:
f2:97:81:12:e4:bc:a7:f6:b9:8c:b6:b1:ad:f6:d7:
7f:54:81:bc:36:61:07:8d:bc:a7:a4:f0:c4:5c:d3:
67:64:c2:3f:9e:84:73:63:1c:a3:ad:05:ec:e3:06:
97:5a:c9:d3:b6:da:fb:09:23:d2:a8:78:e1:e3:d0:
ae:81:d0:e1:c0:36:04:c1:ab:63:31:f9:12:4b:26:
97:93:d2:ff:f6:14:f4:57:dd:03:7d:82:e4:67:8f:
41:22:00:9a:ca:62:7f:96:dd:65:78:11:fb:f0:c6:
12:8e:e6:ab:c2:1c:4d:e4:d5:c5:f7:9a:5b:85:0b:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:A8:DC:7B:48:FD:41:0D:88:D7:3A:5A:80:DF:6B:2C:C2:C2:33
X509v3 Authority Key Identifier:
keyid:D7:0D:FF:7F:14:27:09:57:8C:A1:94:21:7E:58:3E:38:F1:88:5A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70DFF7F142709578CA194217E583E38F1885AEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dc:99:a4:de:1d:24:92:2c:69:49:08:d8:3d:73:93:81:6b:
4b:07:fb:47:41:15:d8:72:84:98:bc:52:04:6f:f8:02:18:7d:
ce:b1:5a:ce:78:37:5b:a7:b5:99:e9:74:11:3b:3f:69:d1:10:
d1:39:60:86:dc:86:69:15:8a:08:3d:d4:3d:d9:0f:83:9b:4c:
73:bb:3c:65:dd:43:c5:05:d7:e3:f3:27:c6:61:18:74:b6:21:
fa:59:dc:b9:3b:1c:7c:ce:9b:79:6c:54:73:8d:62:6e:10:f2:
c1:d2:1c:05:de:f5:f6:e3:6c:92:6f:08:82:0d:d4:c7:41:7e:
41:85:08:48:85:9e:1b:e0:57:b7:50:50:93:93:12:b4:3f:7b:
b6:08:e5:d7:b8:08:ac:8b:88:e8:5b:34:60:0e:c8:98:64:b8:
0e:51:ff:46:33:87:87:38:ea:7a:ff:d1:1e:74:0f:30:0d:d0:
ff:e8:de:7c:c7:19:0b:e5:f4:a4:49:af:44:39:05:b8:b2:3e:
a3:3a:e8:3d:37:96:14:96:37:86:d4:67:c4:43:48:37:a6:6f:
bd:3a:60:ae:a6:e7:55:e0:09:b1:fa:9f:d3:9b:19:ea:fb:7e:
21:e8:a2:a6:cc:24:b0:87:69:94:d5:42:51:b3:56:e9:1d:4f:
ab:0a:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:12:40 2026 by rpki-client