
$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
File: 988E922E2EBFFBA80468C170F0B053C90FD160E4.mft (raw, json)
Hash identifier: hqVEozLF8QES0LFA+scvrpRf0O4imu6Da6uN96cKAX4=
Subject key identifier: 24:27:FB:A2:1B:17:47:7F:9F:52:FC:7D:5A:4B:07:E3:10:D2:DB:8F
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial: 50217E20A50F334038A5E3E1BDBD7C07ECEAF449
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
Manifest number: 0418
Signing time: Sat 31 Oct 2026 15:32:14 +0000
Manifest this update: Sat 31 Oct 2026 15:27:14 +0000
Manifest next update: Sun 01 Nov 2026 18:35:14 +0000
Files and hashes: 1: AS268018.roa (hash: LuJlSmVWcGdHNkArr+YbSxu2Z7uVcPDO1G2uuqzAgwM=)
2: 988E922E2EBFFBA80468C170F0B053C90FD160E4.crl (hash: YmPUWem9H7AImcKmLCErAEtosnXTE3Smjx+1kew98YM=)
3: AS28598.roa (hash: S6n6B9MdpzLwDvnSPRY1Qr/qubR/jewwwC7LdwNlaRM=)
4: AS61832.roa (hash: 5u9VnROgKiNZK36bSVy96mhn+JbkxkoQsltYT1sOgG8=)
5: AS61946.roa (hash: 6a/EUBNUqLy9TH609Dc1wPQR6YtgMta3IMwsW2jjQ1o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 18:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:21:7e:20:a5:0f:33:40:38:a5:e3:e1:bd:bd:7c:07:ec:ea:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Validity
Not Before: Oct 31 15:27:14 2026 GMT
Not After : Nov 1 18:35:14 2026 GMT
Subject: CN=2427FBA21B17477F9F52FC7D5A4B07E310D2DB8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:e3:0a:ac:8f:2a:fa:3c:a0:5e:6c:3e:29:
ab:52:1c:03:e5:9d:f6:e5:9a:37:d3:06:66:ed:a4:
bb:05:41:59:0c:95:20:20:e3:eb:29:9a:85:79:43:
b6:5a:63:59:d5:9d:0c:d3:d7:e9:16:ea:7e:e7:42:
ca:ce:17:6a:52:6a:d1:1b:2c:3b:d5:62:f7:c9:62:
a2:4c:66:76:07:4d:03:4f:9d:eb:67:82:2c:61:9e:
f3:48:df:a0:d2:c2:7c:d2:7d:6d:05:d9:f8:2e:00:
4e:7b:cd:dc:48:2b:dc:b6:05:84:e3:e3:01:08:bd:
7b:79:74:bf:67:d8:00:b1:60:f7:e4:ba:44:50:83:
d7:07:d6:4b:f0:db:90:c1:11:7b:7b:71:5a:f8:d0:
d5:82:44:b9:46:9f:ce:f3:c1:a8:ad:80:e8:16:73:
e1:49:46:10:2d:a4:15:64:eb:09:db:75:80:3f:f2:
ef:a6:89:9c:73:72:7e:72:e0:10:7b:20:8d:13:a1:
ce:69:22:cf:5b:55:16:a4:57:6e:16:5f:65:89:7a:
3d:7d:cd:30:df:6e:95:bf:93:a9:ab:7f:d2:5a:74:
2a:c7:1a:fb:71:57:8a:b0:df:81:42:73:89:36:c8:
1e:a3:23:c6:a6:c2:4c:79:e8:6f:19:95:00:68:74:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:FB:A2:1B:17:47:7F:9F:52:FC:7D:5A:4B:07:E3:10:D2:DB:8F
X509v3 Authority Key Identifier:
keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:8d:ff:8c:e2:b7:f1:56:55:51:72:64:c8:ae:f0:17:00:
84:59:c7:0d:3a:66:12:d2:25:99:6d:d8:85:98:0d:45:32:70:
e1:68:64:f9:5f:0b:6b:44:57:7c:89:0c:40:9f:03:99:33:4b:
53:7d:a4:21:75:02:5e:dc:ad:26:fe:f0:a3:b8:e7:cf:0c:0d:
a9:b3:ec:fa:72:fc:46:36:c9:6e:3d:57:e6:61:e8:78:69:95:
67:40:02:aa:4d:be:80:26:85:3d:3e:c9:2b:c5:f2:05:e5:62:
11:3f:d7:cd:f0:d4:10:3e:2f:f7:1b:52:ee:0a:cd:ba:aa:be:
4e:64:69:fc:6a:99:57:69:d3:4e:77:7c:ea:cc:f6:b6:a7:2c:
fb:3a:58:78:89:e4:a3:65:61:20:68:f2:a9:21:2a:b8:5b:12:
6d:aa:57:03:f8:97:6d:ac:eb:38:8a:7f:5f:74:2c:11:78:21:
b0:21:76:ac:ff:25:02:ea:b7:1f:16:72:d0:b8:b6:22:1e:c0:
95:2b:50:d2:24:3e:71:57:ad:d7:51:e6:56:cb:bb:3f:5a:5f:
35:10:66:9f:3b:f1:8e:89:3f:58:e1:96:ec:31:df:7b:2a:19:
5e:d3:6b:13:96:31:38:9f:00:05:d6:84:e6:c5:25:92:b5:7d:
b7:59:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:08:49 2026 by rpki-client