
$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
File: 988E922E2EBFFBA80468C170F0B053C90FD160E4.mft (raw, json)
Hash identifier: iBMNcyUgTepFew3/GcNm70cpZB8AS5+MOVB4x8GHwTc=
Subject key identifier: 86:81:5C:58:2E:13:05:A9:59:CE:FB:70:DB:28:00:59:C9:9A:12:90
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Certificate issuer: /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial: 0DF16C5FE5779CEF8F94BCF490C4F9FA8D3FD1A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
Manifest number: 041A
Signing time: Mon 02 Nov 2026 05:55:43 +0000
Manifest this update: Mon 02 Nov 2026 05:50:43 +0000
Manifest next update: Tue 03 Nov 2026 06:55:43 +0000
Files and hashes: 1: 988E922E2EBFFBA80468C170F0B053C90FD160E4.crl (hash: 9MLeMjtenqVgf3+w/ILPp41rHiKkUTD0RbteZ6dParY=)
2: AS61946.roa (hash: 6a/EUBNUqLy9TH609Dc1wPQR6YtgMta3IMwsW2jjQ1o=)
3: AS61832.roa (hash: 5u9VnROgKiNZK36bSVy96mhn+JbkxkoQsltYT1sOgG8=)
4: AS28598.roa (hash: S6n6B9MdpzLwDvnSPRY1Qr/qubR/jewwwC7LdwNlaRM=)
5: AS268018.roa (hash: LuJlSmVWcGdHNkArr+YbSxu2Z7uVcPDO1G2uuqzAgwM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 06:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f1:6c:5f:e5:77:9c:ef:8f:94:bc:f4:90:c4:f9:fa:8d:3f:d1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Validity
Not Before: Nov 2 05:50:43 2026 GMT
Not After : Nov 3 06:55:43 2026 GMT
Subject: CN=86815C582E1305A959CEFB70DB280059C99A1290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:dc:0c:67:d2:d7:12:1e:97:c8:65:ec:2e:
19:67:56:b5:70:a4:58:57:a7:bb:24:d3:75:c4:3f:
43:4d:57:df:82:e0:ea:b1:0e:09:d1:1e:c2:c0:07:
6f:b2:8d:6d:6d:e2:0b:e0:39:4f:ad:80:91:e4:1a:
fd:af:73:c4:6d:ac:54:01:73:92:3f:94:0c:65:84:
c8:cb:d9:d9:2b:7d:49:61:c5:a6:a7:12:41:4d:10:
c9:c0:07:bc:a5:8f:6e:a6:51:4c:ae:73:d7:8a:8e:
06:89:ce:2b:ca:56:26:c8:e6:4e:f1:8a:c2:eb:a9:
c6:d5:cb:c5:1e:f2:67:44:a7:e0:a7:a0:de:c3:8c:
11:55:a2:27:f2:a7:88:23:da:25:a1:89:fd:0e:e6:
47:5c:60:14:d8:9f:0e:14:88:d8:6c:b9:04:3e:1d:
18:1c:9e:31:98:df:77:94:d4:3e:83:c7:8a:4b:a5:
6d:ae:2b:07:06:f0:88:4d:1d:9e:52:db:31:b6:25:
32:68:7b:42:ab:5a:13:1f:37:10:e8:12:8c:ed:78:
de:f5:e0:c7:21:7d:48:90:12:40:45:06:6e:b7:82:
7a:6b:a1:f7:e3:ed:58:6c:74:45:3e:7f:7c:ab:4f:
b5:a8:22:85:63:d5:2e:1e:c9:88:66:6d:65:07:38:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:5C:58:2E:13:05:A9:59:CE:FB:70:DB:28:00:59:C9:9A:12:90
X509v3 Authority Key Identifier:
keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:3f:6c:c4:80:e0:e6:bd:4e:07:c4:6d:10:89:9d:fb:a3:
2b:22:c3:1a:2a:f7:87:62:36:86:9b:0f:19:fe:eb:28:40:e4:
3f:a5:c6:bc:b8:3c:b0:9d:15:78:01:21:37:a5:52:7d:3d:98:
1a:27:f1:e8:4e:bb:d9:a0:b4:02:18:54:53:2a:ef:e9:0e:15:
98:ed:dc:49:d3:5e:fe:00:a5:e7:cb:89:8b:53:fb:98:8e:46:
ba:3e:57:06:00:4a:29:09:31:3b:1f:a4:a3:b6:27:52:c7:bf:
0b:48:74:6b:0d:91:45:c8:1b:a0:e4:fd:8d:82:d8:0f:60:c9:
89:46:f3:0e:ad:24:37:98:3d:76:d2:9c:56:e6:53:48:02:31:
0a:c4:0c:32:59:e5:80:48:9b:59:55:d5:fe:68:6f:4f:c5:28:
e8:16:5f:9e:7a:b3:2d:a5:99:b8:b0:83:52:70:ae:30:f3:8f:
be:c1:b7:ae:9a:6d:db:b0:81:85:0b:6e:c6:87:77:1e:08:d2:
77:5b:52:4d:54:70:4a:06:e1:70:6f:6c:95:8b:a9:68:90:bd:
06:07:5d:ba:bc:e2:91:3b:b5:be:c7:ee:d2:6b:26:d0:f6:eb:
8e:0e:72:e4:83:22:2e:0f:88:1c:f0:99:94:d5:0c:f4:19:62:
61:e5:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:38:50 2026 by rpki-client