
$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft
File: 5A98F4FF217501200D2C8EBD339154643172DC4A.mft (raw, json)
Hash identifier: FWYdIR0N5ITLtBdSvPCpBKNvuTsZ2Y2IjSmJbM6+KBE=
Subject key identifier: 79:58:34:E0:3E:5F:8B:13:15:92:C5:DD:97:C4:06:18:7A:35:83:82
Authority key identifier: 5A:98:F4:FF:21:75:01:20:0D:2C:8E:BD:33:91:54:64:31:72:DC:4A
Certificate issuer: /CN=5A98F4FF217501200D2C8EBD339154643172DC4A
Certificate serial: 5113CF5051B499F488545511BCE000DB84406ACC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft
Manifest number: 40
Signing time: Sun 11 Oct 2026 13:43:28 +0000
Manifest this update: Sun 11 Oct 2026 13:38:28 +0000
Manifest next update: Mon 12 Oct 2026 14:24:28 +0000
Files and hashes: 1: 323830343a333238383a3a2f33322d313238203d3e203532383237.roa (hash: llTM3ut3XM/mNSGow8HoU0l+2p2gjZmykDeorjkZlF0=)
2: 3137372e37322e3136342e302f32322d3332203d3e203532383237.roa (hash: FC1ciLDXOmy4Hfkhtgh0quCDc6+iRpZ7mGS1KnfZ/1U=)
3: 5A98F4FF217501200D2C8EBD339154643172DC4A.crl (hash: DF8IVwbfl2IpSnkGBRFP1tsKtGQHSX7fUxOafHWNoZc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.crl
rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 12 Oct 2026 14:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:13:cf:50:51:b4:99:f4:88:54:55:11:bc:e0:00:db:84:40:6a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A98F4FF217501200D2C8EBD339154643172DC4A
Validity
Not Before: Oct 11 13:38:28 2026 GMT
Not After : Oct 12 14:24:28 2026 GMT
Subject: CN=795834E03E5F8B131592C5DD97C406187A358382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:7f:cb:cb:bc:8c:69:7c:47:03:b4:5f:ef:
f4:20:07:a7:92:39:95:b5:3a:77:40:92:da:8b:53:
f3:4a:3e:08:fb:b0:e2:32:83:0d:ef:75:5a:8f:85:
2a:f7:7a:e1:47:6f:94:de:e4:8b:a6:c1:26:c4:06:
fa:bb:69:0e:70:5a:c2:5a:f9:d3:ab:ca:f6:e3:8b:
14:d8:18:ea:0f:65:de:8d:45:88:6c:cd:f8:80:04:
56:e6:44:be:b7:82:b1:64:e5:c4:ec:58:a3:07:30:
8c:3e:83:9b:57:eb:4d:48:d3:d9:5b:b1:16:67:2a:
69:6a:34:2e:25:a4:fa:ff:91:9b:dd:5d:32:99:45:
bd:3e:6d:67:ea:97:ef:7d:ca:4a:5e:98:97:ff:5d:
33:b1:d8:42:9b:74:e3:cb:ce:b1:4e:e8:81:85:39:
d1:8e:ed:26:66:4b:c3:b6:90:54:45:84:67:eb:94:
e3:fb:e6:e2:53:ef:e5:9e:13:c9:bf:db:ab:33:11:
87:fb:2d:95:f2:54:07:d9:d3:6d:39:4f:c0:02:b3:
fd:1e:dc:15:58:e9:14:17:06:30:4d:7d:3c:3e:5c:
82:c9:ac:08:0c:8c:1d:64:ae:45:9c:a4:4f:d1:00:
83:96:dd:ca:53:8b:33:a1:72:db:fe:6a:e0:28:d3:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:34:E0:3E:5F:8B:13:15:92:C5:DD:97:C4:06:18:7A:35:83:82
X509v3 Authority Key Identifier:
keyid:5A:98:F4:FF:21:75:01:20:0D:2C:8E:BD:33:91:54:64:31:72:DC:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bc:f5:14:0d:0d:83:7a:88:dc:4e:5f:00:16:6c:f1:51:a1:
cb:19:9a:c5:0f:c7:18:35:7b:6d:ad:1e:37:e0:56:f6:b8:83:
8b:9f:dd:37:1a:b5:c7:fe:e7:61:0a:35:50:65:76:12:47:26:
3f:0f:2f:ae:59:95:31:f6:17:50:4c:87:cc:98:23:ed:07:31:
4f:10:2f:46:30:b0:58:c5:dc:7c:a5:db:b2:36:21:72:3e:04:
91:8c:c1:88:a7:d5:c8:57:bd:45:ac:4e:85:ad:c2:38:1d:7f:
4f:18:4e:c4:10:37:c2:96:9a:51:fd:c5:eb:96:12:7a:2b:50:
ff:af:94:3c:d7:55:97:2d:31:5c:b7:79:9a:bf:cc:bb:f4:8a:
e9:b3:8d:fb:3d:36:26:27:16:ac:bd:48:81:5d:7e:8a:31:a2:
6b:6b:30:60:8d:93:be:47:e9:3e:4a:37:9b:d8:ba:b5:7f:c3:
6c:93:ad:02:61:86:aa:ef:9a:52:19:21:78:f2:db:ce:34:eb:
f6:a6:e8:ee:a8:42:a9:08:e3:1c:8e:e3:6d:9c:ae:2f:c8:c8:
d6:cd:55:fb:10:31:9f:f3:10:32:ff:1c:2f:36:88:fd:76:da:
2b:49:5a:1b:ce:b4:46:19:b9:c1:b4:35:6e:fd:97:4c:67:33:
e3:c0:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:13 2026 by rpki-client