
$ rpki-client -vvvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
File: D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft (raw, json)
Hash identifier: 5dFPlB3zAOenZyYw0YIeJQJYi6CgOOeT9R419pP3qU8=
Subject key identifier: D3:D6:9F:6B:C1:E2:5B:F0:01:4E:30:D8:19:7A:4B:2B:F7:D4:8E:32
Authority key identifier: D9:89:D3:71:3F:C4:84:32:F0:42:1F:20:BB:44:8E:9C:AD:4B:BC:B8
Certificate issuer: /CN=D989D3713FC48432F0421F20BB448E9CAD4BBCB8
Certificate serial: 7100231D579307DAE77532BAB45ACFCF236BA2D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
Manifest number: A1
Signing time: Wed 04 Nov 2026 03:11:32 +0000
Manifest this update: Wed 04 Nov 2026 03:06:32 +0000
Manifest next update: Thu 05 Nov 2026 06:00:32 +0000
Files and hashes: 1: 323830343a313937383a3a2f33322d313238203d3e203631373936.roa (hash: aaWIO5WUsrDOSUtJONMpUbl4iFqjK+9IT3SY5ABRW/w=)
2: 3230312e3135392e3138302e302f32322d3332203d3e203631373936.roa (hash: u0Xji8q66Av5NLKKIE30Aphh+cA7fe+dZZQj5E5IBd0=)
3: D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl (hash: lBixnQ6qvqhiZc4J3bv+4iKd0mB0ciEqU//4sxqqbnY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl
rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:00:23:1d:57:93:07:da:e7:75:32:ba:b4:5a:cf:cf:23:6b:a2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D989D3713FC48432F0421F20BB448E9CAD4BBCB8
Validity
Not Before: Nov 4 03:06:32 2026 GMT
Not After : Nov 5 06:00:32 2026 GMT
Subject: CN=D3D69F6BC1E25BF0014E30D8197A4B2BF7D48E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:8e:f9:e0:de:74:c6:58:38:78:b3:c8:9c:
e8:50:e4:82:df:b1:cb:a1:67:5b:f9:4d:26:7f:27:
9e:7a:c7:84:dc:17:3e:9d:ee:fe:98:2d:9d:11:c7:
2f:99:e1:42:c3:31:9c:6e:77:f3:0c:ba:06:58:ce:
1d:96:c9:b2:a7:7b:59:97:dd:91:f4:65:6a:26:b2:
ab:13:70:e0:c8:1e:82:fe:00:ee:91:f3:12:66:1b:
97:2f:c4:c6:39:9d:56:28:e4:0c:e1:9f:dc:89:41:
53:96:e3:34:f5:de:c9:b6:b1:c9:46:03:b6:95:33:
03:96:be:9a:fc:fb:48:51:64:3b:06:af:78:25:4f:
f4:e0:39:8d:92:ca:53:af:01:9d:12:d0:a8:53:e0:
a0:36:77:3d:3a:49:62:e4:5c:92:fc:58:3a:b1:43:
74:df:34:fc:81:df:9b:61:25:85:88:f8:49:99:0f:
93:a1:29:df:98:be:8c:47:bb:4c:66:05:30:d1:ee:
a6:82:4a:60:9d:dc:e1:87:4e:57:8f:3d:5c:e2:c9:
ad:de:8a:85:ab:90:fc:5a:81:6e:52:ad:b2:c8:e2:
85:05:32:cf:7e:2a:a8:c7:9e:62:39:3b:1c:9a:ec:
f4:b9:55:55:c3:38:b9:de:65:49:97:ea:1a:de:da:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:9F:6B:C1:E2:5B:F0:01:4E:30:D8:19:7A:4B:2B:F7:D4:8E:32
X509v3 Authority Key Identifier:
keyid:D9:89:D3:71:3F:C4:84:32:F0:42:1F:20:BB:44:8E:9C:AD:4B:BC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5d:37:0d:8d:8f:c5:6d:2f:b0:cb:5a:c8:e5:b0:52:e1:d3:
01:be:55:44:9f:8f:f9:e9:3c:c5:c0:99:68:5f:a9:20:e3:a6:
99:77:5a:64:17:36:48:fb:1b:00:99:df:e7:b1:3e:c7:2a:ec:
bc:d8:ae:e2:4d:35:8f:e0:43:a7:fd:3a:fb:40:83:7f:1b:1a:
69:1f:49:0d:bf:1a:c8:f7:d2:1d:a3:b8:94:ab:f5:fb:48:3e:
7f:f1:c1:e2:4e:4f:50:2f:bb:41:cd:e4:47:58:41:8f:f0:ad:
54:cf:a0:a2:22:f0:b6:58:c9:19:9d:f2:73:2f:27:1a:f4:3a:
72:63:94:9f:e5:e5:93:1c:63:ad:2d:f5:ff:c2:f1:db:56:5b:
a9:19:a4:ad:69:db:a6:e7:8a:53:dd:fc:a7:96:b4:1b:49:5a:
cc:35:65:2b:1b:0c:b7:a4:a7:38:7a:25:e3:35:ed:c9:1c:55:
c6:3d:af:55:e6:38:16:dd:22:91:df:e0:9a:eb:61:4c:ca:81:
1d:d7:53:c7:7f:9d:4d:24:54:ea:57:30:32:e4:ae:79:c7:62:
8b:a9:5e:0a:4a:f4:32:05:fd:d8:fe:f0:ef:f7:82:98:11:ab:
b8:a4:47:3d:08:97:4b:ec:90:ee:90:4b:65:54:36:5f:15:51:
60:b8:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:56:15 2026 by rpki-client