
$ rpki-client -vvvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
File: D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft (raw, json)
Hash identifier: ZfU8dIy5do+WQW6sMtShm8YxngmOVAt/+Ii43zkhqY4=
Subject key identifier: D9:9E:C6:2E:08:1B:8B:E9:3A:EA:4D:A5:C0:DC:24:58:D7:30:CB:71
Authority key identifier: D9:89:D3:71:3F:C4:84:32:F0:42:1F:20:BB:44:8E:9C:AD:4B:BC:B8
Certificate issuer: /CN=D989D3713FC48432F0421F20BB448E9CAD4BBCB8
Certificate serial: 4982D3C5F125F452E97755A9A4EC0766AD617508
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
Manifest number: 40
Signing time: Sat 22 Aug 2026 21:51:36 +0000
Manifest this update: Sat 22 Aug 2026 21:46:36 +0000
Manifest next update: Sun 23 Aug 2026 22:34:36 +0000
Files and hashes: 1: 323830343a313937383a3a2f33322d313238203d3e203631373936.roa (hash: aaWIO5WUsrDOSUtJONMpUbl4iFqjK+9IT3SY5ABRW/w=)
2: D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl (hash: NiQ3Qi3FUuq33yivsLXFQj2HjDGIaPvzdVCd81Hhhqo=)
3: 3230312e3135392e3138302e302f32322d3332203d3e203631373936.roa (hash: u0Xji8q66Av5NLKKIE30Aphh+cA7fe+dZZQj5E5IBd0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl
rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 22:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:82:d3:c5:f1:25:f4:52:e9:77:55:a9:a4:ec:07:66:ad:61:75:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D989D3713FC48432F0421F20BB448E9CAD4BBCB8
Validity
Not Before: Aug 22 21:46:36 2026 GMT
Not After : Aug 23 22:34:36 2026 GMT
Subject: CN=D99EC62E081B8BE93AEA4DA5C0DC2458D730CB71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:23:73:8d:2f:48:f9:01:0a:b4:10:1c:59:
cb:80:be:82:f8:72:20:bd:0d:e9:61:8a:3d:12:39:
2e:d3:3f:41:9a:78:93:13:8b:3d:d0:a0:a2:94:91:
70:d2:98:ea:71:92:3c:27:28:d8:93:40:97:64:a4:
be:72:52:1e:ba:02:9a:2a:04:15:ca:d5:8e:37:06:
0e:87:ae:98:13:67:7d:bf:73:19:99:16:68:c2:ea:
8a:b6:2d:c5:d3:cc:00:6f:07:01:2b:a4:21:4f:2e:
4b:e0:53:18:4b:8d:29:4c:8d:5b:5f:10:37:a6:e0:
d3:02:5a:91:39:fa:fa:44:0a:f1:33:77:4c:ce:dc:
ea:55:58:b4:be:d0:41:0c:3f:a0:fb:35:f9:94:ef:
53:66:13:a2:02:5d:fa:41:ba:ff:09:9c:be:b7:5a:
ff:b5:bb:2f:1a:4c:f0:d4:4f:f0:b3:31:24:cb:c7:
59:96:7d:e1:03:17:d5:f3:e7:69:8b:ae:dd:24:19:
5a:f6:ab:d8:7a:ce:1c:8f:ef:70:5c:e1:28:e1:a7:
9d:0f:bb:8b:d2:42:0e:4a:e3:62:9e:45:ea:2e:69:
c0:0c:d4:e7:20:b2:a4:a1:2e:57:0e:31:d4:03:5e:
9d:1b:eb:27:2a:a2:1e:68:68:e6:cf:7f:d5:08:1e:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:C6:2E:08:1B:8B:E9:3A:EA:4D:A5:C0:DC:24:58:D7:30:CB:71
X509v3 Authority Key Identifier:
keyid:D9:89:D3:71:3F:C4:84:32:F0:42:1F:20:BB:44:8E:9C:AD:4B:BC:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e8:68:b8:8b:7a:20:f7:2b:10:a1:7a:39:b9:a8:4b:13:f5:
5a:f8:89:c8:bd:c4:97:b6:47:18:0c:54:95:43:be:8e:a7:75:
f3:94:8a:40:6c:2c:e8:15:e8:9f:a0:73:3b:b0:5b:0f:95:67:
c3:47:e2:b2:8b:bd:ac:74:ee:48:4a:26:dc:dc:b6:75:d6:08:
2e:bb:e8:e8:5a:79:26:b6:8a:fa:6a:dd:8f:56:23:6c:50:d2:
b0:de:b9:a1:2c:1d:1e:c6:3f:1a:df:08:a8:f0:ba:18:78:71:
a5:a2:3d:f4:8a:79:0f:59:c2:19:3b:06:4c:49:c7:3c:4c:86:
4d:f4:38:16:bb:56:23:45:98:5b:a9:e4:a9:b6:98:ff:bf:44:
48:7e:ce:42:a2:5e:32:59:d1:a8:3e:33:07:f9:26:77:5c:f9:
1e:b7:8b:88:d1:ed:d3:42:e8:f6:c9:b3:ce:4f:0c:43:ca:07:
51:2a:68:79:b0:60:3d:ca:8e:93:27:88:47:86:44:2c:aa:c2:
00:bc:ca:c7:e0:b2:17:6a:e0:46:2d:d9:04:d1:99:26:b3:d6:
88:cb:c6:41:56:bd:4b:0f:12:76:7a:c1:05:3d:a3:c7:a5:0e:
bf:4c:7e:a0:7d:af:a9:69:0d:fd:96:63:09:7a:3a:b7:40:03:
97:f4:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:08:40 2026 by rpki-client