
$ rpki-client -vvvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier: PirdPvATwq0Lq3tBe35qwwQ2Z8b0XXlE/kMETXFjn9U=
Subject key identifier: 11:08:85:E6:D0:B8:25:31:38:58:42:47:66:07:32:DB:EB:E6:F4:5F
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial: 034F5AC33D22B6BC424031CC5626D7DA7CE579A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number: 0487
Signing time: Sat 22 Aug 2026 10:19:04 +0000
Manifest this update: Sat 22 Aug 2026 10:14:04 +0000
Manifest next update: Sun 23 Aug 2026 12:06:04 +0000
Files and hashes: 1: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: BXqLPyDzzCYhGVqlktrFoIOUQfeMGR4u3sXs6+l2szM=)
2: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: +klpa7johvXykqemxI97tOLkNWlqV7oNQ26JBV0q9ho=)
3: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: Y4ZOYJJ1biMgslS1IzAz8sTCAjI/fd+fuo6g1GIDcE8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 12:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4f:5a:c3:3d:22:b6:bc:42:40:31:cc:56:26:d7:da:7c:e5:79:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Validity
Not Before: Aug 22 10:14:04 2026 GMT
Not After : Aug 23 12:06:04 2026 GMT
Subject: CN=110885E6D0B8253138584247660732DBEBE6F45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:07:61:00:95:4d:82:cd:ac:f5:c9:16:96:
21:3c:c2:3d:3e:39:fc:f5:8c:be:d4:59:d6:6d:76:
0e:13:89:b6:c3:fd:22:0f:03:88:72:1f:c7:b2:ff:
21:59:dc:10:e8:f3:32:11:0a:92:9d:60:f1:ac:54:
0f:6b:4c:08:55:22:56:95:74:8d:35:39:8b:ac:cd:
30:27:3b:96:af:4c:7f:58:c2:69:ae:e2:de:34:a4:
d5:de:31:1e:89:05:f5:ff:a0:28:43:57:89:8b:b6:
cf:d1:30:e7:61:2d:78:48:75:5e:92:fb:3a:d2:de:
83:fd:4c:50:d6:30:0f:9a:87:ae:1b:5f:83:10:ac:
fe:f5:27:84:36:0b:39:8b:96:02:45:2b:99:9d:3a:
ef:cb:6b:2f:04:c2:a8:fb:a8:0d:88:d7:4e:7b:1a:
eb:71:99:81:65:e3:27:47:19:cc:3c:8a:f2:01:d0:
71:cd:d8:f2:30:57:50:df:b2:bf:73:f6:46:54:f1:
fd:c8:3b:3a:1a:a6:61:d8:8b:e2:5f:10:ac:76:9d:
f2:d9:7b:9b:b3:2e:cd:a2:bd:44:8d:c9:4c:70:87:
ff:92:86:84:d0:d2:10:58:1b:8b:f6:46:ad:b1:5f:
62:34:95:fe:b2:66:b9:fd:5c:64:37:a1:1d:07:dc:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:08:85:E6:D0:B8:25:31:38:58:42:47:66:07:32:DB:EB:E6:F4:5F
X509v3 Authority Key Identifier:
keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:fc:03:98:4c:d2:0a:15:3a:96:45:cc:62:e7:65:0c:2d:
6f:68:6c:b1:c7:d3:3e:22:ac:77:6e:c6:ac:9a:34:aa:de:82:
cb:99:ce:9b:35:f3:f0:97:bf:c0:c3:5b:8f:5b:b4:29:1c:3a:
82:98:80:d0:3d:f2:89:b5:10:b6:ad:12:40:86:3b:f3:55:89:
2d:7d:d0:5a:e7:4a:8e:f6:fa:24:1b:49:cb:96:07:7b:4f:91:
5a:7e:84:da:5d:27:db:e4:13:87:a5:cd:c5:d7:2d:27:c9:32:
75:be:b2:99:bd:35:1d:a3:0a:ae:86:f1:d9:25:05:dd:27:80:
af:17:1b:88:fd:db:d1:5c:77:5e:3c:21:f2:e9:0d:47:54:b9:
28:31:74:55:55:63:c4:65:da:0f:a1:fa:a7:21:10:d6:7b:30:
52:21:94:72:c0:34:73:8c:56:dc:64:81:41:30:6c:2c:8d:f2:
f3:b8:09:c5:dd:b5:25:bf:24:54:fb:b6:e0:71:b8:0b:62:71:
95:39:25:96:2d:1f:04:a3:1c:b0:1f:e9:0a:78:98:86:f7:5c:
4f:a5:78:f0:69:00:df:08:cd:6f:1b:90:80:d1:85:a2:58:c8:
38:c0:3c:85:bf:22:d8:76:30:ba:5c:39:54:dc:76:2c:72:bd:
ad:3e:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:43:32 2026 by rpki-client