
$ rpki-client -vvvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft
File: 040A99E102503B9DD68DAF74A5564601C25CBFF1.mft (raw, json)
Hash identifier: Tg/TFpE3SZWZIdYNmNi3ykbRr3gEBKJBNf5VLziFR+E=
Subject key identifier: 6D:2A:24:C1:86:7B:BD:D6:AA:0F:BE:A3:55:53:D0:AD:79:55:D3:5D
Authority key identifier: 04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1
Certificate issuer: /CN=040A99E102503B9DD68DAF74A5564601C25CBFF1
Certificate serial: 4115D33D2BF93DA2B238D0160BABD2897827FFF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft
Manifest number: FC
Signing time: Wed 26 Aug 2026 04:12:57 +0000
Manifest this update: Wed 26 Aug 2026 04:07:57 +0000
Manifest next update: Thu 27 Aug 2026 06:24:57 +0000
Files and hashes: 1: 040A99E102503B9DD68DAF74A5564601C25CBFF1.crl (hash: 3Mxo06WrHOOWTb/e7z/CGgIPCXVMX6Dn8z5CaiJ2dY0=)
2: 3139312e33362e3136302e302f32312d3234203d3e203238313235.roa (hash: VA8pzE5OVgeOHI4/E96ByKMfrJmZfBV0/FG8eshvKiU=)
3: 323830343a313438383a3a2f33322d3438203d3e203238313235.roa (hash: iheHSONNJOEjggcGLOV6jXrer/mL/4x7e0+XiFwoJmM=)
4: 3138372e31392e31362e302f32302d3234203d3e203238313235.roa (hash: /ot4KGpH/tqmwpJyx6ouOrTL20ouW0YqcaUdIRGnRl8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl
rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 27 Aug 2026 06:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:15:d3:3d:2b:f9:3d:a2:b2:38:d0:16:0b:ab:d2:89:78:27:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040A99E102503B9DD68DAF74A5564601C25CBFF1
Validity
Not Before: Aug 26 04:07:57 2026 GMT
Not After : Aug 27 06:24:57 2026 GMT
Subject: CN=6D2A24C1867BBDD6AA0FBEA35553D0AD7955D35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:27:aa:ba:16:fc:da:23:aa:bb:73:f0:7f:
97:e9:dd:88:cb:c5:d6:81:46:9b:d5:cf:3b:9e:73:
71:e7:9c:49:98:b7:b4:81:4a:c8:ef:a8:58:13:79:
ef:86:ef:25:5e:a8:92:d8:e4:f3:10:4d:f2:3c:b3:
fd:15:20:37:90:09:6e:cb:72:38:3b:d3:ea:0c:1b:
0e:01:41:61:90:c4:67:73:b7:c6:61:c4:2d:54:fa:
3e:14:42:8a:5d:19:af:28:4d:98:37:9e:a0:e6:8a:
57:c2:14:67:1c:8d:ec:af:4e:ae:5a:2c:fc:9e:2f:
65:a6:62:91:25:20:77:37:1b:c5:77:dc:10:03:af:
53:a2:58:7e:7b:0f:f3:b8:c6:3b:66:d4:a2:95:e6:
3d:1b:11:c7:fa:2c:79:bf:26:fe:23:0b:b0:0f:01:
88:70:1b:d9:d0:c6:04:8a:a0:59:97:34:39:df:09:
37:28:b8:88:b6:94:9c:ef:48:dc:69:07:0e:07:48:
3c:0f:b6:b6:54:a4:08:d9:04:a8:51:0b:71:0a:1d:
79:e8:f0:17:cf:c5:78:14:9b:9a:4f:5e:9e:f1:c2:
80:bb:dc:45:d4:3c:eb:1a:ad:e6:0a:e1:41:5d:df:
52:09:cb:bb:33:cf:c7:e9:01:18:e4:d1:62:00:bb:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2A:24:C1:86:7B:BD:D6:AA:0F:BE:A3:55:53:D0:AD:79:55:D3:5D
X509v3 Authority Key Identifier:
keyid:04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4a:80:5a:1c:24:92:86:6e:2b:de:96:51:2e:c7:39:f7:b3:
f1:d6:da:ee:cf:1d:07:63:d5:97:25:2d:5b:19:ac:5e:a2:35:
62:ba:16:65:ad:db:00:97:0c:aa:dc:32:8b:00:06:f9:ef:a9:
75:ae:15:53:df:c2:4c:82:c8:1d:ab:84:c4:19:47:6e:96:b4:
d9:35:21:da:69:db:20:e0:37:a0:10:f3:10:63:0b:39:e1:48:
5e:d4:1f:3e:a9:4a:d3:0f:c5:05:cf:c0:9e:46:98:96:4f:10:
1d:00:a2:b2:03:5c:72:15:0f:8a:8a:11:d3:a2:05:ce:10:b3:
a3:aa:dd:1a:54:8f:6e:21:0c:1d:7d:a5:ac:71:08:41:f3:68:
1a:bd:b7:9b:47:f1:b3:2e:c4:91:e0:51:3c:89:6c:d6:78:e2:
21:95:a2:d7:7d:ff:32:70:06:1a:2f:6c:56:9a:80:f4:60:b7:
2a:c3:61:18:97:85:c5:dc:ae:8b:8d:6d:89:84:8f:ff:49:ea:
04:db:43:00:94:bb:60:24:41:50:09:e3:69:1a:4d:2a:18:21:
06:0f:36:e1:4a:92:12:6d:68:10:f4:71:6a:5f:3d:53:f8:a3:
4f:f7:7b:0b:18:7e:12:7b:8d:01:36:49:f5:0a:9e:59:44:ed:
88:90:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:46:47 2026 by rpki-client