
$ rpki-client -vvvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft
File: 998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft (raw, json)
Hash identifier: mXFlwEsdEvvufY9Dqd8+EE9+1t43ZCjV3gJAZ1IwfF4=
Subject key identifier: A5:A8:EF:F0:5B:53:E6:9F:74:01:18:09:E7:7C:47:3D:E6:81:B4:A3
Authority key identifier: 99:8C:B9:C0:58:76:E4:AB:1B:56:3A:40:5A:BA:C7:99:C9:9C:BD:48
Certificate issuer: /CN=998CB9C05876E4AB1B563A405ABAC799C99CBD48
Certificate serial: 7DE80468D428A15031EBE3F10C84CB597374EF51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998CB9C05876E4AB1B563A405ABAC799C99CBD48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft
Manifest number: 35
Signing time: Thu 15 Oct 2026 11:23:47 +0000
Manifest this update: Thu 15 Oct 2026 11:18:47 +0000
Manifest next update: Fri 16 Oct 2026 12:42:47 +0000
Files and hashes: 1: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: 91+SoAjbl3HXMZUiRz05iupGzbnGJbxfGkje75maFmU=)
2: 998CB9C05876E4AB1B563A405ABAC799C99CBD48.crl (hash: pADCKFP8Frw83QkptYBDPiM+PRmB+HMFCydT33YlUMk=)
3: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: bZ55Jnl3ZA1rxkSNTYCeZ2GogCgElj5ai+M7XMMkdsw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.crl
rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998CB9C05876E4AB1B563A405ABAC799C99CBD48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 16 Oct 2026 12:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e8:04:68:d4:28:a1:50:31:eb:e3:f1:0c:84:cb:59:73:74:ef:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998CB9C05876E4AB1B563A405ABAC799C99CBD48
Validity
Not Before: Oct 15 11:18:47 2026 GMT
Not After : Oct 16 12:42:47 2026 GMT
Subject: CN=A5A8EFF05B53E69F74011809E77C473DE681B4A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:4e:e5:79:3f:32:e0:2b:4b:6c:8b:81:b1:
e9:df:1a:7d:64:35:ff:ae:c2:09:63:9a:4f:be:5a:
05:76:43:03:76:2e:ff:ce:55:84:b8:18:e6:14:af:
92:c4:31:6b:c3:8a:b0:c7:de:f0:96:9f:01:8a:d4:
fd:a6:34:a5:b9:8b:aa:ca:03:70:49:5d:96:c3:94:
68:35:ee:99:3e:6a:9c:d9:24:83:60:df:d5:27:a6:
1b:2e:1e:04:60:2c:43:71:42:3b:a6:d3:dd:81:b4:
26:17:b6:ad:f0:20:a2:38:fe:ef:d6:00:5e:97:7e:
24:5b:64:12:0e:53:2d:04:e0:6e:30:dd:fc:db:ee:
17:9a:72:1a:6d:0e:e9:62:04:0e:1f:73:4c:46:74:
ea:49:51:5c:37:90:20:7b:c0:ab:ba:a4:e3:b0:fa:
ce:fc:92:e4:19:d3:f4:4d:9f:b8:07:92:c3:1b:7a:
a1:89:c3:f6:3e:f4:83:76:b2:61:34:7f:61:89:09:
b8:ce:3e:2b:c1:8c:03:ea:83:4e:dc:f1:dd:90:01:
18:c6:d8:a4:6e:ef:77:58:6f:30:36:8c:ca:39:a0:
9e:b6:ba:3c:78:3f:ae:2c:71:d1:ac:fb:3a:52:3e:
c1:d4:29:f1:34:0b:8e:29:1a:a4:4e:a0:8d:9a:d7:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A8:EF:F0:5B:53:E6:9F:74:01:18:09:E7:7C:47:3D:E6:81:B4:A3
X509v3 Authority Key Identifier:
keyid:99:8C:B9:C0:58:76:E4:AB:1B:56:3A:40:5A:BA:C7:99:C9:9C:BD:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998CB9C05876E4AB1B563A405ABAC799C99CBD48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f8:a3:26:26:2d:60:9f:77:61:58:94:d2:28:d7:10:49:8a:
21:c5:b2:87:dc:ae:5b:d2:59:1d:7c:c6:ac:5b:2b:10:90:4c:
69:9b:69:7a:f7:8c:06:4e:70:d9:15:9c:27:2c:26:a6:ba:d2:
ca:4a:85:e4:ed:82:6c:f3:55:2e:a3:e2:ca:00:f7:e8:92:56:
39:0d:65:12:ac:fb:5e:51:b9:72:f9:25:e3:5c:49:51:16:d9:
b6:5e:b5:3a:03:60:f1:a5:ea:3a:7a:ec:b7:85:c9:ce:9c:63:
41:0f:75:19:58:16:54:ac:96:70:ee:17:b3:41:82:f1:c6:de:
77:a4:6e:95:93:47:c1:40:6d:66:5d:fb:7d:a0:38:3a:8d:b5:
c8:59:46:cb:e1:58:27:55:72:c1:f3:ea:a6:e4:67:07:72:78:
1e:bd:0a:85:48:6a:64:fe:a2:23:4e:e4:87:be:5c:bd:57:b5:
ae:8d:13:79:c9:c5:50:82:bb:12:7d:c4:25:12:ab:f6:60:c8:
02:d2:94:3f:eb:f8:07:20:f6:c2:65:32:f3:c8:9f:3a:73:aa:
2c:88:68:e5:df:4e:c2:15:9c:3e:96:cd:53:94:77:b8:b9:4e:
43:b1:d3:bf:5e:e9:35:31:88:55:78:8f:b1:ec:ab:28:eb:96:
eb:52:ac:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfegEaNQooVAx6+PxDITLWXN071EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk4Q0I5QzA1ODc2RTRBQjFCNTYzQTQwNUFCQUM3OTlD
OTlDQkQ0ODAeFw0yNjEwMTUxMTE4NDdaFw0yNjEwMTYxMjQyNDdaMDMxMTAvBgNV
BAMTKEE1QThFRkYwNUI1M0U2OUY3NDAxMTgwOUU3N0M0NzNERTY4MUI0QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcE7leT8y4CtLbIuBsenfGn1k
Nf+uwgljmk++WgV2QwN2Lv/OVYS4GOYUr5LEMWvDirDH3vCWnwGK1P2mNKW5i6rK
A3BJXZbDlGg17pk+apzZJINg39UnphsuHgRgLENxQjum092BtCYXtq3wIKI4/u/W
AF6XfiRbZBIOUy0E4G4w3fzb7heachptDuliBA4fc0xGdOpJUVw3kCB7wKu6pOOw
+s78kuQZ0/RNn7gHksMbeqGJw/Y+9IN2smE0f2GJCbjOPivBjAPqg07c8d2QARjG
2KRu73dYbzA2jMo5oJ62ujx4P64scdGs+zpSPsHUKfE0C44pGqROoI2a1/dRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpajv8FtT5p90ARgJ53xHPeaBtKMwHwYDVR0j
BBgwFoAUmYy5wFh25KsbVjpAWrrHmcmcvUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RL
cjQvMC85OThDQjlDMDU4NzZFNEFCMUI1NjNBNDA1QUJBQzc5OUM5OUNCRDQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5OENCOUMwNTg3NkU0QUIx
QjU2M0E0MDVBQkFDNzk5Qzk5Q0JENDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RLcjQvMC85
OThDQjlDMDU4NzZFNEFCMUI1NjNBNDA1QUJBQzc5OUM5OUNCRDQ4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYfijJiYtYJ93YViU0ijXEEmKIcWyh9yuW9JZHXzGrFsrEJBMaZtpeveMBk5w
2RWcJywmprrSykqF5O2CbPNVLqPiygD36JJWOQ1lEqz7XlG5cvkl41xJURbZtl61
OgNg8aXqOnrst4XJzpxjQQ91GVgWVKyWcO4Xs0GC8cbed6RulZNHwUBtZl37faA4
Oo21yFlGy+FYJ1VywfPqpuRnB3J4Hr0KhUhqZP6iI07kh75cvVe1ro0TecnFUIK7
En3EJRKr9mDIAtKUP+v4ByD2wmUy88ifOnOqLIho5d9OwhWcPpbNU5R3uLlOQ7HT
v17pNTGIVXiPseyrKOuW61KsOw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:19:07 2026 by rpki-client