
$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
File: 40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft (raw, json)
Hash identifier: Sc5D8QKAHwnlOi1UpMUz9UeHR//XEh76sCrgFwA4Xss=
Subject key identifier: B5:29:C4:30:1C:32:22:57:32:F3:F4:AE:A3:CE:55:D0:74:98:91:04
Authority key identifier: 40:A6:BC:75:89:FB:54:32:8C:A6:44:8F:98:F0:A6:75:5F:B5:99:3F
Certificate issuer: /CN=40A6BC7589FB54328CA6448F98F0A6755FB5993F
Certificate serial: 1D13ADC0CBA9302CE332A76B105F198BE750F69A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
Manifest number: 2F
Signing time: Wed 25 Mar 2026 09:18:04 +0000
Manifest this update: Wed 25 Mar 2026 09:13:04 +0000
Manifest next update: Thu 26 Mar 2026 11:57:04 +0000
Files and hashes: 1: 323830343a343230383a343030303a3a2f33342d3334203d3e20323637343733.roa (hash: Odxt0fqFuxAC3jLNTKS4jDxOIheS3es19XpD5dROduc=)
2: 3139322e3134312e3138342e302f32322d3332203d3e20323637343733.roa (hash: Plj2Nty5zsWVgJNC5SkN1O+1M8/v85KkIf9MOu9oI54=)
3: 323830343a343230383a3a2f33342d313238203d3e20323637343733.roa (hash: OdmkebpM3fBxhbZRYo7DTD76sc+hebKtxJlgX0B+By0=)
4: 40A6BC7589FB54328CA6448F98F0A6755FB5993F.crl (hash: MdM5QATvn/7iq18DCjaVzBWMO5fg9xdfVGbWsgca0w0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.crl
rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 11:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:13:ad:c0:cb:a9:30:2c:e3:32:a7:6b:10:5f:19:8b:e7:50:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A6BC7589FB54328CA6448F98F0A6755FB5993F
Validity
Not Before: Mar 25 09:13:04 2026 GMT
Not After : Mar 26 11:57:04 2026 GMT
Subject: CN=B529C4301C32225732F3F4AEA3CE55D074989104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:01:0a:5c:bd:c0:50:01:06:3c:7f:dd:00:
15:bc:2a:1f:46:a3:9c:f1:7c:58:86:68:7c:9b:5e:
6c:4e:69:66:92:82:c9:d7:80:83:d3:58:6a:d7:79:
1a:4f:21:aa:ee:f5:8f:b8:e3:2e:f9:f6:a5:8c:ae:
b5:bb:ae:0e:43:19:17:13:68:c9:ac:b6:b7:f4:73:
02:b8:6c:56:2d:d6:e7:2b:20:7f:77:91:68:52:0e:
4e:fc:30:b0:77:0a:20:36:ce:f1:88:1a:35:cb:8b:
e7:fd:a2:a4:e1:e7:2f:66:a6:5d:ae:ed:28:7b:e7:
f7:2c:96:59:56:50:66:d5:d4:01:0d:fd:cb:3c:56:
89:1e:89:cd:ca:1d:f6:4c:c2:cb:d7:46:a2:17:63:
1d:a1:5e:3b:0a:c5:44:66:d6:fa:0c:a9:3d:32:aa:
72:65:fe:e1:70:93:40:e9:d2:fc:d8:fd:1e:51:9f:
26:5e:12:c7:d3:91:10:c9:42:a1:35:66:01:35:77:
96:8e:16:dc:d9:a4:00:e3:51:bb:ac:92:b0:ea:5c:
09:b1:b4:32:3f:84:40:72:12:da:fd:f7:9d:59:d2:
08:7c:6d:40:35:5a:84:7b:e5:2a:5e:a2:f8:8e:8e:
cb:2e:b7:bb:09:4d:88:9b:45:a6:c5:3f:ac:42:21:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:29:C4:30:1C:32:22:57:32:F3:F4:AE:A3:CE:55:D0:74:98:91:04
X509v3 Authority Key Identifier:
keyid:40:A6:BC:75:89:FB:54:32:8C:A6:44:8F:98:F0:A6:75:5F:B5:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A6BC7589FB54328CA6448F98F0A6755FB5993F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/40A6BC7589FB54328CA6448F98F0A6755FB5993F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b8:4c:73:4f:de:e7:65:0a:6f:c1:44:3e:91:df:e6:20:6c:
39:2e:a8:b7:f2:48:cb:3f:a0:e8:26:ba:7a:37:24:96:f3:9e:
c9:67:87:0c:b7:22:95:36:4b:f1:fb:82:7d:51:4b:e3:06:ff:
ad:4a:6b:ee:35:68:2d:62:5a:d1:e7:e7:99:7e:06:a7:4f:58:
eb:15:87:41:d0:f9:cd:6e:43:1b:d7:13:cf:c2:87:0f:77:2f:
fc:ad:94:5b:ce:de:cb:66:59:2a:96:f8:47:d6:c6:5a:2e:fa:
2d:be:60:2a:f1:c8:38:ae:ea:87:18:88:78:f4:b1:ef:41:3c:
7d:89:f5:4d:1a:b7:df:b8:97:39:90:2d:a8:1c:ee:ee:70:be:
cd:f7:5b:9f:19:78:53:4d:97:20:37:be:a8:82:72:52:32:a4:
10:fe:f0:f9:ae:ce:90:6f:a8:78:15:cd:84:99:e8:79:41:10:
fc:ed:f3:71:f2:5c:76:75:d6:77:23:4b:6c:48:f2:89:43:b5:
d8:8c:56:53:2d:b3:d6:f2:56:9f:f8:10:cd:68:87:88:ff:71:
9a:07:d7:dd:88:d1:3b:5e:76:42:e1:8b:23:8c:52:d3:9d:ca:
d7:44:38:11:52:a2:7d:f4:08:f5:69:0b:88:3c:84:d3:29:b3:
9e:aa:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:10 2026 by rpki-client