
$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
File: BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json)
Hash identifier: SjM4gbmwJuf5U3G8k04RCA5nBM36+5FBILx4eRRs0VI=
Subject key identifier: BC:4C:59:92:0F:CC:7C:84:4B:4D:7A:56:4B:88:31:D1:7C:C2:91:CE
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial: 021D802953098826D59257D1BA7E4532B9B2FB6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
Manifest number: 040A
Signing time: Wed 13 May 2026 04:38:29 +0000
Manifest this update: Wed 13 May 2026 04:33:29 +0000
Manifest next update: Thu 14 May 2026 04:56:29 +0000
Files and hashes: 1: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: BRDX2bcHpAwtqDa7mj74P+hWC5po7P4vzhu+qudBurg=)
2: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: 86StC8af96q0LoTH78xk5Lf4M/lpA7z/Ahmi66glb+A=)
3: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: Rvo51TuPLd1M8Qn3gxgvH5b8+pcMostBoJ2Bw5X49aQ=)
4: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: EXKoERunxHBjD0wM17VenuhxYo/CI6MX+lv8XDiQ0Z0=)
5: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: Jvk4BhtkTqCaEGOfHpRXl47mcoGZIB2qsIvobQVyGEY=)
6: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: TxOIhbwzlN7I7q94EScK4FFwq4vxuPW0ymjAuYngXN8=)
7: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: O+yK7i5psZ1HhTc+vQ9NTtbznS2ibVEoFz3cZS/UrV0=)
8: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: QYuarhhb51IIJNcMd8PqyCgbNMJp1l2Brpl4eGszn1Q=)
9: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: KrbejnEAB1jYoyxgNuPx+4IjNgbAPuqfamW0X1CVqgY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 04:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1d:80:29:53:09:88:26:d5:92:57:d1:ba:7e:45:32:b9:b2:fb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Validity
Not Before: May 13 04:33:29 2026 GMT
Not After : May 14 04:56:29 2026 GMT
Subject: CN=BC4C59920FCC7C844B4D7A564B8831D17CC291CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:e1:64:61:83:0a:28:02:23:4b:ca:2e:07:
29:7b:0f:54:18:1f:d3:59:ce:aa:39:7a:4d:13:15:
43:46:fe:bc:17:69:1b:55:20:92:81:39:dc:e5:ef:
9a:3b:22:ea:f8:75:1f:6d:0f:39:f4:3d:17:5d:05:
ca:fe:21:94:6e:f8:c1:a8:51:12:b5:10:67:7c:71:
61:43:3e:fb:3e:ba:90:34:1b:50:bf:14:32:86:7c:
15:f7:d9:67:f5:d7:5e:83:71:56:1e:3e:f5:15:c5:
11:8a:2e:87:76:28:4c:ab:4b:f2:11:e8:b1:3d:35:
33:b7:32:d3:2d:93:c5:c0:15:12:fb:f6:1d:0f:ce:
08:ab:d3:cb:d8:2b:13:64:c3:8d:c7:46:0d:6a:1d:
21:57:58:ab:98:27:72:b6:86:8a:3d:8e:df:09:0d:
cd:a6:52:14:4a:e0:59:75:e4:9d:cb:22:de:1c:0a:
84:bb:8d:e3:24:f1:0f:cc:c7:8d:50:fa:9b:e0:32:
f5:02:14:84:42:85:1b:65:70:04:0c:0c:02:08:60:
85:0e:43:e3:a1:48:bb:0e:87:c2:1d:b4:76:ce:07:
70:b0:10:c8:84:fd:f3:20:ca:dc:69:bd:5d:8e:a6:
36:8f:12:fe:a8:ca:9a:25:27:91:4c:b0:25:22:c4:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4C:59:92:0F:CC:7C:84:4B:4D:7A:56:4B:88:31:D1:7C:C2:91:CE
X509v3 Authority Key Identifier:
keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a8:ea:1a:24:4b:2a:76:7a:98:ba:ff:b7:89:a0:d6:b3:ae:
69:35:f9:c1:ef:df:ba:c4:46:45:58:8e:fd:25:6b:72:85:a5:
ad:42:49:6c:d5:b1:3a:28:88:78:63:a9:fe:12:9c:dd:b2:c3:
ae:d8:c2:da:f8:2e:b6:f8:1c:8d:61:b4:83:41:5e:74:fb:56:
bb:96:37:2a:a5:06:28:2c:4a:74:0e:7f:63:95:97:78:01:be:
03:bb:f9:5a:61:ab:b9:23:c0:36:ae:52:0d:74:24:98:e4:c7:
25:7c:db:35:bc:92:37:e3:3c:9e:e2:48:f8:73:f4:3a:8d:c1:
e7:3b:e1:75:4e:5e:6b:62:36:f9:0e:b0:a9:75:05:b8:14:72:
d3:b5:ac:a0:59:e1:e3:78:4d:b9:c7:77:98:56:04:eb:86:8e:
1f:b0:8c:e7:7e:c7:3c:87:ac:00:f6:c1:07:b0:65:28:3a:cc:
01:5a:d7:83:93:83:de:8e:3b:07:eb:83:37:eb:79:24:5f:87:
2f:42:39:c1:fc:6c:fe:a8:a4:cb:56:32:0a:3c:cf:ae:95:34:
cc:06:f1:26:8c:d0:3d:f5:ab:47:0b:eb:6a:8d:65:9a:c3:c9:
3c:55:0c:1d:c1:5a:40:37:19:d5:57:3a:45:ac:1c:4d:35:d0:
cf:c5:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:08 2026 by rpki-client