
$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json)
Hash identifier: OVmdmJNG+SxQosQAnY0TF57KB5EWL1Hm009BJ7MzSCY=
Subject key identifier: DA:4A:E9:6B:C9:C9:09:38:20:C9:6D:E6:37:B4:33:B0:90:52:FF:2B
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial: 75F7016E3080F12DF25CC046A8961E9DE562963C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
Manifest number: 03C2
Signing time: Thu 26 Mar 2026 16:42:49 +0000
Manifest this update: Thu 26 Mar 2026 16:37:49 +0000
Manifest next update: Fri 27 Mar 2026 20:14:49 +0000
Files and hashes: 1: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: 0hox1voXySfco3CsGmPSiH5uB2VxgVawZSpdtlHkDbo=)
2: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: Y4ZOYJJ1biMgslS1IzAz8sTCAjI/fd+fuo6g1GIDcE8=)
3: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: BXqLPyDzzCYhGVqlktrFoIOUQfeMGR4u3sXs6+l2szM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 20:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f7:01:6e:30:80:f1:2d:f2:5c:c0:46:a8:96:1e:9d:e5:62:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Validity
Not Before: Mar 26 16:37:49 2026 GMT
Not After : Mar 27 20:14:49 2026 GMT
Subject: CN=DA4AE96BC9C9093820C96DE637B433B09052FF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:67:86:fc:31:96:14:6a:15:2a:59:33:37:
9d:7b:c6:de:b5:1e:ce:72:16:f4:a2:0d:eb:09:00:
db:09:6d:96:43:d6:81:02:7d:61:c4:09:15:2d:40:
40:7d:04:7d:23:18:d1:0f:8e:6d:b8:7d:f1:e9:a1:
75:6d:78:1a:10:78:14:4b:85:09:24:6d:24:ab:83:
b5:23:f7:47:5a:9f:a4:48:fd:e7:17:60:c9:97:5f:
b9:91:29:81:57:03:f6:06:76:48:78:b8:c4:54:12:
28:6c:74:f2:87:23:24:b8:0d:71:e8:66:00:63:d8:
e8:aa:0c:ec:02:e3:f2:d8:f4:08:18:79:d6:dd:ee:
59:0d:ea:d7:81:fc:d1:43:f1:af:a3:76:fb:7e:56:
2e:e0:9b:67:b3:72:28:3e:5c:0f:28:d6:8b:1b:25:
ee:2f:d5:6b:9a:0e:89:9e:64:11:d1:d0:9c:bc:89:
71:a3:1d:c5:a5:0f:a6:44:6f:35:32:17:bb:bb:41:
91:0d:75:65:87:22:a3:b3:2c:85:81:2a:37:15:2b:
fe:db:a8:28:7b:7a:89:05:89:c3:39:b2:1b:1b:9a:
c6:5b:79:01:5b:19:c0:90:e3:bf:9a:38:c4:35:72:
5d:c7:94:d4:49:e6:02:46:11:ff:31:49:35:40:e6:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:E9:6B:C9:C9:09:38:20:C9:6D:E6:37:B4:33:B0:90:52:FF:2B
X509v3 Authority Key Identifier:
keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f0:88:bf:ea:8c:8d:bd:9b:b3:32:d0:91:ea:6f:19:bd:0d:
05:a4:14:b3:17:9c:ee:b7:d6:76:42:fb:06:bc:27:ed:d9:71:
29:31:27:90:2b:02:e7:e1:d6:18:8c:2c:6d:c2:20:7f:a4:1e:
4a:77:86:44:c4:b4:1b:99:bf:c5:b9:12:cf:48:20:0f:e6:2a:
1d:be:c6:40:67:45:2a:fe:22:12:0d:71:55:b6:48:70:03:69:
24:f4:68:50:47:1d:ba:25:28:7e:b3:04:ff:0e:61:0b:1f:0c:
43:1f:81:40:6d:e7:f8:21:6b:24:96:d4:09:c5:56:9d:37:b2:
b5:a0:d0:b4:82:d4:39:05:ee:28:fb:66:34:b6:0e:da:85:0a:
24:28:f2:3c:be:05:07:d5:2f:28:9c:95:b2:11:90:55:37:41:
ab:c1:bf:b6:f9:b0:d3:01:9e:e4:88:fa:90:38:4a:86:53:8e:
3e:b9:d5:00:36:71:ef:56:00:6a:13:d2:f6:31:c6:70:12:1a:
5b:22:8b:8c:6a:fb:05:79:42:54:75:0e:51:c7:90:db:c1:a4:
6d:5a:4f:bd:6c:1b:1f:47:47:6f:0b:99:55:9a:fa:f6:d0:92:
4f:30:ba:c2:9a:1f:55:92:61:ab:fc:32:5c:1c:23:cf:04:58:
62:dd:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:28:13 2026 by rpki-client