
$ rpki-client -vvf rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
File: 832871127BCACF2B8301B7D52E8D2FBE066B8056.mft (raw, json)
Hash identifier: 5wCQ8WhBqrQ78Cn3qwlfGA4JMYiaUm1OKGjLpq9OP/E=
Subject key identifier: 87:06:A9:4A:E0:99:75:28:17:35:D3:1F:77:97:94:67:1D:E6:CE:7E
Authority key identifier: 83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56
Certificate issuer: /CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
Certificate serial: 2B834758F2452B850CD34691F8EDDD4E9316E104
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
Manifest number: 02EF
Signing time: Thu 26 Mar 2026 12:54:05 +0000
Manifest this update: Thu 26 Mar 2026 12:49:05 +0000
Manifest next update: Fri 27 Mar 2026 14:12:05 +0000
Files and hashes: 1: 323830343a383566343a3a2f33322d313238203d3e20323732363130.roa (hash: 5MD0hhTl+FiLV0nD1XfSSFpuLiOjyxCZEof41eyrC1c=)
2: 832871127BCACF2B8301B7D52E8D2FBE066B8056.crl (hash: 74vzSkCwgbemgC2a7yDZSNY9TlCSklEGgogwzXGXoDY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl
rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:83:47:58:f2:45:2b:85:0c:d3:46:91:f8:ed:dd:4e:93:16:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832871127BCACF2B8301B7D52E8D2FBE066B8056
Validity
Not Before: Mar 26 12:49:05 2026 GMT
Not After : Mar 27 14:12:05 2026 GMT
Subject: CN=8706A94AE09975281735D31F779794671DE6CE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:8c:86:58:f6:39:4d:b6:9a:1c:ce:09:7f:
ab:70:72:97:f7:45:31:b5:eb:23:df:51:88:de:00:
4f:f3:5b:0e:ad:4b:f1:55:f3:1c:83:96:4e:8c:89:
35:47:b3:46:bf:09:54:28:dc:46:5f:47:c6:5b:7f:
93:ec:79:42:d0:11:b3:2a:e5:f7:72:72:46:0e:44:
29:65:29:6a:6a:a1:08:b3:85:69:95:fe:6c:32:c7:
e9:0f:61:60:e1:0e:bb:dd:da:fb:43:01:71:f6:c8:
b4:73:80:31:7b:ad:fa:a1:df:57:92:6a:26:f7:12:
a7:6b:0f:56:cc:1c:59:3a:38:1e:1d:70:7b:85:d1:
dc:98:03:f8:7e:50:04:c1:9c:4d:97:5d:e5:50:1b:
51:30:51:7f:f3:4b:8f:5b:f2:40:32:40:4a:84:b8:
71:98:e1:1c:4d:78:5a:97:2e:ad:bb:88:66:99:22:
7e:43:c9:73:d2:30:6e:da:5b:6d:78:be:fc:b4:87:
11:7e:f0:ca:5b:18:a3:4b:cd:91:39:0a:a2:6d:e2:
4b:16:85:77:8a:7e:56:2e:d7:ac:14:00:d0:ca:1f:
05:94:06:1c:4f:a0:1a:e4:8e:78:ba:3a:4f:d9:16:
3c:1e:89:df:a5:66:63:05:69:61:4d:86:33:6b:08:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:A9:4A:E0:99:75:28:17:35:D3:1F:77:97:94:67:1D:E6:CE:7E
X509v3 Authority Key Identifier:
keyid:83:28:71:12:7B:CA:CF:2B:83:01:B7:D5:2E:8D:2F:BE:06:6B:80:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832871127BCACF2B8301B7D52E8D2FBE066B8056.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2F9ttnxN7TVUjRYJM3buk4B1SuLVmPhUoZatkjX6Q8hv/0/832871127BCACF2B8301B7D52E8D2FBE066B8056.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ff:74:f5:34:97:74:4e:30:8b:e4:be:b7:8f:2a:d7:8d:02:
0f:4d:12:ca:56:d9:e6:3a:21:38:58:9e:6a:6f:49:9e:71:e0:
ac:51:74:85:81:0a:ca:9b:d2:30:86:32:19:37:4e:82:e7:a6:
7c:05:5c:0f:9e:15:02:a0:43:bc:16:2a:e4:b8:3b:99:90:e7:
60:43:bb:26:3a:ab:c9:91:d0:cd:62:a5:2c:0d:3e:74:8d:b2:
28:d0:7c:d0:fa:06:da:c0:a8:97:f3:33:3b:a2:1e:4c:55:c1:
d9:d8:79:24:0c:6b:52:43:85:a6:f0:55:9e:28:e0:a4:06:de:
f0:71:88:05:1b:f1:97:9a:16:75:48:87:a9:9b:ab:29:65:95:
a9:78:24:df:45:8d:12:1e:8c:bc:26:30:fd:2d:18:22:8c:ec:
5c:76:77:2a:9b:f6:6d:0d:e4:4e:7b:5d:6b:f5:62:b6:7d:fe:
0e:0d:83:11:c0:b2:94:79:7d:74:ea:aa:5a:de:90:3c:c3:3a:
ad:e9:64:a6:e7:7d:ce:3c:59:07:48:68:53:91:84:27:2d:98:
c8:5b:da:9f:34:3c:89:87:ad:18:4c:ca:34:29:94:c3:43:f0:
f5:21:be:b6:34:ea:5b:38:0c:01:73:51:70:34:d7:f8:8d:bc:
70:90:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:00 2026 by rpki-client