
$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier: cdx5QU8IXVIqWtZcZh7NNCfrz1cWpC3pbz+RH28J7hA=
Subject key identifier: 88:A0:DD:F2:D1:BE:29:2D:93:AC:04:34:5E:9F:2D:B9:19:50:53:EA
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial: 150C82B9FC275C610446F966961D762E75E8D465
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number: 02AA
Signing time: Wed 13 May 2026 04:47:44 +0000
Manifest this update: Wed 13 May 2026 04:42:44 +0000
Manifest next update: Thu 14 May 2026 07:14:44 +0000
Files and hashes: 1: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=)
2: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: e5CJPd1AYal/OE0boPlgac8MlJVuVeAHFkT9BIBrXkU=)
3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 07:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0c:82:b9:fc:27:5c:61:04:46:f9:66:96:1d:76:2e:75:e8:d4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Validity
Not Before: May 13 04:42:44 2026 GMT
Not After : May 14 07:14:44 2026 GMT
Subject: CN=88A0DDF2D1BE292D93AC04345E9F2DB9195053EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:85:e2:11:19:85:1d:93:6d:3d:89:57:31:
2b:0b:e5:72:9c:d6:bb:87:1f:df:ab:33:e0:25:4d:
89:3b:ca:db:d7:40:f6:c9:00:e4:20:19:16:0c:3d:
d8:6b:2c:5e:d9:db:91:11:6e:3d:98:19:d2:0c:80:
8e:51:22:94:14:52:93:d4:e6:bc:2d:e1:28:a0:bd:
9a:d2:15:78:ca:d9:c0:ca:ef:67:bf:f0:31:bd:f8:
ed:49:1d:e6:02:a2:d6:7f:b4:d3:82:d6:04:e5:5d:
75:9b:5d:9c:c1:11:d9:30:4e:43:b6:2a:33:5b:81:
27:4e:60:70:51:3b:58:32:35:1e:bd:2c:80:2b:cb:
e9:92:19:c5:d1:0c:e6:30:ad:1d:b1:42:1f:ae:a7:
8e:00:5c:b0:ee:48:74:87:cf:2e:74:5f:e1:01:7f:
ff:ad:ff:a1:33:49:dd:9d:ee:b3:1f:69:11:6f:77:
0b:11:11:a4:af:a7:38:a1:be:43:c2:ea:7a:00:b3:
9d:47:7d:92:4d:f5:cd:c6:ad:cd:7d:5a:15:55:c0:
40:da:57:d4:ea:db:40:84:a2:9c:09:6f:ea:c3:33:
ca:06:03:95:2e:fb:4d:a8:01:45:99:60:38:d0:2d:
b2:18:66:49:c3:37:de:c0:9c:07:0b:50:42:fe:4d:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:DD:F2:D1:BE:29:2D:93:AC:04:34:5E:9F:2D:B9:19:50:53:EA
X509v3 Authority Key Identifier:
keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:22:46:29:36:e8:19:e8:0c:8f:63:4c:7f:f2:66:f7:d9:9b:
55:c5:a9:93:89:5b:a2:94:b4:f0:ae:19:44:f3:4c:24:5b:1a:
a4:30:2f:0f:f9:f1:17:37:ca:ec:fe:ea:dd:7d:2b:33:af:af:
f7:7a:29:09:df:ab:e6:11:08:bd:08:e1:a4:49:47:1c:5f:21:
6b:6a:8d:74:f2:56:1f:9c:0e:2f:44:eb:ae:39:c5:17:85:1b:
5a:9b:96:a5:17:72:23:ec:f1:4c:f9:37:54:17:e5:87:ab:d4:
55:d5:41:e9:f1:82:57:23:6b:27:75:3c:8b:50:53:93:7f:ae:
98:db:ad:4f:aa:26:da:9c:b8:89:72:f8:12:bc:75:5f:56:3a:
84:6a:f3:ab:7a:59:f5:9b:89:62:3e:ad:d1:35:52:70:bc:18:
07:b6:8a:c6:ce:b7:35:0a:a5:06:c1:8a:8e:2d:ef:fd:4b:f2:
86:04:2b:4b:fb:cb:ad:8f:fd:71:23:5b:0a:f5:dd:85:6a:66:
bf:32:f3:5d:61:ce:37:07:e0:80:16:d6:b5:6c:a8:a2:b3:73:
38:9a:a1:d8:2c:48:64:4a:cf:10:94:6d:59:40:01:b0:b2:8c:
fa:9b:55:b7:41:98:06:a8:f0:f4:2f:3b:60:1f:83:cd:c1:62:
9d:0c:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:17:20 2026 by rpki-client