
$ rpki-client -vvvf rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
File: 1B2F08C5164B78E28A333599DD590FE906377257.mft (raw, json)
Hash identifier: 3qy9Oqq+w0t7cexjU9rkQ/jsWjrqQUpkpR4PKj9lui8=
Subject key identifier: A2:ED:34:87:E5:20:8C:1E:6E:90:E6:F6:04:AB:34:E7:95:40:13:37
Authority key identifier: 1B:2F:08:C5:16:4B:78:E2:8A:33:35:99:DD:59:0F:E9:06:37:72:57
Certificate issuer: /CN=1B2F08C5164B78E28A333599DD590FE906377257
Certificate serial: 7A069FB3A33AD8862FA71FC01758B71A640359CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2F08C5164B78E28A333599DD590FE906377257.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
Manifest number: D2
Signing time: Fri 30 Oct 2026 19:05:18 +0000
Manifest this update: Fri 30 Oct 2026 19:00:18 +0000
Manifest next update: Sat 31 Oct 2026 21:30:18 +0000
Files and hashes: 1: 323830343a373430633a3a2f33322d313238203d3e20323730393535.roa (hash: UniNxawqUmnlwVqeSjYTKVs0idJryYD1eojUda+ySB0=)
2: 3134332e3235352e3138302e302f32332d3332203d3e20323730393535.roa (hash: xdwJlSltt9F6PrxGetsTpO8k1UzTR0wlKWOOrpMxnbA=)
3: 3134332e3235352e3138322e302f32342d3234203d3e20323730393535.roa (hash: UAP0i5OkVdhDypsr4nJWBWojhiUC/vVnEWF1UikEor8=)
4: 1B2F08C5164B78E28A333599DD590FE906377257.crl (hash: +Z1+li0gMZ69gzo7TI4U7yGz9Hbnl6O0THr1nQR8EF8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.crl
rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2F08C5164B78E28A333599DD590FE906377257.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 21:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:06:9f:b3:a3:3a:d8:86:2f:a7:1f:c0:17:58:b7:1a:64:03:59:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2F08C5164B78E28A333599DD590FE906377257
Validity
Not Before: Oct 30 19:00:18 2026 GMT
Not After : Oct 31 21:30:18 2026 GMT
Subject: CN=A2ED3487E5208C1E6E90E6F604AB34E795401337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:aa:fb:f9:95:85:77:d8:43:39:3a:b9:be:
ec:64:a2:33:3e:c4:9f:64:ad:80:b0:8b:35:ff:61:
5b:d3:7f:88:d5:93:4f:d5:f2:0b:1b:40:b2:f6:2a:
f8:c3:ff:ce:b5:58:ba:5a:cc:8f:31:c4:6d:c2:6f:
e3:b7:0e:62:87:de:e2:bc:76:57:19:82:93:df:15:
eb:e8:7e:ab:18:e3:1d:f8:40:f2:86:fa:bb:3a:df:
29:11:84:e6:00:8a:ed:d1:8a:bf:df:05:02:31:80:
39:3c:68:ab:19:d7:bd:d0:c0:6a:90:da:3c:c9:db:
b3:eb:b0:bc:54:a8:74:af:b8:41:fc:9d:81:36:13:
0a:49:88:f0:ce:1f:52:4a:51:ef:6b:68:af:9c:8b:
b9:b2:cb:3c:63:6c:9a:52:eb:eb:e0:5e:86:96:6e:
e0:33:11:3b:22:c1:21:3c:cc:d5:e7:f7:e1:96:a1:
00:b9:d6:6c:91:bc:fd:cb:0b:6a:bd:98:68:52:e2:
b9:ee:0e:98:40:73:49:c7:13:ff:bb:3a:95:02:af:
da:a3:a7:56:ac:2e:a2:04:01:cf:52:5a:60:61:62:
ee:a1:74:49:38:c3:26:40:0d:60:71:1c:90:ee:06:
9b:4f:70:f8:66:10:6e:00:6a:6c:ba:85:4e:22:f3:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:34:87:E5:20:8C:1E:6E:90:E6:F6:04:AB:34:E7:95:40:13:37
X509v3 Authority Key Identifier:
keyid:1B:2F:08:C5:16:4B:78:E2:8A:33:35:99:DD:59:0F:E9:06:37:72:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2F08C5164B78E28A333599DD590FE906377257.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e7:e1:35:32:af:3e:56:a8:4c:b7:01:ba:69:58:f2:b4:f1:
ed:24:10:a7:65:8f:2d:34:96:fd:38:f9:59:91:6d:00:f0:70:
14:f7:27:79:23:d4:5f:36:b4:9f:9b:c8:8a:0f:3d:66:c5:eb:
e9:dd:cb:5f:ee:97:5a:50:44:27:ae:b8:f2:fe:cc:30:e3:c7:
ab:39:81:40:f9:c1:19:af:c5:f6:4c:0e:0b:6b:1f:2f:a5:99:
29:15:38:0e:30:58:e8:cf:cb:31:3c:d0:ec:b2:d6:4e:c3:b4:
02:51:c8:d2:9a:50:c3:fe:7c:05:4d:d1:28:db:cf:23:ad:b3:
b4:d7:57:93:33:6b:1b:16:15:06:6b:13:d0:b6:bd:0e:01:5e:
17:fc:95:04:8f:8f:be:68:28:52:e0:de:80:01:ec:c8:ab:df:
bd:56:f0:fb:88:14:b0:17:66:de:5f:df:de:c1:72:d4:0d:d1:
f1:6c:c2:69:4b:7f:6e:39:fe:16:f8:27:1e:b1:16:96:5a:83:
16:cd:76:e8:86:cb:f9:fb:7f:8f:7b:7a:a6:b2:98:77:2b:2c:
07:49:cb:25:0f:4d:89:80:c1:f6:bd:67:78:a1:78:49:8f:e4:
64:58:c3:1a:6c:5a:c2:d3:79:7b:08:bf:17:52:df:e1:07:5d:
48:b1:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:54:30 2026 by rpki-client