
$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
File: 2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft (raw, json)
Hash identifier: /5pfqag6rfkXS3+xUCd1cgnGGsLzgTI2nXf9l4YG0p8=
Subject key identifier: 6B:66:B3:E3:64:BF:A6:B7:EB:62:3C:EC:1F:B3:AC:C2:0B:74:0E:FF
Authority key identifier: 2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
Certificate issuer: /CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Certificate serial: 5AD78F74312CF885C320EC3BB0F33B3D992AC8EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
Manifest number: 5F
Signing time: Thu 26 Mar 2026 23:27:58 +0000
Manifest this update: Thu 26 Mar 2026 23:22:58 +0000
Manifest next update: Sat 28 Mar 2026 02:57:58 +0000
Files and hashes: 1: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: 2SO6QSBGyBlimyPTsuFW5fiFM0SEVXclucf8ertVkmQ=)
2: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: Mor/AX9x3PD93JwVYU649U4lY58zvYUpWPLIEVgiRAo=)
3: 2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl (hash: 1jN/RzXsxiSYg/JLoEJXfdFEdvjK3RQh0MLXyNXt7zw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 01:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d7:8f:74:31:2c:f8:85:c3:20:ec:3b:b0:f3:3b:3d:99:2a:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Validity
Not Before: Mar 26 23:22:58 2026 GMT
Not After : Mar 28 02:57:58 2026 GMT
Subject: CN=6B66B3E364BFA6B7EB623CEC1FB3ACC20B740EFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:dd:b0:d3:86:85:e8:d6:bb:3c:34:85:37:
a1:4a:9e:20:5f:52:c9:38:46:b8:a7:0b:80:7c:32:
7e:fb:8e:05:20:a8:dc:22:e4:49:8f:52:a7:e3:73:
5a:26:62:69:35:9d:ef:65:45:36:16:eb:96:e5:24:
f0:a7:b9:77:77:95:0c:79:94:16:90:d9:54:81:f0:
4f:32:1a:4d:ed:35:40:8c:51:74:d4:5c:03:c8:db:
a6:9d:7f:71:54:d4:31:f3:32:76:c1:07:ee:bd:d7:
66:bc:f2:aa:14:4e:eb:ad:ae:21:b9:ea:e4:c1:62:
59:c9:24:89:4f:9e:11:b3:a6:c6:bf:5b:bf:96:8c:
bf:95:ff:3f:13:7f:6c:94:50:b8:47:16:89:1d:d5:
65:8c:bd:46:59:0d:85:1c:14:7e:4e:1b:e1:e9:56:
e2:3b:a2:7d:f0:ed:fd:ff:4c:30:4f:07:d3:20:a3:
f9:17:12:df:d2:1c:78:fc:d6:ce:e8:cd:9a:ea:08:
1b:fd:ca:4f:41:80:39:94:15:3b:79:45:63:4e:96:
f8:75:49:c8:f6:08:82:71:71:05:8e:79:45:93:91:
91:82:40:f3:32:c9:cf:3f:10:3e:1a:eb:e2:e7:02:
be:b0:4b:ad:f3:fd:82:52:5f:8d:16:95:6c:38:71:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:B3:E3:64:BF:A6:B7:EB:62:3C:EC:1F:B3:AC:C2:0B:74:0E:FF
X509v3 Authority Key Identifier:
keyid:2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:17:c1:cf:d4:bf:c8:1e:74:c1:ee:34:c8:96:3c:d1:cf:87:
ef:66:a4:b6:f8:3d:07:21:2a:1c:71:61:e7:9a:cb:b0:19:2f:
19:0f:95:04:53:9d:81:f6:c2:1b:57:a9:bb:d2:02:55:0e:8b:
e7:f2:51:9e:2c:e1:e4:c8:82:9b:8b:f5:12:7a:b2:91:16:6c:
d6:45:f1:aa:d6:ec:34:db:3a:34:64:b2:25:b1:b0:71:9a:be:
34:8d:ec:4a:76:88:0a:8d:54:2a:94:1a:a4:00:63:64:e2:47:
00:ea:c1:35:4d:58:30:ac:ef:d0:bd:bc:97:d4:8c:51:14:b6:
ff:c2:00:e9:7d:51:d1:7b:81:69:da:66:ce:7b:a3:3a:49:77:
7c:c6:15:8d:52:5a:5a:4d:b8:01:eb:e8:02:e2:26:28:37:d4:
4e:b0:85:83:90:f8:85:8b:5c:b2:cd:7a:74:73:fc:50:6a:bf:
ec:f1:dd:de:4d:24:31:4b:6a:93:7e:05:ac:16:b4:c8:2c:a3:
df:a7:af:ac:21:b6:20:e2:2a:01:3b:41:d8:b3:5e:ea:ef:4e:
7b:4c:9a:91:25:57:85:1c:45:db:2e:ef:ef:b9:e0:59:17:f7:
f4:e3:79:65:9d:9b:ad:a0:b1:f2:c7:fb:da:a0:4f:78:bc:c7:
1d:e3:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:53:13 2026 by rpki-client