
$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
File: 2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft (raw, json)
Hash identifier: nEaSPMQM0nFo+qFWG1DOu5mKThgQeAeCrXfzvjwLpQE=
Subject key identifier: 11:6B:90:C0:08:8D:8E:4E:FA:44:3D:C9:E8:B7:98:DF:CB:6B:6A:0F
Authority key identifier: 2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B
Certificate issuer: /CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
Certificate serial: 235F3A931A8F824FEEF08FBB0B17A15747C65FFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
Manifest number: 1F
Signing time: Wed 25 Mar 2026 18:26:52 +0000
Manifest this update: Wed 25 Mar 2026 18:21:52 +0000
Manifest next update: Thu 26 Mar 2026 18:55:52 +0000
Files and hashes: 1: 323830343a336462303a3a2f33322d3336203d3e20323636353437.roa (hash: GsdhZu2PbyOxb/zZUiJjwODRzdixOSsZ/JfiYi8AlJU=)
2: 3136302e3233382e3132382e302f32322d3234203d3e20323636353437.roa (hash: hR75jzF7TYgKDqwx5UXQZXZZfyKQ0iyeJoaozNXi6m0=)
3: 2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl (hash: LUtLU3eq7ADkd70QxmrPu2M2aBYpC5s06gAtG+ZpK0c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl
rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 18:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5f:3a:93:1a:8f:82:4f:ee:f0:8f:bb:0b:17:a1:57:47:c6:5f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
Validity
Not Before: Mar 25 18:21:52 2026 GMT
Not After : Mar 26 18:55:52 2026 GMT
Subject: CN=116B90C0088D8E4EFA443DC9E8B798DFCB6B6A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:d4:34:b7:cd:a9:d7:46:13:ee:a9:8a:bf:
bd:ec:6d:88:6c:ba:e7:8b:97:a4:f4:3a:b8:2a:a2:
84:79:6e:d9:13:1c:1d:7a:ad:53:86:e2:89:a2:18:
38:db:29:c4:57:dc:6c:63:56:cb:47:85:67:b7:a4:
a4:86:03:00:13:5e:65:58:a6:7f:c1:a8:f8:cd:3a:
66:26:54:01:78:ff:a1:bb:fd:cd:c2:fd:e4:8d:eb:
48:26:5d:67:52:db:d6:c7:bf:17:28:5f:48:f4:0f:
81:8f:98:28:52:f5:44:9f:8a:a0:56:42:e4:f7:b4:
11:a3:95:af:c6:62:dd:05:ab:4b:be:3b:6c:20:60:
fd:87:de:e7:7c:08:0f:ed:a2:4a:1d:df:1e:aa:36:
77:5a:bd:b5:fb:a8:ed:f7:7c:a2:59:84:4d:19:57:
89:c1:da:68:a2:77:a9:42:69:c2:63:56:f3:e2:3e:
61:35:6e:10:54:ce:d3:f2:1b:df:4b:39:e3:1e:46:
2d:50:b4:e9:53:6f:b5:b2:40:7f:cb:63:ee:7a:6c:
c3:92:fb:1d:7e:35:ba:fd:5a:7a:93:47:06:06:49:
01:db:a5:79:f8:f1:14:6f:05:34:5b:db:2e:00:a0:
e3:87:99:57:6f:c5:50:db:f4:2b:f8:a3:44:33:11:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:90:C0:08:8D:8E:4E:FA:44:3D:C9:E8:B7:98:DF:CB:6B:6A:0F
X509v3 Authority Key Identifier:
keyid:2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:46:f4:6c:78:96:be:dc:ba:ba:be:a0:6f:07:08:81:f4:47:
c7:c5:c0:88:ed:e0:f2:b6:e3:00:97:87:de:ec:0f:32:55:f1:
1b:d4:69:e7:43:03:b8:b3:df:8d:04:bb:1e:b3:4b:a4:f8:60:
d4:fa:9e:29:e6:a5:91:83:2e:46:cd:6b:2a:51:25:55:48:16:
fa:6f:e3:ef:ba:af:31:7a:c9:45:6e:b4:1c:f2:4f:a3:9f:58:
4c:c0:7e:c1:99:20:50:51:3e:ba:eb:fb:86:9e:d8:23:db:37:
e2:c7:8e:52:f7:7d:99:98:37:9e:9c:23:a3:4a:35:1a:a1:d7:
d0:bb:39:d2:f2:51:26:b3:b1:be:61:94:75:ab:f6:59:2f:71:
d3:46:26:bc:85:4f:37:bc:3a:61:62:b5:ec:ad:4d:02:9a:1a:
19:a6:c0:c3:61:01:b2:9a:7e:3d:71:1b:54:d9:65:ae:4e:b6:
bb:2c:d0:41:a5:03:69:13:65:e2:ec:d2:96:62:0e:a7:24:05:
70:a7:e5:d6:a1:93:87:d6:3b:8f:cf:15:72:09:a6:8b:91:d4:
1d:45:91:39:1b:4b:6f:71:c6:88:b2:68:4e:d5:f7:ec:d8:85:
ef:79:18:79:0d:78:99:d9:bc:9b:c5:85:36:5e:5e:e5:5f:9d:
a5:1e:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:22 2026 by rpki-client