
$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
File: 2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft (raw, json)
Hash identifier: 7LtkjygzlhHF9ybdLUX+dDQY/GZ361PFKhkyho6EyjQ=
Subject key identifier: 43:62:28:B9:B9:DF:F0:1E:B9:02:C5:B2:B8:BE:2E:84:56:D0:FE:46
Authority key identifier: 2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B
Certificate issuer: /CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
Certificate serial: 652A76EAA00DB053984A985B1DDAA24E691C8939
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
Manifest number: BF
Signing time: Fri 24 Jul 2026 13:55:47 +0000
Manifest this update: Fri 24 Jul 2026 13:50:47 +0000
Manifest next update: Sat 25 Jul 2026 16:35:47 +0000
Files and hashes: 1: 3136302e3233382e3132382e302f32322d3234203d3e20323636353437.roa (hash: hR75jzF7TYgKDqwx5UXQZXZZfyKQ0iyeJoaozNXi6m0=)
2: 323830343a336462303a3a2f33322d3336203d3e20323636353437.roa (hash: GsdhZu2PbyOxb/zZUiJjwODRzdixOSsZ/JfiYi8AlJU=)
3: 2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl (hash: Gc2ceYgpboebdpSCXQT+nO44crtpMWsuj8kByvYZrAg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl
rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 16:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2a:76:ea:a0:0d:b0:53:98:4a:98:5b:1d:da:a2:4e:69:1c:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
Validity
Not Before: Jul 24 13:50:47 2026 GMT
Not After : Jul 25 16:35:47 2026 GMT
Subject: CN=436228B9B9DFF01EB902C5B2B8BE2E8456D0FE46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:9b:fa:af:cd:9b:cc:b5:37:40:cf:88:6c:
57:11:78:5d:9f:77:46:aa:55:91:d0:ab:b1:11:9f:
e7:1c:9a:01:db:bd:b9:36:fa:cb:33:fe:44:85:63:
e5:bb:c6:b0:45:af:d3:33:dc:a4:c5:08:2c:a4:ed:
ce:5e:2c:4a:40:62:40:6b:47:43:31:ef:49:16:9a:
33:80:dd:f5:ce:ea:ce:1b:ef:f5:19:38:74:92:6f:
ce:b2:7e:ec:fe:bb:85:b0:d9:f3:b3:79:70:f1:8d:
12:52:8b:a1:cf:9f:bc:8b:8a:cb:48:02:a7:00:c4:
fa:d0:6d:4e:79:f9:30:59:7a:f3:41:0c:69:b2:5f:
b8:40:35:e4:e8:8f:68:17:8f:83:70:9f:6c:4f:6b:
ba:9c:6e:de:2a:27:b3:9c:a9:3b:ea:d4:4b:47:90:
5c:d3:22:7a:dd:e3:42:1c:ab:d7:62:57:41:66:a8:
81:75:08:5d:9c:74:3d:d5:b3:e5:b9:62:35:d6:61:
2b:d3:6f:d3:25:f1:39:6a:03:a6:47:21:6f:6a:9e:
04:d7:ab:10:0c:c1:8c:cc:77:15:f2:56:fd:b9:0e:
16:d0:32:69:21:77:ad:89:8d:33:6a:db:0f:88:f3:
5b:88:33:5e:0a:b3:1e:e4:4a:f3:1e:59:56:44:19:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:28:B9:B9:DF:F0:1E:B9:02:C5:B2:B8:BE:2E:84:56:D0:FE:46
X509v3 Authority Key Identifier:
keyid:2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:a7:5e:89:69:fc:db:40:5d:f3:c4:7a:28:63:aa:08:1e:
fd:c1:59:2c:dd:cc:40:97:e2:03:1e:3f:a6:3a:89:ee:37:39:
15:da:4a:76:5b:5c:0a:20:06:c3:14:9c:90:f2:67:7c:3f:eb:
6d:be:bb:d0:d8:ec:58:f5:c6:b4:c6:2a:8b:0c:50:8d:58:b1:
8a:3b:2a:02:dd:8c:63:f7:05:b3:9e:6a:38:18:8b:5b:06:86:
5f:99:8e:ab:bb:7b:be:63:99:eb:fc:02:88:3b:f5:8d:54:4f:
72:77:7d:3b:63:3e:62:eb:96:d1:56:63:af:0e:1f:22:4f:90:
66:12:40:f5:81:14:cc:1f:81:41:bc:5f:df:20:cb:aa:b8:71:
af:d5:a1:73:4a:99:7e:c6:bb:9c:fc:83:fc:71:cd:d9:80:05:
a5:a0:35:df:a9:3b:b3:2b:39:71:87:a5:e5:17:16:19:5c:23:
96:d0:61:0f:93:b2:66:14:b3:ba:30:55:50:a6:59:3e:e8:0f:
53:d6:f4:47:06:f8:8c:aa:22:73:50:a7:18:81:dd:a7:5a:85:
e8:c8:72:9c:f6:96:ff:19:2b:f5:3e:03:10:3a:b7:90:e7:78:
24:89:e1:5f:41:80:98:92:7e:5b:90:4c:c1:88:44:35:f5:d1:
5b:98:8e:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZSp26qANsFOYSphbHdqiTmkciTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZBODk1QTMyM0NERTY2ODYzNzlEOEVEOEM0MzE3MEM2
QkE4Qzg1QjAeFw0yNjA3MjQxMzUwNDdaFw0yNjA3MjUxNjM1NDdaMDMxMTAvBgNV
BAMTKDQzNjIyOEI5QjlERkYwMUVCOTAyQzVCMkI4QkUyRTg0NTZEMEZFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXJv6r82bzLU3QM+IbFcReF2f
d0aqVZHQq7ERn+ccmgHbvbk2+ssz/kSFY+W7xrBFr9Mz3KTFCCyk7c5eLEpAYkBr
R0Mx70kWmjOA3fXO6s4b7/UZOHSSb86yfuz+u4Ww2fOzeXDxjRJSi6HPn7yListI
AqcAxPrQbU55+TBZevNBDGmyX7hANeToj2gXj4Nwn2xPa7qcbt4qJ7OcqTvq1EtH
kFzTInrd40Icq9diV0FmqIF1CF2cdD3Vs+W5YjXWYSvTb9Ml8TlqA6ZHIW9qngTX
qxAMwYzMdxXyVv25DhbQMmkhd62JjTNq2w+I81uIM14Ksx7kSvMeWVZEGVO9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQ2Ioubnf8B65AsWyuL4uhFbQ/kYwHwYDVR0j
BBgwFoAUL6iVoyPN5mhjedjtjEMXDGuoyFswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JW
OEEvMC8yRkE4OTVBMzIzQ0RFNjY4NjM3OUQ4RUQ4QzQzMTcwQzZCQThDODVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQTg5NUEzMjNDREU2Njg2
Mzc5RDhFRDhDNDMxNzBDNkJBOEM4NUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Nk1BUFVSYVFNVGtmakpkOVlNR0NqVmY4ZjQ1cmtWZm1QZFlXRkRlb0JWOEEvMC8y
RkE4OTVBMzIzQ0RFNjY4NjM3OUQ4RUQ4QzQzMTcwQzZCQThDODVCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiAynXolp/NtAXfPEeihjqgge/cFZLN3MQJfiAx4/pjqJ7jc5FdpKdltcCiAG
wxSckPJnfD/rbb670NjsWPXGtMYqiwxQjVixijsqAt2MY/cFs55qOBiLWwaGX5mO
q7t7vmOZ6/wCiDv1jVRPcnd9O2M+YuuW0VZjrw4fIk+QZhJA9YEUzB+BQbxf3yDL
qrhxr9Whc0qZfsa7nPyD/HHN2YAFpaA136k7sys5cYel5RcWGVwjltBhD5OyZhSz
ujBVUKZZPugPU9b0Rwb4jKoic1CnGIHdp1qF6MhynPaW/xkr9T4DEDq3kOd4JInh
X0GAmJJ+W5BMwYhENfXRW5iO7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:37 2026 by rpki-client