
$ rpki-client -vvvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json)
Hash identifier: qpp9ezLeTf5d09t7ZLm8EwGGFiZrMgv1wOKlnRgIR4o=
Subject key identifier: A4:36:4C:05:52:75:BF:34:A5:6E:81:FB:CC:19:42:98:C9:08:3F:4E
Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Certificate serial: 1EFD7AEFC89F92FF474372136E2AD6E6B53D4138
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
Manifest number: 04C9
Signing time: Sat 10 Oct 2026 18:02:23 +0000
Manifest this update: Sat 10 Oct 2026 17:57:23 +0000
Manifest next update: Sun 11 Oct 2026 19:03:23 +0000
Files and hashes: 1: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: cLWZH7fF8LrQwdp/Zg/1jWkVLX85FPQY0a4ML8PtgLo=)
2: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: 0yHNZRU/rOPWIWeTxxQK8crAOr43TecNrQxrFYd2xzM=)
3: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: QSlWc8GxuH6X10qOp9SiHndwbEEuYe6iocczZP4CQE4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 19:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fd:7a:ef:c8:9f:92:ff:47:43:72:13:6e:2a:d6:e6:b5:3d:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Validity
Not Before: Oct 10 17:57:23 2026 GMT
Not After : Oct 11 19:03:23 2026 GMT
Subject: CN=A4364C055275BF34A56E81FBCC194298C9083F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:a7:4f:2d:32:f3:63:62:3b:cb:ce:57:8a:
03:6d:8a:59:d4:41:64:c0:88:92:03:ca:b2:7e:11:
15:a4:05:65:3e:81:4d:fc:d2:8e:9c:27:a8:9b:79:
a1:68:e6:46:8f:d8:35:0a:90:b5:ca:7c:eb:db:ca:
f2:83:ab:56:e5:44:9e:6d:f4:15:2a:f9:88:dc:23:
1d:39:e9:7e:8d:75:69:a9:5a:4b:64:e5:a9:7f:55:
a7:9b:8f:d2:f1:0b:b7:ae:43:c7:6d:c2:7e:89:78:
bc:af:c2:4f:db:4b:24:e5:fd:a4:5d:a9:52:d0:af:
ee:13:c5:0d:09:81:c2:d3:07:9f:c8:88:1c:da:d6:
03:0a:de:14:81:7f:79:a2:f3:ff:c8:9b:93:82:80:
64:4e:41:ec:e9:7e:c9:be:c9:49:10:16:0d:f1:0f:
82:7f:ea:2b:98:30:66:de:ad:20:60:89:2b:73:0e:
a2:85:13:dd:ab:3b:c2:b7:61:34:30:7e:71:cb:d2:
34:bd:87:13:b0:06:6f:71:a7:87:39:73:b0:c5:4d:
55:ce:42:4e:32:62:26:c1:62:fe:11:fc:c3:e2:11:
cf:71:ed:9c:22:3d:5e:46:1f:5a:3f:6c:c2:21:0a:
40:4a:c0:e9:e5:16:a0:91:c4:96:a4:d9:97:69:f6:
a1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:36:4C:05:52:75:BF:34:A5:6E:81:FB:CC:19:42:98:C9:08:3F:4E
X509v3 Authority Key Identifier:
keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0d:9f:d1:b9:b7:fb:7d:2f:a1:4c:89:da:08:9e:f4:cd:0b:
28:8d:47:a2:8d:d8:ce:ce:e7:7e:43:0e:67:de:bf:fc:1b:f6:
2d:7d:00:06:7e:c2:7c:5d:44:3d:3f:ae:af:65:aa:4a:27:f5:
c1:b0:25:84:da:0e:03:2f:32:4c:ec:ab:d0:cd:b9:b3:72:9f:
a4:09:29:be:5e:f1:00:5e:57:c3:54:0d:33:37:dc:8a:55:d7:
9c:59:6f:1c:b3:04:6c:2c:88:ce:98:72:55:5e:06:e5:42:bf:
4e:19:94:15:7c:b9:35:d3:ef:dd:25:92:fd:90:3c:f9:cf:1d:
6a:4e:40:16:cf:ef:9b:76:f9:f3:cd:19:8d:62:13:d8:fd:7d:
63:e7:b7:9e:58:3b:a9:b0:dc:bb:5e:79:af:a2:5f:e2:76:0a:
ab:b5:fa:05:06:b1:e2:7d:66:e1:22:74:ed:e8:0a:87:8d:43:
22:7c:09:0d:60:3c:fc:d4:ae:0f:01:32:3e:53:e7:aa:2b:dd:
5c:dc:1e:86:71:33:5f:69:ee:92:95:0b:a5:ed:32:c6:32:83:
13:15:3f:c4:c9:90:8d:1e:86:7c:49:4d:ab:43:ca:9c:b8:aa:
19:94:48:ca:b3:e4:7f:f9:e9:0a:c1:73:96:0e:78:ae:c5:ab:
4f:1f:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:37:14 2026 by rpki-client