
$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json)
Hash identifier: BHmxoHIJ28anB02gsbkFfTcPspOO9WaDjiya6WmF0VA=
Subject key identifier: F2:A9:0F:D1:48:95:4D:29:55:38:32:0A:B6:1C:4E:49:A3:04:17:7F
Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Certificate serial: 0C9F2E14FDD4082B826744097A584F5B7984A162
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
Manifest number: 0401
Signing time: Wed 13 May 2026 09:35:54 +0000
Manifest this update: Wed 13 May 2026 09:30:54 +0000
Manifest next update: Thu 14 May 2026 13:03:54 +0000
Files and hashes: 1: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: cLWZH7fF8LrQwdp/Zg/1jWkVLX85FPQY0a4ML8PtgLo=)
2: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: jrJ82+N8Ylv+k7CLiCwiS9Ws73fHhqCUDG+FhQCInyQ=)
3: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: 0yHNZRU/rOPWIWeTxxQK8crAOr43TecNrQxrFYd2xzM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9f:2e:14:fd:d4:08:2b:82:67:44:09:7a:58:4f:5b:79:84:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Validity
Not Before: May 13 09:30:54 2026 GMT
Not After : May 14 13:03:54 2026 GMT
Subject: CN=F2A90FD148954D295538320AB61C4E49A304177F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:3c:93:45:ad:78:bc:7b:7e:1c:49:46:db:
86:17:90:74:48:e9:4c:99:61:d9:02:b0:33:e2:fc:
ad:ed:74:8e:e9:6d:25:61:fe:c2:2a:69:e3:4e:2a:
93:58:e7:8b:9c:d0:1c:89:9b:c0:6e:b4:a7:09:16:
59:6b:09:34:60:d4:c9:5a:68:c9:bb:ab:aa:cd:59:
ff:f6:de:1b:bd:24:6f:6e:ae:e1:3e:4b:c6:90:49:
32:2c:a9:18:7c:f6:97:a5:50:84:04:25:81:9a:51:
6c:36:65:8e:d7:a6:8e:a0:a0:02:b8:51:81:79:88:
b2:bf:aa:09:20:f4:16:5e:00:42:ad:22:14:25:b5:
59:f9:bf:37:67:80:9f:f0:fb:39:2a:88:ab:fa:67:
1f:53:f3:c0:b5:a1:ca:54:69:7f:32:60:74:07:4c:
98:6e:eb:c0:f5:55:9e:a6:7a:eb:fd:d4:61:90:df:
26:87:52:e8:8a:e2:69:c8:2a:58:4c:60:b2:bc:9e:
93:66:1b:cd:e0:cb:a3:39:ac:db:da:57:86:0e:d7:
ba:3d:d6:8a:85:79:e7:eb:0e:50:ee:f7:78:e0:52:
11:ff:0b:48:3b:1d:e0:74:db:07:e4:71:25:9b:51:
c0:a8:02:83:45:da:a8:85:aa:9e:ff:b0:8a:4b:0e:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A9:0F:D1:48:95:4D:29:55:38:32:0A:B6:1C:4E:49:A3:04:17:7F
X509v3 Authority Key Identifier:
keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:84:31:d2:0a:ca:bc:51:5f:86:fe:4c:c5:48:11:eb:58:d1:
04:b0:2c:b9:f5:c0:5d:90:69:d6:89:ab:77:7c:b0:cc:50:a4:
52:22:f3:20:18:a8:df:c1:d1:fc:9c:a4:0f:98:b7:68:5e:41:
b6:0b:32:3c:2c:be:fd:cc:66:b6:50:dc:9b:a5:7f:6f:ed:0b:
74:79:1c:8f:f1:e7:8c:dc:f5:8f:7c:49:ce:f7:fd:d2:64:84:
1f:ab:50:24:ba:49:ee:b9:02:89:3c:3d:ba:bd:cc:76:48:11:
06:e2:99:cd:a4:16:95:8a:47:fc:41:94:3e:4e:12:f7:b1:79:
7d:7d:3c:14:b3:60:54:fe:3f:86:de:36:10:d5:89:1e:e0:e4:
63:37:32:f7:23:65:cc:9e:e1:4d:d9:87:d4:08:59:f4:e7:42:
9b:b0:d0:70:66:4b:d6:a9:98:7e:7d:de:72:35:e4:d6:11:cc:
6c:4f:31:ab:0f:24:4f:5a:ea:a7:42:93:8f:06:21:98:c7:e3:
ce:3d:c8:cd:e9:ab:ac:9f:e8:cf:59:ef:c8:92:da:1a:63:47:
55:40:27:4c:83:21:6c:2e:01:a2:81:e2:b0:c9:8e:a2:cb:d4:
b7:32:a6:f5:90:12:20:c9:8b:5c:ca:dc:ae:95:c2:a7:c2:5c:
e3:f5:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:43 2026 by rpki-client