
$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json)
Hash identifier: jCwESAIqG4VzLF6AeHTSaO7b9wJWPVEuJKrN8Jbl+qQ=
Subject key identifier: D7:BF:1F:BC:60:14:CE:1C:6C:E6:77:31:25:1A:34:7D:AA:53:1C:62
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial: 4F924555753FE90E5B94F54F29696E1C2A298846
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
Manifest number: 0299
Signing time: Thu 26 Mar 2026 20:59:57 +0000
Manifest this update: Thu 26 Mar 2026 20:54:57 +0000
Manifest next update: Fri 27 Mar 2026 22:52:57 +0000
Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: qbqjwK95wyJ0yO65fxXE1OBFRlNzJ2s0yy+28N+/SoU=)
2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 22:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:92:45:55:75:3f:e9:0e:5b:94:f5:4f:29:69:6e:1c:2a:29:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
Validity
Not Before: Mar 26 20:54:57 2026 GMT
Not After : Mar 27 22:52:57 2026 GMT
Subject: CN=D7BF1FBC6014CE1C6CE67731251A347DAA531C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:36:de:fe:b8:09:1c:37:4f:80:ad:e5:71:
fb:33:59:bc:7d:ab:02:30:53:d7:18:fb:56:9b:3e:
ba:3a:2d:f7:c3:65:9f:74:7e:c4:71:c5:e3:c6:38:
f2:ca:2c:03:a6:72:0f:e9:05:a9:de:7a:74:2b:ba:
dd:af:7f:93:5e:fd:72:06:92:09:db:e5:06:d6:e3:
5c:95:ac:2e:61:5a:e6:26:c3:62:19:a8:08:99:19:
9e:05:bf:71:23:98:cb:35:cd:2b:a5:77:1e:54:6d:
a0:3a:71:b0:a0:2c:9e:d4:f2:85:7c:55:f2:2a:15:
5e:18:6b:eb:0c:71:ee:11:da:96:4a:14:b1:fc:c1:
8f:7e:8e:c5:30:5a:0d:21:8a:89:86:fa:76:4f:b1:
1c:75:52:42:64:99:f4:9e:9f:37:ae:32:f8:81:49:
4f:09:b9:c1:64:f1:e4:80:5b:fb:78:cb:35:42:09:
86:c6:dd:44:f0:43:e4:e4:29:ec:13:0f:d9:de:f6:
63:1d:24:c3:89:cd:c5:13:93:20:aa:f7:48:16:c3:
8f:98:bc:b2:ff:c8:98:98:68:34:2f:67:e1:a2:5f:
0d:8d:0d:14:8c:db:36:a1:23:ed:c1:43:11:e4:fd:
ac:46:ab:c8:22:53:26:d5:d3:02:99:c4:20:5c:ff:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:1F:BC:60:14:CE:1C:6C:E6:77:31:25:1A:34:7D:AA:53:1C:62
X509v3 Authority Key Identifier:
keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:9f:0f:c9:16:a8:f2:29:e8:55:3f:36:f4:74:7b:62:ab:
b7:23:9a:c6:89:1a:86:66:37:48:78:e6:d1:c6:c7:28:b2:ba:
f6:89:cc:ac:84:5f:47:2e:83:20:92:58:0d:34:fd:e3:e2:8b:
74:af:19:72:68:1a:c8:e2:c2:01:39:8e:3c:54:c0:f0:c6:d0:
99:a0:df:c9:ce:05:8a:b4:6b:a2:c0:7c:3c:b8:26:8f:77:f3:
ff:cf:78:22:fd:ab:71:2d:4d:4a:26:ff:7e:4f:18:50:14:ce:
d1:4f:79:bb:34:aa:93:ae:1a:84:fd:86:67:c2:25:11:b6:54:
34:28:00:90:6e:8d:ea:99:c7:a7:b2:f3:14:af:15:92:4b:a0:
45:a4:d4:f5:20:e9:ba:86:89:d4:c0:cc:b2:b6:f8:85:23:ff:
c0:ae:d2:97:8d:98:ee:45:a0:4a:bd:8d:37:c2:4e:3b:45:b8:
35:f2:c3:87:85:e7:bb:ba:40:fd:99:22:96:0b:27:f3:8a:e0:
1d:fd:d6:4d:c9:22:80:63:65:88:2e:70:57:7f:9b:55:23:76:
a0:f2:87:0c:7c:07:b4:14:aa:6f:2c:87:d7:8c:0b:0e:dd:09:
69:0b:33:61:6b:6f:df:76:90:b9:81:3a:9c:5f:bf:4a:59:be:
c9:37:2c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:02:50 2026 by rpki-client