
$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
File: 524E9D1652F660663CB5548E20AE99DA463B2CFA.mft (raw, json)
Hash identifier: ls7evKM2idDmIZdsvJ7aXE1ct/m7tGWNxhhsFTpvKgc=
Subject key identifier: 22:65:95:53:C7:E7:C4:BB:4A:CB:74:F6:86:B4:28:1F:37:26:B1:5D
Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
Certificate issuer: /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Certificate serial: 2A1B2047DD62CE5ABC1823605EB3516B6D15F50A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
Manifest number: 03C9
Signing time: Thu 26 Mar 2026 20:40:46 +0000
Manifest this update: Thu 26 Mar 2026 20:35:46 +0000
Manifest next update: Sat 28 Mar 2026 00:14:46 +0000
Files and hashes: 1: 3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (hash: U2GHmS4J03h1ERlNUuod06WHbYfM5waCGNz/dUcMpmQ=)
2: 3137372e33382e3133362e302f32312d3234203d3e203532393437.roa (hash: 2dAP4nSC3kCKXKq9aOFGJPXz415Dw7NcFS8BwiSIgYk=)
3: 323830343a316466343a3a2f33322d3438203d3e203532393437.roa (hash: 1r4Jm+Nm1npky2LUnL87bsHT4LGG1xElZ7lYCR4WJhE=)
4: 524E9D1652F660663CB5548E20AE99DA463B2CFA.crl (hash: R7Wql8b5MXF/5qEnlHl78wI2GWoerbbLWvT4er71kwE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 28 Mar 2026 00:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1b:20:47:dd:62:ce:5a:bc:18:23:60:5e:b3:51:6b:6d:15:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Validity
Not Before: Mar 26 20:35:46 2026 GMT
Not After : Mar 28 00:14:46 2026 GMT
Subject: CN=22659553C7E7C4BB4ACB74F686B4281F3726B15D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:5d:b6:7f:74:2e:1d:d0:68:f2:29:05:f9:
64:66:c9:d7:a7:ab:6f:95:4f:53:16:d2:46:6a:73:
44:d4:68:86:40:84:db:27:85:e2:aa:73:61:71:dd:
66:8a:d8:b3:48:16:ad:10:2c:2f:22:22:3f:fb:81:
48:00:32:87:33:58:7b:9f:ff:fd:76:f6:4f:55:a2:
b5:64:74:ca:6c:40:d8:19:9c:b5:4e:b8:6d:2b:13:
9f:24:78:9b:4e:a9:c3:6b:db:9a:aa:a0:34:38:35:
75:ef:af:ed:68:a1:3b:37:e8:58:76:a5:5c:41:b1:
3e:a3:bd:89:79:a6:da:b9:e9:e9:06:61:c2:d9:10:
4e:0a:61:9f:d9:69:db:54:38:89:44:ee:4f:8a:fe:
d2:35:fe:56:59:5c:7a:a6:9c:78:e7:8c:3e:ae:9e:
52:a2:22:e6:9c:b9:2e:15:32:89:6f:bc:8a:cb:a2:
ab:3d:9e:cb:b3:9d:d3:39:d6:2b:96:f6:f9:89:dc:
13:16:51:17:88:6b:28:71:8a:e3:a6:91:6f:a8:b0:
9e:ea:ad:9e:5f:66:00:f4:b7:44:16:95:8c:46:ba:
12:93:72:60:98:7e:91:0d:e1:8f:ce:38:66:c4:0c:
5c:72:83:30:79:4c:6b:57:bb:03:0b:bd:ae:6d:42:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:95:53:C7:E7:C4:BB:4A:CB:74:F6:86:B4:28:1F:37:26:B1:5D
X509v3 Authority Key Identifier:
keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:63:a6:ee:d0:60:62:e8:25:59:b9:60:6a:f7:ca:31:e4:5f:
b3:0f:2d:45:46:94:93:4c:a6:68:06:83:6f:dd:e2:67:d9:e6:
ba:85:be:80:0b:d2:3e:8c:45:e7:a4:46:4d:70:d7:e1:bc:76:
3b:2f:20:7c:5e:a3:59:a8:46:f0:9c:ef:fe:36:b2:aa:1d:fb:
d3:16:2c:67:91:52:91:6b:92:27:11:cb:c1:ed:e7:62:5a:a7:
9a:3e:50:16:4f:b5:03:3d:c0:45:6c:02:c2:99:63:93:d7:86:
fb:37:f3:df:71:dd:58:9e:ab:c1:ff:de:34:63:08:77:ee:25:
52:7c:85:00:aa:11:fc:e4:b9:a4:e6:3b:dd:c6:b7:5f:54:f5:
74:c0:cc:e9:56:b0:c2:58:57:f6:d9:ca:e3:b1:88:10:93:e8:
40:db:6c:49:87:06:67:55:95:42:af:dc:02:a1:ef:4a:d4:44:
02:83:a2:2a:f5:e9:ac:7a:c9:fd:a4:9d:80:b2:62:9d:72:67:
91:28:f7:22:6c:c7:94:56:c4:c8:34:ee:c3:e1:4d:bb:b9:4d:
89:cf:5b:ad:5b:58:44:57:8a:d4:a4:6b:ba:65:6d:fb:ec:a6:
13:f3:a5:16:38:07:f9:51:9c:0e:7d:07:c2:82:e8:25:82:9b:
d5:04:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:13:38 2026 by rpki-client