
$ rpki-client -vvvf rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft
File: 2B93072F9705E77F0DDB8862E74187CBE35911BA.mft (raw, json)
Hash identifier: 6SmFPffKAYF6Va9mEWslieXm8YWMOncfCSKp4zZ203U=
Subject key identifier: 0A:3E:AB:73:C4:2C:90:52:84:9E:1E:AA:16:D5:5C:81:5F:38:9F:45
Authority key identifier: 2B:93:07:2F:97:05:E7:7F:0D:DB:88:62:E7:41:87:CB:E3:59:11:BA
Certificate issuer: /CN=2B93072F9705E77F0DDB8862E74187CBE35911BA
Certificate serial: 67841B4ED51B7B8404A26DF3FE5CF9982DA42BF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft
Manifest number: D8
Signing time: Sun 18 Oct 2026 20:17:26 +0000
Manifest this update: Sun 18 Oct 2026 20:12:26 +0000
Manifest next update: Mon 19 Oct 2026 21:11:26 +0000
Files and hashes: 1: 3134332e302e3134382e302f32322d3332203d3e20323634303035.roa (hash: 5TfuBcoa7+PYzO8T3TW3omHZS1/Dtmq0xhQ8rrz+Oo0=)
2: 3136382e3139342e34382e302f32322d3332203d3e20323634303035.roa (hash: fGq5IyuxyMVGpA89kafJEENPd+uO+F2EnR2sr4mKdg0=)
3: 323830343a323933633a3a2f33322d313238203d3e20323634303035.roa (hash: OvvNsyCvbf3ftKu6hCd6oLz0bsFyPlGszqwqTBe7ojk=)
4: 2B93072F9705E77F0DDB8862E74187CBE35911BA.crl (hash: tfUbZsSYTpRapu2k+8UNpwTwNN06OIFLsqasyQRO2HM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.crl
rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 19 Oct 2026 21:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:84:1b:4e:d5:1b:7b:84:04:a2:6d:f3:fe:5c:f9:98:2d:a4:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B93072F9705E77F0DDB8862E74187CBE35911BA
Validity
Not Before: Oct 18 20:12:26 2026 GMT
Not After : Oct 19 21:11:26 2026 GMT
Subject: CN=0A3EAB73C42C9052849E1EAA16D55C815F389F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:f7:15:20:af:54:66:fb:67:a2:7b:0e:a2:
05:da:f1:24:eb:cb:19:bd:5f:61:a9:24:a3:01:36:
91:75:0b:63:64:fb:03:c7:57:de:79:fa:42:42:cb:
a7:bd:b0:9d:47:be:1e:67:f5:6d:9f:e6:fb:55:f6:
df:14:5c:d5:b1:de:60:4b:74:fc:21:d0:7f:25:8c:
28:c2:56:1e:eb:f5:e7:59:74:79:ac:37:e2:b3:83:
88:5f:f7:f8:c1:87:68:b9:79:b6:df:0a:f5:33:12:
5b:46:bf:3b:d2:ca:d6:7b:9e:59:db:26:3a:b1:75:
07:99:d5:20:27:1e:c1:19:c6:4b:7a:d5:4b:5d:67:
25:1b:89:c7:62:f1:df:92:13:e6:ce:1f:fb:8a:fa:
ad:71:39:de:58:02:c6:b1:25:fa:ac:68:59:e5:f8:
fc:1f:5d:2d:2e:6a:fc:7d:a7:77:a9:b0:aa:3b:4b:
17:6a:2d:a6:54:2b:d8:4a:c3:9d:89:39:cd:62:cb:
6d:0f:3b:43:84:b9:f0:b3:17:ea:22:78:7e:bc:5a:
0a:f8:45:e1:37:5a:4e:05:3c:19:16:9d:9c:35:24:
33:47:01:0f:e4:e2:6b:a3:2f:78:ac:0a:0c:7e:f2:
27:45:f4:4d:37:c1:80:bd:d4:58:e3:d4:de:ca:b0:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:AB:73:C4:2C:90:52:84:9E:1E:AA:16:D5:5C:81:5F:38:9F:45
X509v3 Authority Key Identifier:
keyid:2B:93:07:2F:97:05:E7:7F:0D:DB:88:62:E7:41:87:CB:E3:59:11:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B93072F9705E77F0DDB8862E74187CBE35911BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/2B93072F9705E77F0DDB8862E74187CBE35911BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f1:5c:8e:20:36:e1:e2:2c:bc:49:4b:de:e4:54:c3:15:a8:
36:6a:7c:26:b4:fd:e9:54:8e:8a:e1:c0:c1:b3:d3:48:05:dd:
6f:2b:b1:c7:bf:e5:83:d4:4e:95:d5:48:d1:bf:97:71:5a:1c:
17:73:49:4d:6e:26:cd:8e:d0:1e:32:58:17:dc:ec:42:e4:04:
fb:ab:0c:5e:a4:64:8d:06:cd:da:7e:8b:4c:ff:a2:e3:99:06:
b0:8d:dc:c8:c4:ab:46:46:24:90:13:ce:66:96:ec:14:39:56:
0c:42:10:f3:5d:0e:c8:87:d9:36:f1:da:e2:2e:a5:a5:8f:e9:
96:a0:08:8b:e1:d4:d6:db:ed:28:eb:2c:15:9e:fb:9f:c4:7b:
2a:97:59:ae:6f:c2:47:24:45:6b:7b:e4:ee:16:07:f3:af:a0:
37:17:ee:ff:9f:54:e4:d2:9b:7e:10:39:64:aa:7a:67:57:62:
ed:3c:58:14:ff:ad:23:75:5f:09:9f:0f:c7:da:d2:83:d7:54:
cb:36:ff:c2:2b:78:78:56:55:7b:98:f3:22:5b:9c:e8:21:7e:
30:89:cb:6b:39:a7:17:d1:18:34:d3:96:b5:43:d2:3b:a4:5d:
89:1f:d2:1b:20:42:8d:61:a4:2b:ef:5d:4a:34:33:9a:cf:fe:
f4:51:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:29:27 2026 by rpki-client