
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier: XK8ECzACQqC5a4lMLEjL0bxeW//AGA1/i8Hrcix97+s=
Subject key identifier: 3F:50:4E:6D:39:FD:0E:F2:84:E0:14:99:DB:27:27:D1:60:65:BE:43
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial: 7D5BA0B329BE58BB5B961137B7AD1E2C105EE235
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number: 0335
Signing time: Thu 23 Jul 2026 20:16:36 +0000
Manifest this update: Thu 23 Jul 2026 20:11:36 +0000
Manifest next update: Fri 24 Jul 2026 23:09:36 +0000
Files and hashes: 1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=)
2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: eRxQXE2GxZQ/aqGZShRB02u0WpdU6GFJ24vr2QyfoVc=)
3: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 24 Jul 2026 22:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5b:a0:b3:29:be:58:bb:5b:96:11:37:b7:ad:1e:2c:10:5e:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Validity
Not Before: Jul 23 20:11:36 2026 GMT
Not After : Jul 24 23:09:36 2026 GMT
Subject: CN=3F504E6D39FD0EF284E01499DB2727D16065BE43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:f8:b7:f1:11:7a:2d:92:f4:23:53:11:49:
75:3a:a2:7f:72:4d:44:03:97:2e:7a:ae:26:8e:6c:
e2:6b:21:a4:88:7a:7e:36:e9:db:70:cd:b7:1f:8f:
c0:9e:0e:35:f4:25:4c:79:ed:0f:80:74:29:b1:b8:
3d:30:c4:9f:19:e1:8b:8d:50:e7:39:0a:72:d3:c4:
d3:f6:a7:8e:90:50:26:28:ed:ef:ad:5f:f9:65:ec:
b8:8c:85:64:39:b9:61:7c:98:29:78:9c:7f:a3:58:
13:ea:dd:c7:cb:31:b5:7e:31:47:55:c4:9a:84:80:
3d:94:25:fd:21:cb:87:66:a9:90:a3:31:39:08:f2:
b6:e3:70:43:c4:8e:69:8b:99:8f:a9:8a:26:38:60:
1b:0a:ab:d4:bf:13:17:b2:b3:9d:37:de:df:6a:19:
55:b5:53:58:1c:ef:a6:03:59:e7:51:f6:cd:1f:e5:
79:98:cc:7b:a3:a6:55:50:fd:18:e8:96:61:d1:68:
1c:00:f0:f3:04:06:7d:0c:c8:2b:22:0a:5f:c7:cd:
ad:b8:c9:11:bb:a7:ad:b7:e6:7e:c2:44:99:5a:5c:
83:99:b4:72:6c:a7:b6:63:d5:c4:92:1e:af:75:4a:
54:b7:01:00:a3:34:59:ba:9b:4f:4f:08:39:5e:77:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:4E:6D:39:FD:0E:F2:84:E0:14:99:DB:27:27:D1:60:65:BE:43
X509v3 Authority Key Identifier:
keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:31:fe:e8:9d:4e:ab:d7:3c:b7:e2:68:a7:1f:96:e1:0c:
3b:2e:29:51:4c:1b:e2:46:b8:4a:62:1c:a5:f4:41:8c:3f:e5:
5a:a9:84:25:ef:59:f7:61:6a:1c:fc:14:13:90:8e:37:95:ca:
e2:b7:31:d8:27:08:11:90:06:cc:fb:42:20:f2:e0:67:c7:a3:
f0:a6:03:09:c0:64:b1:16:83:7a:89:03:6a:ef:1f:5e:09:0e:
40:2e:26:3c:2c:91:31:e8:c0:90:8d:ec:de:ff:29:e2:c7:5d:
d9:a6:ef:a8:1f:97:16:93:df:6d:8b:dc:ee:1f:1e:b3:1b:67:
97:2a:79:d2:e5:7a:80:59:09:a0:bf:d9:8b:b5:88:12:21:c6:
5f:6c:4d:62:11:0b:cd:d3:0c:8d:47:eb:84:90:5a:92:5f:ef:
05:c9:c6:ef:7f:b7:e9:18:66:30:62:50:d1:36:d9:47:e3:d3:
34:ba:3d:0a:58:4f:42:d5:ab:b3:5a:1a:19:0a:ae:1c:d3:ec:
d2:e4:05:06:26:a7:cc:d2:cf:18:b2:c6:38:76:1c:46:59:33:
9d:e7:d0:ab:78:37:d8:c0:96:19:31:2b:1f:16:b1:cd:70:58:
71:50:68:e2:d6:04:7d:38:ef:cc:e0:95:6d:b7:51:49:80:66:
e0:1e:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:56 2026 by rpki-client