
$ rpki-client -vvvf rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.mft
File: D3F2CBDBAFA5B717794DA3A5AA540794C2061230.mft (raw, json)
Hash identifier: rYdyfFTHYiiNaa7X2/g7PONZBPOMy+04DdtBara+qGQ=
Subject key identifier: AA:F2:C6:52:D0:EB:F2:C8:BB:94:02:7F:45:AA:AC:59:63:85:84:C8
Authority key identifier: D3:F2:CB:DB:AF:A5:B7:17:79:4D:A3:A5:AA:54:07:94:C2:06:12:30
Certificate issuer: /CN=D3F2CBDBAFA5B717794DA3A5AA540794C2061230
Certificate serial: 099B6F7EB041DA7E76117583A9CA89234B5CA54A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.mft
Manifest number: A2
Signing time: Sat 31 Oct 2026 18:10:48 +0000
Manifest this update: Sat 31 Oct 2026 18:05:48 +0000
Manifest next update: Sun 01 Nov 2026 21:55:48 +0000
Files and hashes: 1: D3F2CBDBAFA5B717794DA3A5AA540794C2061230.crl (hash: nOQ0D3Ja+/kN9OeLGnE/hqZ0A/y7fn2cND0bIIjCqRk=)
2: 3137372e3135322e38382e302f32312d3234203d3e203532353335.roa (hash: ToeXfXiXDRYUNm9igJ5DBnBl1uhJZCi1P38INmIgd80=)
3: 323830343a6530343a3a2f33322d3438203d3e203532353335.roa (hash: mFJOS+fqpsfShRfLDz8E85xitRRkxd3pA3lfK0wcH2o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.crl
rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 21:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:9b:6f:7e:b0:41:da:7e:76:11:75:83:a9:ca:89:23:4b:5c:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3F2CBDBAFA5B717794DA3A5AA540794C2061230
Validity
Not Before: Oct 31 18:05:48 2026 GMT
Not After : Nov 1 21:55:48 2026 GMT
Subject: CN=AAF2C652D0EBF2C8BB94027F45AAAC59638584C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:1b:0c:9f:6b:74:b8:2e:b5:db:92:8c:aa:
05:28:84:ac:ae:2f:8e:67:6e:1a:e8:d3:92:9b:24:
58:95:ad:02:0a:4b:d8:ce:91:a7:e3:94:7a:48:08:
32:46:ad:6e:e1:8f:f7:9c:5a:22:bb:44:c4:b1:c7:
48:78:7a:db:bc:61:9e:be:87:81:f2:72:44:d1:76:
4f:23:7a:6a:b8:3c:26:5e:fc:6b:e6:a8:a1:7d:51:
1a:de:5d:88:46:eb:58:0e:f6:47:f4:60:7d:30:fc:
e3:d9:8f:29:fa:72:0e:d1:93:bc:07:0b:77:87:52:
c2:75:97:f2:15:99:e5:e9:f7:99:33:04:cb:f4:e3:
29:b7:8e:13:16:36:7d:cf:ab:bc:83:a1:86:8c:a1:
36:99:89:f3:36:b5:26:f8:a1:2d:09:fd:9b:d4:77:
06:99:05:bd:50:c8:a1:2b:1c:d3:85:97:70:03:fd:
58:42:28:f8:a2:ee:ff:6c:b0:f3:6d:26:9d:a3:bf:
b5:5e:48:ad:19:7a:b2:29:db:86:c0:56:aa:89:c3:
3f:35:bd:46:36:95:73:c1:fd:38:c2:65:66:d8:9b:
62:e1:1c:90:86:55:bf:e3:09:08:d1:cc:1d:ba:53:
00:b6:a4:a9:82:a3:6d:d2:f3:7f:1d:18:a0:92:3a:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:C6:52:D0:EB:F2:C8:BB:94:02:7F:45:AA:AC:59:63:85:84:C8
X509v3 Authority Key Identifier:
keyid:D3:F2:CB:DB:AF:A5:B7:17:79:4D:A3:A5:AA:54:07:94:C2:06:12:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRkxQboTXPGj48NKXK241uVzBXeuHQ6i355vqMcY2s1e/0/D3F2CBDBAFA5B717794DA3A5AA540794C2061230.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:2e:5a:84:9c:a0:f1:ee:2e:eb:0f:e8:fa:31:b8:55:67:
50:f3:e1:8e:4e:59:76:4d:31:ac:86:1f:d1:28:5a:1a:e1:ef:
1c:1e:1f:75:b6:88:54:06:c8:39:36:14:14:63:6b:3a:54:fb:
52:ef:c6:a5:b4:6a:4c:74:fa:53:14:60:7d:a4:52:d7:77:39:
bd:c5:fb:16:dd:23:ab:e5:6a:e4:0b:66:8e:a8:a4:96:91:46:
03:30:67:05:88:5c:96:6b:3d:e4:30:67:6d:b9:32:14:a0:7e:
ba:82:7e:5d:4a:d5:be:ce:cd:22:98:30:de:3d:73:fc:7d:0d:
14:4d:9b:73:78:bf:23:d8:0e:05:f7:cc:3a:da:fb:91:e4:ce:
05:2f:7d:57:9a:65:82:cc:57:e0:6c:06:2e:bd:c4:2d:e6:bc:
e4:dc:9f:d5:f3:ba:97:63:b6:a1:77:f5:32:2e:03:b4:77:f9:
aa:74:62:1f:24:d8:26:40:68:1f:66:33:43:89:73:46:87:fb:
b6:24:7d:e3:d3:2e:09:9e:1c:80:a8:a5:76:e6:89:d1:dd:37:
a7:25:d9:cd:e4:81:f6:4d:45:84:70:b0:12:24:56:4c:70:c5:
b9:93:46:76:39:ce:01:cd:ce:3b:fe:d5:13:18:9e:4a:da:3a:
ed:d1:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:26:35 2026 by rpki-client