
$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
File: 2D1EF950AB5C855E2D7C436153A72A554B109A82.mft (raw, json)
Hash identifier: FFeIml2DwCQ68/cbHoByBakTZPo7sj88p0shW8c2044=
Subject key identifier: 99:EB:A8:67:67:87:FA:53:B9:B3:8B:FC:E4:8E:76:BD:D4:F2:D6:2E
Authority key identifier: 2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
Certificate issuer: /CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Certificate serial: 4024DC8531D4806DFD52C04DF820A3AF2834A893
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
Manifest number: AB
Signing time: Thu 26 Mar 2026 07:47:37 +0000
Manifest this update: Thu 26 Mar 2026 07:42:37 +0000
Manifest next update: Fri 27 Mar 2026 09:40:37 +0000
Files and hashes: 1: 34352e3138302e3231362e302f32322d3234203d3e20323639313934.roa (hash: EleUzIZ2L1WjQrMkkSahgzdoaMB+XmS+wYmMHH4Uznk=)
2: 34352e3233382e3233362e302f32322d3234203d3e20323639313934.roa (hash: fIEnniI3ew2/ggMja7nrt2Lc8QnalEG6BVIWI89EiZQ=)
3: 2D1EF950AB5C855E2D7C436153A72A554B109A82.crl (hash: fxXMMIBjW5fDcPHzKL8LKgRZ7/NVyf7wvwrOkOm6e/s=)
4: 34352e3137392e3233362e302f32322d3234203d3e20323639313934.roa (hash: 9XKlOaXo1boKhZ8u6jhTAvFM1SYhtP3pxuiTKXEUgyc=)
5: 323830343a363064343a3a2f33322d3634203d3e20323639313934.roa (hash: C5FDVefJNQXuIZxOWfS/a5JxiA1PkR9WZm1zM84u5So=)
6: 3137302e3234372e32382e302f32322d3234203d3e20323639313934.roa (hash: DNsUeQBfgZ7LTHPxZgl1A65EbLDyfgKC9LJuWXuZ344=)
7: 3136382e3138312e3235322e302f32322d3234203d3e20323639313934.roa (hash: ilDFulKS4bBuP1yxoPhNPLm+sEHq1vZt/8rx4r/eGJo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 09:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:24:dc:85:31:d4:80:6d:fd:52:c0:4d:f8:20:a3:af:28:34:a8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1EF950AB5C855E2D7C436153A72A554B109A82
Validity
Not Before: Mar 26 07:42:37 2026 GMT
Not After : Mar 27 09:40:37 2026 GMT
Subject: CN=99EBA8676787FA53B9B38BFCE48E76BDD4F2D62E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:79:b5:c2:ef:b8:cd:64:c7:56:dd:a2:3e:
7f:33:d6:de:4d:7e:0e:83:ed:69:63:23:1f:db:61:
26:25:51:f8:02:19:67:5b:35:38:78:3d:8c:36:7c:
5c:d6:76:93:10:32:a9:d5:d2:41:be:cb:31:d7:b0:
57:a2:47:f8:12:44:a3:a2:93:18:2c:68:9a:f0:53:
dc:9e:9f:16:7a:bb:36:32:71:39:45:c8:63:fe:4b:
82:46:ad:42:3f:82:2f:d8:6b:af:bd:32:c5:2e:e2:
56:5a:c1:2a:05:ec:fb:db:a8:73:c0:86:1b:db:12:
9a:48:0a:1a:e1:5a:e0:64:7b:c6:a1:d3:0b:5a:e1:
a4:3d:b6:20:a6:eb:ee:1b:96:95:9f:92:21:06:5c:
8a:45:8f:20:64:49:f0:a9:9b:4b:19:1c:d2:89:e3:
2c:4a:e9:33:7e:51:5f:23:e2:7a:56:60:fa:7a:6c:
6f:a6:dc:89:14:0f:d3:af:fe:be:7b:b7:af:b6:fe:
ec:32:d2:ee:ab:f9:2f:a5:a0:c3:c9:27:1d:df:12:
98:10:70:f9:1f:42:15:26:45:ff:ee:b7:52:68:4c:
90:4f:69:64:84:e0:08:8c:e9:43:ed:86:0e:d8:4d:
58:f4:7b:4e:60:6d:c4:59:2b:1d:80:f4:64:01:79:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:A8:67:67:87:FA:53:B9:B3:8B:FC:E4:8E:76:BD:D4:F2:D6:2E
X509v3 Authority Key Identifier:
keyid:2D:1E:F9:50:AB:5C:85:5E:2D:7C:43:61:53:A7:2A:55:4B:10:9A:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1EF950AB5C855E2D7C436153A72A554B109A82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/2D1EF950AB5C855E2D7C436153A72A554B109A82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e3:4a:be:6c:97:4a:85:e6:d1:5c:42:52:17:ad:88:59:fd:
5b:6e:1f:ac:2e:67:fb:e0:a4:81:f7:66:a4:25:e4:d1:84:7c:
cb:fc:df:c7:a6:a1:4f:b0:cc:bf:41:b8:4f:f2:58:93:c9:c4:
95:fc:b7:1a:70:54:f7:d9:bd:94:da:64:70:9c:d9:66:0c:25:
02:9d:a8:48:ba:9d:de:67:5a:b9:b6:d3:a3:b4:e3:fa:97:61:
e7:30:77:9c:7d:c3:48:4d:00:b8:0f:78:e9:1d:fd:88:28:19:
0f:e4:27:2c:c7:19:2f:36:8e:d7:17:63:a4:99:6e:38:8b:e9:
ae:e2:57:a5:8d:31:76:5d:4e:2d:6d:75:04:1c:3f:54:e0:64:
62:40:8c:2f:fe:47:c4:54:0b:51:b5:0b:00:7d:1d:a5:78:5e:
72:e4:8b:eb:19:8e:ed:86:6c:35:53:07:b4:80:97:6e:76:f0:
45:b4:34:5e:1d:83:0d:16:dc:4e:9b:ce:be:fb:52:42:32:ff:
7f:6a:1d:15:fc:42:b5:75:06:64:92:fd:38:49:9d:55:2b:97:
7c:c8:34:b7:24:f7:fb:24:af:90:18:2f:e6:4e:23:c1:1b:3a:
9a:45:89:5e:be:c6:e5:2d:82:69:9a:07:0d:57:55:64:50:07:
1c:bd:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:15:24 2026 by rpki-client