
$ rpki-client -vvvf rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
File: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft (raw, json)
Hash identifier: Htqv1FEzz6i5+LRtWVfoJ08tdPxb92wg0HOOl+MTYYE=
Subject key identifier: B5:F5:58:5C:70:25:1F:1B:83:67:05:F2:E3:1E:B0:87:DA:81:BA:51
Authority key identifier: 21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95
Certificate issuer: /CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295
Certificate serial: 745763F18BDE6608D143E217A4F7EDBEB7CE9611
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
Subject info access: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
Manifest number: CA
Signing time: Sat 17 Oct 2026 02:23:34 +0000
Manifest this update: Sat 17 Oct 2026 02:18:34 +0000
Manifest next update: Sun 18 Oct 2026 04:01:34 +0000
Files and hashes: 1: 323830343a366238343a3a2f33322d313238203d3e20323730343035.roa (hash: 2ozPd5FcOpRP8Pf6OP7xrYk6TvnS6a/F3RrN6QnExKo=)
2: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl (hash: DoWSynxFC5UeosmWCrwNg0vk+4U1bQcL+5O60XhCMzI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl
rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:57:63:f1:8b:de:66:08:d1:43:e2:17:a4:f7:ed:be:b7:ce:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295
Validity
Not Before: Oct 17 02:18:34 2026 GMT
Not After : Oct 18 04:01:34 2026 GMT
Subject: CN=B5F5585C70251F1B836705F2E31EB087DA81BA51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:d2:6a:7c:b1:3e:7d:fb:2d:9d:db:1c:e9:
04:b9:80:12:16:bc:9a:8e:fb:b1:24:75:b0:3c:27:
f1:cd:52:4d:61:ff:e9:93:09:73:45:09:39:6e:8a:
84:c6:f0:b5:59:b7:e1:35:72:5b:3b:ab:7f:6c:76:
96:10:98:36:81:fc:a4:e3:1d:cc:f4:a0:3d:f7:b3:
d9:0a:64:e5:29:68:1c:3e:1f:50:73:19:69:40:98:
0f:f1:31:06:a1:9a:11:69:df:c2:cd:d5:b6:11:0b:
dc:00:77:d0:3d:30:92:ce:90:f0:46:66:2f:ee:af:
50:59:c0:67:2e:05:75:81:35:32:bf:db:60:ff:78:
47:85:57:b8:a8:be:76:ed:0c:70:b0:a4:8f:66:74:
de:6d:02:be:09:85:37:6f:89:62:4d:75:f0:57:12:
14:cb:c5:32:cd:01:55:1d:77:84:5f:48:95:44:85:
36:88:a9:79:3b:98:f7:6e:0c:fa:63:04:66:6d:04:
4c:3e:f3:a3:e5:ed:ab:0c:ab:83:be:f9:ce:a2:e7:
db:64:b8:0e:b8:de:38:08:7f:09:40:0a:c8:fc:26:
b3:3a:6d:02:a8:16:e3:20:be:99:67:31:a2:fd:7a:
ad:76:a3:6c:4a:06:94:66:91:af:a3:2f:bd:fa:a4:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:58:5C:70:25:1F:1B:83:67:05:F2:E3:1E:B0:87:DA:81:BA:51
X509v3 Authority Key Identifier:
keyid:21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:84:c9:91:8a:b0:db:08:32:e3:f9:e9:6e:93:37:f4:e7:0e:
4b:de:4c:b2:0f:76:19:f0:a2:d2:53:f9:ee:27:3b:42:6d:1b:
33:db:0c:d2:3c:4f:32:81:0d:fb:0b:63:e0:bf:b0:a3:d2:e8:
8b:7c:d8:65:45:5d:80:aa:7b:2e:e8:c3:28:f2:da:bd:a9:53:
f3:56:ca:93:ba:b0:f1:77:a8:b0:01:57:51:fa:cb:a7:9f:91:
84:da:65:67:b8:08:d6:c3:af:0d:e3:1f:ed:89:0f:03:5c:12:
7a:6d:b1:65:54:87:94:4c:8d:2e:31:52:49:ba:5b:ec:03:d0:
ab:fd:72:59:84:3a:63:8b:ec:d4:71:fb:30:9e:c6:62:36:dc:
df:10:9c:d6:b9:32:c5:95:2f:ba:1e:9a:6c:03:86:88:b3:1d:
50:3b:ba:a5:53:bf:17:bd:34:b7:3b:56:bb:64:ee:32:01:8c:
81:8c:e5:f6:2e:50:f5:1e:c9:25:17:0a:16:98:d8:1e:3c:47:
84:9f:02:11:aa:49:3a:21:c9:05:a4:20:ea:1c:8a:12:c3:8e:
e8:f3:5e:e9:81:e0:61:0f:25:a3:90:3a:85:ca:86:94:c2:ef:
1b:a0:4a:ba:da:e8:25:1f:19:1b:1b:51:13:75:45:ef:ca:85:
ef:22:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:35:19 2026 by rpki-client