
$ rpki-client -vvvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json)
Hash identifier: w4objaF1BQGZWN5mOVjEg5YozKnlUAsWPtAyGXiWZt8=
Subject key identifier: 6B:E5:9A:DC:C9:EE:C8:1D:0E:0C:D1:C3:02:A5:57:69:C5:B8:FA:3C
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial: 4CCAAD04C101CB254B535791095DD364C0D0DA40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
Manifest number: 04ED
Signing time: Sat 31 Oct 2026 19:18:46 +0000
Manifest this update: Sat 31 Oct 2026 19:13:46 +0000
Manifest next update: Sun 01 Nov 2026 19:32:46 +0000
Files and hashes: 1: 3137372e3232322e3233392e302f32342d3234203d3e20323633343030.roa (hash: OlkhDobD0Owi/4RHJOQRuKterSTFKEj2VXrI7e78/JQ=)
2: 3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa (hash: s8p6tSQZ5gNrNuYiJwIJIPfXIrQ0NQhOP+2qe6OmpBU=)
3: 3137372e3232322e3233372e302f32342d3234203d3e20323633343030.roa (hash: Bg/8XYKDGhDJ9pDdVaRRCcLJAs5jIp/e5kGU9QLtnxM=)
4: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=)
5: 3137372e3232322e3233322e302f32312d3234203d3e20323633343030.roa (hash: R9ZUWZJxRYdbDnFhmxy3sdN9DH3BiSyX7rkhu43L3vU=)
6: 3137372e3232322e3233382e302f32342d3234203d3e20323633343030.roa (hash: sVPgeZSbfMKUyp/lI0l42QwHbebVnR3ce3wS0vKwq8Q=)
7: 3137372e3232322e3233352e302f32342d3234203d3e20323633343030.roa (hash: Md+NU5EtuptaLIiiQs9ZzP9unKgUBzBWnFeQNXCUXhU=)
8: 3137372e3232322e3233342e302f32342d3234203d3e20323633343030.roa (hash: VIdfFMlwRBzsTSGmVily5LU+ilQKl2vN5dD2tvram9I=)
9: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: ZqkwPACFPvAOhq/Egfy76kC2HqwbAAaZ2FVxh9uZX6A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 19:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ca:ad:04:c1:01:cb:25:4b:53:57:91:09:5d:d3:64:c0:d0:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Validity
Not Before: Oct 31 19:13:46 2026 GMT
Not After : Nov 1 19:32:46 2026 GMT
Subject: CN=6BE59ADCC9EEC81D0E0CD1C302A55769C5B8FA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:ab:58:0f:7a:19:03:1e:15:97:84:cd:dc:
43:c4:f0:de:46:4f:3b:b9:66:39:fb:73:50:1f:71:
ea:bd:21:2b:38:a2:63:d4:41:b0:a6:ff:a6:85:af:
29:30:d3:50:d3:7e:39:90:be:b0:80:af:a7:00:66:
33:b2:c9:71:dc:fa:08:dd:49:53:50:ba:06:ed:16:
45:53:4e:42:5e:02:5d:c8:45:f6:7f:7d:61:89:bf:
2a:13:93:58:ab:7e:14:25:f7:33:d6:75:a4:55:b6:
ff:c4:b1:3c:cf:dc:40:46:52:b7:cd:62:76:91:71:
92:bc:88:8e:e1:23:60:c8:d2:91:6b:b9:de:ba:71:
9b:1b:d2:be:dd:90:f7:ed:cf:d8:8d:bc:dc:18:a5:
f2:17:2b:8c:97:1a:bf:1c:3c:49:a9:0f:ce:ae:f7:
bf:d1:d2:7b:5f:19:60:c6:d5:ac:e6:69:bd:7e:1a:
7b:1c:07:7d:a4:9b:c3:dc:33:5c:8f:7c:a8:2f:76:
82:6a:df:b9:e1:49:e7:f9:7f:81:41:84:99:c1:03:
10:a9:77:5b:b7:6b:4b:f5:8a:36:f2:7c:e3:bd:8c:
2f:65:5d:c6:c6:8c:8c:6f:2d:eb:15:f7:73:0f:ea:
ae:8f:ef:87:dc:85:a3:23:a8:24:33:09:a1:13:1d:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E5:9A:DC:C9:EE:C8:1D:0E:0C:D1:C3:02:A5:57:69:C5:B8:FA:3C
X509v3 Authority Key Identifier:
keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:b1:1d:4f:9d:3e:4d:bb:5f:eb:89:9f:82:d5:76:68:be:
b6:ec:cc:a2:ee:b6:24:c9:af:e7:3b:93:8b:53:35:ef:0a:b1:
f1:96:a1:78:21:06:a9:48:ef:85:b7:ef:6f:83:3a:1d:8e:d3:
a9:84:01:d0:30:ae:0c:fd:1d:f1:df:15:55:bf:7f:aa:8a:1d:
42:b3:39:9b:08:e4:ad:20:cf:a4:a9:0f:6a:8e:05:42:48:5b:
4f:28:fe:e6:05:9a:00:da:c1:90:b4:5a:8f:55:b8:79:9b:de:
82:8a:4a:84:ec:42:0f:4e:c0:aa:6a:ab:4f:4c:0e:c1:65:be:
33:39:19:86:87:08:3c:e9:3b:8c:ab:e5:01:eb:80:dd:31:74:
19:97:00:3a:16:34:a0:fe:5e:6e:d6:02:54:2f:fb:8b:ca:c6:
8e:90:be:99:cf:e1:5b:c6:bb:01:dd:10:db:08:43:af:53:8e:
e3:89:e1:39:b0:7f:4b:f7:e4:24:a7:75:86:05:1d:f3:33:42:
3e:f8:6e:ec:75:e9:83:b1:41:e8:ce:48:9b:bc:e4:ee:40:d7:
6e:de:0b:e2:f7:d1:40:7f:09:04:46:31:af:8e:be:8e:3d:b7:
7a:44:81:86:b1:57:25:61:00:83:49:a3:fb:e5:5e:ff:c0:6c:
ac:bf:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:29:49 2026 by rpki-client