
$ rpki-client -vvvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
File: 2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft (raw, json)
Hash identifier: 3tktSAc9GvicUJJLdkdXg8LcoGUxdqC8iq5gWMHU7WY=
Subject key identifier: D1:4B:7F:3A:A6:1B:16:DD:36:A8:0E:5E:EB:BE:76:BC:EC:25:52:E8
Authority key identifier: 2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
Certificate issuer: /CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Certificate serial: 5F2FEAAB87AAB8B1C6099EC7FFFC82EA9B357DEF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
Manifest number: 0183
Signing time: Sat 31 Oct 2026 19:57:51 +0000
Manifest this update: Sat 31 Oct 2026 19:52:51 +0000
Manifest next update: Sun 01 Nov 2026 23:32:51 +0000
Files and hashes: 1: 2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl (hash: hMYGUR4Sb0lUbW0k8OUdxmheWLmak7Dhp/Wiqqw4TOw=)
2: 323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (hash: 2SO6QSBGyBlimyPTsuFW5fiFM0SEVXclucf8ertVkmQ=)
3: 3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (hash: Mor/AX9x3PD93JwVYU649U4lY58zvYUpWPLIEVgiRAo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 23:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2f:ea:ab:87:aa:b8:b1:c6:09:9e:c7:ff:fc:82:ea:9b:35:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C
Validity
Not Before: Oct 31 19:52:51 2026 GMT
Not After : Nov 1 23:32:51 2026 GMT
Subject: CN=D14B7F3AA61B16DD36A80E5EEBBE76BCEC2552E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:1a:f3:4e:98:1f:ce:10:b6:c0:e7:ab:53:
a3:51:d6:45:54:e4:8b:0b:8b:8f:b2:f2:53:ed:a2:
17:04:82:f5:c6:bf:d7:b9:d1:f9:5f:25:a3:cf:39:
d9:28:90:60:3c:54:6d:6d:30:56:9e:70:a2:7e:dd:
4a:db:5a:ed:1b:09:4c:ef:6e:2a:d4:9e:18:10:d1:
94:c3:a9:c2:20:50:c0:66:e7:0b:71:dc:ef:b1:08:
ef:5d:77:3a:75:bd:42:62:99:92:d6:71:1c:8e:cc:
a8:23:e3:ec:65:d7:92:bc:fe:97:24:31:d5:15:b5:
18:a7:73:e3:28:00:9d:89:f0:9d:ee:72:f7:05:70:
da:08:f0:de:c8:0d:0a:b1:71:0b:97:b9:00:81:31:
2b:ab:86:69:99:93:83:49:3b:c6:5f:d1:95:04:e9:
b5:54:f8:8f:7d:23:05:76:0c:c8:22:df:9b:8a:ad:
d4:a5:04:89:61:42:e3:50:ab:ab:f0:c6:81:91:96:
b4:e2:39:b5:fe:d1:d0:22:9b:45:e9:8c:c2:dc:41:
77:63:c4:e8:fe:9d:4c:f3:7a:f9:15:28:b1:96:17:
23:b2:5e:18:28:42:71:05:9e:32:12:61:da:aa:19:
9a:ac:05:87:29:ce:e1:85:5b:ae:58:e9:6b:b4:3e:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4B:7F:3A:A6:1B:16:DD:36:A8:0E:5E:EB:BE:76:BC:EC:25:52:E8
X509v3 Authority Key Identifier:
keyid:2D:55:01:BF:A7:D7:EF:AD:FE:71:E9:E5:C4:5B:C8:D3:92:40:88:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/2D5501BFA7D7EFADFE71E9E5C45BC8D39240887C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:42:48:54:9d:fa:21:4f:0d:ac:dc:4a:67:3c:38:a1:1e:ca:
71:09:eb:09:26:2f:e0:94:41:d8:8f:c2:64:67:86:84:c6:ad:
5e:3e:24:04:db:e2:63:35:71:d7:0a:49:d5:e1:d7:56:59:53:
47:9f:d9:94:7e:7c:43:9c:24:41:77:59:d2:1b:60:33:69:56:
b2:97:c3:a9:ac:bc:53:eb:d6:2d:b6:e9:ec:3b:42:5b:ef:b7:
df:58:76:87:2e:0f:55:0c:de:82:36:63:70:89:ea:22:d3:ed:
6b:44:ab:a1:e8:28:3d:dc:af:be:1d:2e:2b:92:87:66:5f:d2:
93:a1:c3:37:1a:6f:88:6a:96:13:69:b2:e8:d5:02:ba:2f:1a:
9c:fb:16:15:b3:d5:a6:5e:bf:13:65:9b:02:6f:6a:04:b0:d4:
21:ce:e2:1a:8e:9f:35:80:8e:5d:48:34:33:cb:17:f9:a3:77:
84:bd:90:91:30:a3:c6:bc:cf:07:e4:91:30:8b:4d:ef:70:a4:
68:ee:c3:dd:03:cd:cd:24:47:c2:fd:09:6c:45:d8:29:17:df:
0e:52:c3:ed:3e:1b:81:fc:22:d5:55:d0:ab:a5:95:f5:7f:90:
63:b5:20:2d:dc:f0:02:80:6b:dc:c0:3a:e1:1e:3a:06:0d:a0:
99:7e:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:59:34 2026 by rpki-client