
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier: KpUhlOnchM52QcxIfR6CIwSsa8Q2Eh9cqh1gwyUaGcA=
Subject key identifier: AA:98:46:A0:E0:BC:91:71:52:A2:42:7B:FF:CE:C6:4E:E6:08:9D:B9
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial: 5EBF3B569A94CF1594D5F96A42DE4ADB176C39F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number: 02E4
Signing time: Sun 24 May 2026 09:14:07 +0000
Manifest this update: Sun 24 May 2026 09:09:07 +0000
Manifest next update: Mon 25 May 2026 11:04:07 +0000
Files and hashes: 1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=)
2: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=)
3: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: XG6czfFMSxkx9JzDivqXAC8Ekx39vRQo0pa51YEmp9g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 11:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bf:3b:56:9a:94:cf:15:94:d5:f9:6a:42:de:4a:db:17:6c:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Validity
Not Before: May 24 09:09:07 2026 GMT
Not After : May 25 11:04:07 2026 GMT
Subject: CN=AA9846A0E0BC917152A2427BFFCEC64EE6089DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:07:06:72:b5:0f:b4:f1:df:aa:c9:7f:8f:fa:
4f:c3:bc:b2:8e:e5:74:b4:1d:46:0a:1d:4a:48:58:
84:fb:eb:28:37:ad:1a:4d:ba:67:c7:7b:98:1d:bb:
e9:2b:eb:3e:29:a5:5b:de:f9:fc:cb:7c:2f:48:c2:
f7:55:4f:fc:79:f8:5e:4f:d1:6f:8e:e0:ae:ea:fb:
ff:a1:97:ee:a2:5c:ca:1b:cb:ff:c8:10:99:4a:a0:
f0:db:36:35:75:c6:a7:30:1a:77:c5:a1:f4:cd:5b:
30:de:8d:52:3a:2b:2e:b0:f1:91:54:f8:2f:52:c6:
7e:74:f7:bd:45:d2:1b:fd:5a:f7:08:d4:14:7a:49:
6f:42:77:46:11:25:71:18:22:bf:6e:65:97:77:fa:
da:a7:a2:60:da:f9:e4:e8:df:ae:dc:52:14:9d:03:
b2:4a:b4:cf:38:3c:24:20:8e:f2:6b:62:70:3c:2c:
89:f3:65:3a:48:d9:ba:1f:ea:41:e6:c3:40:8d:1c:
81:12:8f:3e:a0:c0:9d:ef:8e:b1:63:37:e2:12:9e:
b0:eb:bc:6b:53:3f:74:bc:f6:89:89:3f:89:ab:14:
cf:89:7c:16:f8:58:43:d5:f9:e5:e5:6a:3c:9f:8f:
47:15:04:5a:b0:37:98:a6:4c:16:e2:dd:e5:81:8f:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:46:A0:E0:BC:91:71:52:A2:42:7B:FF:CE:C6:4E:E6:08:9D:B9
X509v3 Authority Key Identifier:
keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0a:85:68:84:84:42:fa:72:e4:9b:cf:34:64:1f:d4:f6:a6:
ed:83:85:e1:28:6a:ea:04:dd:da:0d:00:55:58:72:5f:48:42:
91:61:0c:e9:9d:0d:58:c9:03:aa:ba:c8:81:d9:07:da:4a:d9:
1b:a3:52:84:2e:d1:c4:06:af:09:fe:6d:c8:0b:b7:2a:17:c3:
d3:d0:c3:d3:9d:0d:77:13:43:c6:2a:58:b0:8f:8f:5e:35:91:
1b:55:b5:05:e0:39:fb:cb:74:1c:34:12:b0:5f:e3:b2:2c:bf:
f1:49:06:9c:11:63:ed:f5:8a:40:5a:cb:a1:0b:ec:77:0b:b2:
c0:e8:f0:c2:67:ce:e9:7b:f6:a8:52:99:31:5e:31:cd:bb:9e:
8e:a8:83:23:36:34:42:ab:6f:ae:1d:7c:1d:f0:f9:d2:5f:dc:
80:8b:9e:42:10:a3:32:c0:9b:55:34:43:29:ba:ce:78:c7:1f:
b3:1c:e0:c7:62:92:27:07:6a:ec:ea:88:c1:e3:23:d8:e0:a4:
16:92:2a:ce:e3:01:69:a7:2b:45:1a:11:00:4e:ca:4d:1d:a9:
82:b7:6c:72:25:59:32:9b:ad:47:2b:1d:97:0e:23:50:33:3c:
bf:63:bc:fd:71:cd:80:4a:07:d0:87:f9:3c:13:53:63:5c:09:
53:38:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:30:21 2026 by rpki-client