
$ rpki-client -vvvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft
File: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft (raw, json)
Hash identifier: w51kvJeiEBOgeAgXzAzxEDdT36DSd2IbnbEHZEtz6vk=
Subject key identifier: AF:E7:35:BC:24:A8:30:16:9E:DC:08:45:C1:01:59:71:21:84:B7:B5
Authority key identifier: 21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1
Certificate issuer: /CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1
Certificate serial: 711370BC1740AF21FBAA0E984596F926A2EC17D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft
Manifest number: EA
Signing time: Wed 04 Nov 2026 15:36:08 +0000
Manifest this update: Wed 04 Nov 2026 15:31:08 +0000
Manifest next update: Thu 05 Nov 2026 16:51:08 +0000
Files and hashes: 1: 3137372e33382e3138342e302f32312d3234203d3e203532373538.roa (hash: 3GyCzw9okLmCV3Lo5NKPmIHHgFYBF0+I3/BzpS37XJo=)
2: 323830343a6233383a3a2f33322d3438203d3e203532373538.roa (hash: yFx3ehbs6kD1O83Pz1zQ+DNga8Y7rEsJ/HhUCporP4Y=)
3: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl (hash: E2ybzCyGlS02pO6izlsKfXkNdlFw2zSwyxXtEeeXq6U=)
4: 3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa (hash: C3+R5TJjILqRWqKKZFKMcGNRlcVwLelyy+SPnF/wG10=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl
rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 05 Nov 2026 16:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:13:70:bc:17:40:af:21:fb:aa:0e:98:45:96:f9:26:a2:ec:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1
Validity
Not Before: Nov 4 15:31:08 2026 GMT
Not After : Nov 5 16:51:08 2026 GMT
Subject: CN=AFE735BC24A830169EDC0845C10159712184B7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:70:38:c5:1a:7d:28:ea:0d:f4:5c:70:0b:
12:4e:c8:72:2a:68:4c:0e:a7:57:80:9a:d3:16:33:
8b:da:f9:d1:24:a2:d1:d3:fe:de:59:86:4c:16:a6:
71:b1:e3:a8:f3:1c:4d:e6:63:6d:c6:e1:ce:0b:30:
e0:24:67:ee:7c:23:7f:59:87:55:25:c2:31:08:16:
90:ce:b7:e9:75:dc:8c:59:2a:54:13:e2:03:38:ee:
63:a8:87:7a:02:c1:3a:73:81:b2:20:5e:75:b9:cf:
84:1a:d3:d1:63:fb:8b:57:b1:54:ce:ed:77:ac:35:
85:9a:a7:bf:3a:07:e1:f1:11:3e:a3:72:af:d9:34:
6d:09:ec:42:8f:ab:1c:31:63:5a:c4:f6:80:d4:9d:
c9:3a:ff:5f:ec:04:e7:00:7e:0e:2a:c7:98:e8:4a:
0f:cf:14:06:f6:ad:5d:90:19:5d:c9:cf:33:9f:4a:
5d:88:e4:ad:d9:11:86:26:ee:f1:35:5d:03:71:84:
b2:a4:af:eb:66:01:f0:9d:33:cd:98:af:a9:10:b6:
52:70:c7:9e:45:41:b2:d4:03:22:cd:75:b5:c0:e0:
3a:2e:fb:2c:83:8f:d4:13:13:0f:e8:b5:c8:ec:be:
75:fd:a1:87:6c:68:db:6a:ca:7d:51:82:16:9d:bd:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:35:BC:24:A8:30:16:9E:DC:08:45:C1:01:59:71:21:84:B7:B5
X509v3 Authority Key Identifier:
keyid:21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:16:85:6d:4e:c3:2f:91:89:65:ea:a0:f9:ce:6f:e3:4a:41:
cd:2c:71:ac:39:fa:93:1c:8e:9a:82:04:13:3c:35:70:2f:67:
de:a2:83:60:5a:f1:f3:b5:ad:b1:2f:b2:ae:da:ab:65:45:5f:
26:d3:c4:b8:7f:de:66:5d:9e:d7:fe:14:c6:7a:f7:76:b7:86:
05:ca:80:04:40:d7:e1:ff:a5:87:5c:42:90:03:8b:ff:92:cc:
c3:4f:f2:a0:5a:29:08:ad:df:11:3a:17:60:2c:60:11:ec:c6:
e0:50:af:88:16:27:b1:08:ae:da:d2:7b:87:ea:79:1a:62:11:
b4:3e:84:10:b2:24:27:d3:de:40:50:7f:b3:bc:39:be:50:be:
af:ef:03:6e:b6:7f:8f:2e:32:66:c9:c3:b9:e8:25:18:e5:1c:
28:24:43:25:48:4b:23:f6:54:dc:88:9a:07:55:1d:2f:0c:dc:
5b:cd:51:d6:34:78:74:7f:f6:21:3e:db:43:48:8a:c6:3e:83:
23:e3:34:9a:0b:2c:2e:1a:40:45:c6:19:11:f4:a5:71:6e:1d:
d0:a6:37:1f:5d:72:20:c3:fb:01:f3:fb:fa:1c:69:23:d1:3a:
ab:e9:33:c3:fe:cc:1f:8f:c4:70:fb:6e:12:85:66:3f:16:93:
d3:e1:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:33:59 2026 by rpki-client