
$ rpki-client -vvvf rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
File: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft (raw, json)
Hash identifier: yDBtsFzPymigDigmg7d+quSaoLoqWW9pKJipXzJKJvs=
Subject key identifier: A3:6E:EA:8D:F6:48:3B:F7:B0:F7:B7:A4:D7:C7:25:DE:64:CB:28:38
Authority key identifier: 21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95
Certificate issuer: /CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295
Certificate serial: 1BC0C2DCA335D02F25B7DB7BBC83241EE4A85508
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
Subject info access: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
Manifest number: 81
Signing time: Sun 23 Aug 2026 04:36:25 +0000
Manifest this update: Sun 23 Aug 2026 04:31:25 +0000
Manifest next update: Mon 24 Aug 2026 06:55:25 +0000
Files and hashes: 1: 323830343a366238343a3a2f33322d313238203d3e20323730343035.roa (hash: 2ozPd5FcOpRP8Pf6OP7xrYk6TvnS6a/F3RrN6QnExKo=)
2: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl (hash: KY8s+QoKsY/wmijqOri+zqlWtPLUMR5KJUyIpi0gXOA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl
rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 06:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c0:c2:dc:a3:35:d0:2f:25:b7:db:7b:bc:83:24:1e:e4:a8:55:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295
Validity
Not Before: Aug 23 04:31:25 2026 GMT
Not After : Aug 24 06:55:25 2026 GMT
Subject: CN=A36EEA8DF6483BF7B0F7B7A4D7C725DE64CB2838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:c5:89:b9:4c:d7:0b:16:1e:2b:07:4d:cc:
c3:f2:03:7b:29:cf:57:e8:21:fc:1a:4e:0c:f1:44:
06:26:1b:d8:81:33:01:47:93:67:11:94:87:33:69:
42:0b:f4:ac:18:d0:ac:60:4a:70:c1:16:c2:c8:86:
53:f4:da:f8:57:5f:ad:f4:5f:67:d6:b9:de:fc:04:
4b:e7:1c:78:b4:fc:79:00:c1:e8:d6:80:df:ed:96:
ad:ec:c2:1e:78:39:88:68:e3:ae:72:38:67:53:e8:
ab:a4:15:93:5d:0a:36:c2:24:5e:7c:80:97:0d:7e:
f4:7b:5e:4e:ae:b2:ed:44:d7:0c:a3:13:0f:a2:3f:
dd:6e:e0:f0:21:da:a8:ce:2b:bb:c4:ab:70:b6:0d:
e5:10:e3:82:18:b1:99:cb:4b:b1:b5:5a:0b:a6:c3:
ba:fe:79:15:4c:9c:cb:12:10:47:4c:5e:cd:a2:8e:
12:a9:13:20:8d:cb:ed:08:dd:45:ac:f2:84:fe:34:
8b:f5:10:65:1c:c3:97:cd:b4:25:48:33:99:34:5e:
74:c3:9c:6b:9b:a2:4b:65:87:2d:ff:43:e2:f1:67:
eb:31:05:bc:53:fa:18:a8:ad:37:66:ad:3a:57:67:
3e:d8:65:d8:61:01:d9:14:83:c8:3b:ab:a0:d4:c9:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:EA:8D:F6:48:3B:F7:B0:F7:B7:A4:D7:C7:25:DE:64:CB:28:38
X509v3 Authority Key Identifier:
keyid:21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:48:06:1e:5b:df:3b:aa:d7:41:8f:f5:fa:cc:e5:b5:32:7a:
97:a7:15:96:b0:ad:47:7c:b5:c2:71:e6:3a:8c:e9:07:bf:84:
3c:30:e4:29:76:15:9c:ed:a6:b3:76:49:94:63:ad:96:72:7c:
79:98:a5:4a:5d:a5:3e:37:87:50:ce:8c:f5:22:d1:c3:b6:fa:
98:b9:31:ff:49:a0:1c:8a:f5:be:12:32:bf:24:17:a9:5c:51:
c9:b3:20:03:ec:cf:f8:ca:37:d0:ca:e7:00:56:90:01:7b:b4:
2f:32:7d:f3:74:22:ae:a6:95:3a:0d:4b:df:40:6c:18:f2:94:
b9:da:24:a1:58:9f:20:43:6b:ab:ff:d5:fe:3d:5b:cc:6e:bd:
ed:77:02:c3:b8:7a:db:99:cd:5e:af:0c:1c:3a:83:9b:86:9b:
58:94:a8:22:ed:fd:38:e7:fb:b8:10:82:1e:76:67:d3:d4:e6:
26:37:4c:6c:ad:10:94:95:ea:1b:53:4e:9a:62:7b:01:c6:67:
39:10:02:8e:17:b6:69:bb:aa:91:fe:97:99:99:62:05:13:bc:
35:af:fa:47:4a:7a:76:3f:ad:c7:94:0c:ec:d1:76:f9:45:32:
78:16:5d:30:6b:89:84:18:68:4a:d7:7e:2f:ac:f0:38:6a:0a:
9d:00:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:17:34 2026 by rpki-client