
$ rpki-client -vvvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
File: FE287030880D0123AC89374793BF7EEEFC18D5AE.mft (raw, json)
Hash identifier: 8FB38AcyBOpB5mqubS9JegdkGy4IRE1c4wnU79HrFQ4=
Subject key identifier: 13:A1:3B:C6:01:A9:7E:A6:2B:B6:3A:4A:50:8F:2E:5E:E7:4A:55:DD
Authority key identifier: FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE
Certificate issuer: /CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
Certificate serial: 576E12E68E9C3085AA881A0F79359D8626134C02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
Manifest number: 02F4
Signing time: Mon 26 Oct 2026 12:39:58 +0000
Manifest this update: Mon 26 Oct 2026 12:34:58 +0000
Manifest next update: Tue 27 Oct 2026 14:12:58 +0000
Files and hashes: 1: 3137302e38332e302e302f32322d3234203d3e20323636343534.roa (hash: VY9LG8qNoQVvocjM28PdqbNowgqymCJAN8aRr2OMGsk=)
2: 323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (hash: D5J1HFJsrxrH69rEn6ps23EZ8dZaQlr9Ev+gtiv+PBc=)
3: FE287030880D0123AC89374793BF7EEEFC18D5AE.crl (hash: 6zuLTCnf4eSJAiiU1ZdHFEq8Pl/NRbpVw4s6NTcWNbI=)
4: 3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (hash: oIjIBsMDlCdzVrNK8RQ32GVr3QlO9p6Ay7IAC2kjZm8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl
rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Oct 2026 14:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6e:12:e6:8e:9c:30:85:aa:88:1a:0f:79:35:9d:86:26:13:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
Validity
Not Before: Oct 26 12:34:58 2026 GMT
Not After : Oct 27 14:12:58 2026 GMT
Subject: CN=13A13BC601A97EA62BB63A4A508F2E5EE74A55DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:00:1c:c4:1c:8e:ba:42:29:3f:17:cd:47:
a1:3d:8f:e8:98:ff:b4:18:43:4d:a0:ae:53:75:de:
42:50:e3:63:00:e9:9e:21:5a:45:6c:5d:db:c4:da:
e4:da:4e:a4:72:b0:9f:c3:fd:ac:b4:b1:4f:98:34:
01:c5:90:35:9d:3d:c1:3d:d8:ca:cf:d9:d1:99:74:
6e:9b:eb:8e:25:31:d0:a5:44:6d:55:e3:5b:89:74:
cc:f2:87:25:0e:b2:07:c4:73:49:5d:8b:76:be:9c:
e4:a1:4e:21:54:60:75:ce:f8:3d:12:5e:32:9b:e5:
6b:ad:61:4d:93:96:91:16:36:89:86:e6:05:98:0f:
76:a7:1c:be:4c:77:42:1a:b0:af:2f:22:21:66:41:
94:b5:b5:c0:61:54:c3:d2:5a:1a:a5:32:e0:8b:77:
38:a5:27:75:2b:85:cf:4a:9a:ea:45:42:78:c4:39:
25:29:91:c8:5f:19:bd:ab:03:c3:02:75:05:5e:d8:
01:b7:ae:84:52:5d:10:4c:02:c6:2e:ff:fb:f6:c8:
81:2d:5b:74:e3:eb:e7:9d:2d:82:59:fc:18:5d:e7:
7c:50:15:b1:ae:b2:5a:bc:b6:93:bd:5d:a2:76:c1:
23:38:87:89:55:e4:97:a4:b8:d6:03:92:fb:c5:e2:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:3B:C6:01:A9:7E:A6:2B:B6:3A:4A:50:8F:2E:5E:E7:4A:55:DD
X509v3 Authority Key Identifier:
keyid:FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:e3:09:c0:c0:be:4c:5c:69:c1:42:21:0e:62:55:18:0d:
ce:c4:11:9a:af:38:66:7a:d8:b4:b4:07:4f:29:ad:8c:18:b3:
f1:71:6d:d8:82:2a:fd:82:f5:79:27:b5:2f:b4:ba:08:16:29:
d5:1f:87:be:10:fe:98:4a:6e:1f:1c:78:7b:18:07:0d:c8:87:
40:bf:9f:28:77:a8:98:85:98:88:64:47:e4:a3:87:f4:42:51:
f5:a7:ca:40:07:c7:c3:b3:c3:2d:ce:ac:47:49:b2:b6:58:b6:
7b:45:8f:5c:36:ed:54:f9:54:69:4d:e2:ba:26:8c:ed:68:d8:
c1:e2:ae:ba:86:80:89:b8:94:26:50:0c:f8:3c:3c:1e:7e:04:
8e:12:47:37:b4:9a:c1:5d:b7:b4:ce:04:9e:b7:0e:f4:aa:23:
f6:45:73:f9:1e:6b:5e:31:cb:ff:64:a4:f6:46:b0:fd:54:78:
9b:01:e7:0e:83:0b:51:25:e8:0f:3f:f3:c5:1f:be:65:e2:45:
ea:ec:37:b7:a3:23:cc:e3:8b:f1:98:d5:e8:fc:cd:f4:35:ba:
5b:15:d5:34:30:af:99:1f:f5:b5:1d:a4:1d:93:2e:c7:60:df:
5a:63:37:10:96:46:33:8a:b6:b3:9c:ba:9a:b3:1f:fd:1c:45:
d9:f6:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:49:56 2026 by rpki-client