
$ rpki-client -vvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
File: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft (raw, json)
Hash identifier: hh0Vc09t9HgEeKTlZtQWOC96owaRILid5Jy/KqkjeGU=
Subject key identifier: 18:EB:FF:CF:1E:35:91:96:3C:E2:3D:2B:C1:38:D7:D4:56:1C:61:4E
Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
Certificate issuer: /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Certificate serial: 3FB1B553E59D7AC94D24F98B291FD9852525D212
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
Manifest number: 03A2
Signing time: Mon 02 Mar 2026 09:57:33 +0000
Manifest this update: Mon 02 Mar 2026 09:52:33 +0000
Manifest next update: Tue 03 Mar 2026 13:39:33 +0000
Files and hashes: 1: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: jlLzwxWLTfsMst6DSIjvNKvp466a7Vvec48Ngs6mVOI=)
2: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl (hash: 4RLBLn1PKiiU3pYkJVjgHipOVOwfgqbvYvhQx1B5PJk=)
3: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: I8k9lNineL+fGEvlxjqpRKtI3gWOzWc8TsBSfBCOrvU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:b5:53:e5:9d:7a:c9:4d:24:f9:8b:29:1f:d9:85:25:25:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C
Validity
Not Before: Mar 2 09:52:33 2026 GMT
Not After : Mar 3 13:39:33 2026 GMT
Subject: CN=18EBFFCF1E3591963CE23D2BC138D7D4561C614E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:77:12:7a:2d:a0:49:e6:b1:de:0c:b8:f2:
03:85:b9:8e:28:85:3a:55:1d:50:c8:e4:bc:ab:ba:
15:7f:94:cc:95:0f:ca:d0:f1:4b:8c:2b:3c:ca:f4:
2b:72:59:d6:88:2a:68:5e:1a:0b:e8:fd:9f:10:03:
f6:87:ec:80:15:3f:25:61:8e:48:25:62:52:d6:37:
69:11:3f:29:2a:87:f2:c6:c4:25:49:35:25:93:ce:
3d:ff:53:70:c6:3c:df:07:0a:d8:57:30:e7:21:43:
20:3e:d9:7f:cb:9d:d4:06:ec:5b:1e:2e:af:7d:90:
15:bd:36:7b:54:51:12:32:0d:aa:4f:19:d7:45:4f:
c1:de:07:07:95:8e:53:58:24:3e:52:2e:b8:00:59:
48:68:a2:6e:e4:50:97:03:69:d5:38:a8:33:99:06:
1f:ad:dc:5f:dd:29:61:40:9c:08:a1:88:fb:35:d9:
07:2f:b3:bc:07:d6:25:da:13:85:37:d2:c5:0a:9d:
21:1e:5d:68:37:06:25:19:40:46:72:d6:ed:44:85:
16:18:80:90:e3:5c:78:9e:9b:12:c3:88:9c:2b:59:
ff:1f:35:86:68:04:4f:9f:52:3b:a4:d2:db:11:b7:
3b:a9:dc:ab:9d:f7:a3:f9:14:55:da:1b:b8:b0:b4:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:FF:CF:1E:35:91:96:3C:E2:3D:2B:C1:38:D7:D4:56:1C:61:4E
X509v3 Authority Key Identifier:
keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3c:9b:7e:44:95:10:21:f5:af:f6:b6:a6:06:29:c1:da:21:
58:c5:bc:72:90:72:b4:ab:6e:50:2d:17:32:0a:2d:d6:9c:52:
35:fb:fa:2a:12:7d:e4:86:df:95:03:32:af:e4:77:1d:d1:3c:
6f:6c:9c:c8:13:ed:d1:84:18:13:87:f1:77:b7:3c:ae:eb:3c:
88:d3:e7:1e:cf:df:66:7c:f5:fb:ff:28:b4:78:ab:88:a6:a7:
10:00:6c:73:be:f5:82:a7:db:86:1d:75:fe:63:22:b1:58:e5:
0e:0c:28:83:ce:9f:22:76:90:da:c0:f6:fb:24:5b:a9:2a:8d:
67:76:64:be:32:d1:91:d4:3e:10:b4:46:60:2f:14:47:01:d0:
3b:d7:74:09:d8:97:fe:68:69:c3:b5:96:50:80:6a:bf:cc:96:
90:c8:fe:e5:bb:15:68:54:1c:6b:a3:c2:d6:e8:88:26:c3:ae:
d1:82:31:32:8c:d0:ae:31:08:53:18:28:fc:6b:77:fe:94:dd:
62:ba:77:c6:2e:a6:f3:61:e2:8f:81:ab:b0:5a:e0:ca:eb:31:
73:26:2a:97:56:92:23:da:87:83:58:8b:74:20:46:0f:10:4a:
2b:9c:9e:75:aa:dc:34:bb:6c:ed:47:5b:d3:d9:95:c2:f6:99:
64:c1:44:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:56 2026 by rpki-client