
$ rpki-client -vvvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
File: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json)
Hash identifier: QHmsd2tj6ANUq/Md49oFoiB8Dowf/w7Z5lgTkRbL7NE=
Subject key identifier: 16:91:C2:70:9D:CA:88:F5:FA:13:EA:BA:D5:52:11:FE:30:20:95:5B
Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD
Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
Certificate serial: 3755C42015BBB07C31EDDAA4A2D5D8BDDB09C7F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
Manifest number: 034A
Signing time: Fri 30 Oct 2026 23:39:11 +0000
Manifest this update: Fri 30 Oct 2026 23:34:11 +0000
Manifest next update: Sun 01 Nov 2026 03:25:11 +0000
Files and hashes: 1: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: PIlRQltrUdhiGTMrlNBLmA0cy+LED9T3Iu4ZRFUOcso=)
2: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: co898g/e6gpNmTwkvo7w+mddSVtU8rvkvoxnhxCBmvQ=)
3: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: 8xbC7N1EqbvyODFhYmj4qGLva03wOfNghL1caIVNNt4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl
rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 03:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:55:c4:20:15:bb:b0:7c:31:ed:da:a4:a2:d5:d8:bd:db:09:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD
Validity
Not Before: Oct 30 23:34:11 2026 GMT
Not After : Nov 1 03:25:11 2026 GMT
Subject: CN=1691C2709DCA88F5FA13EABAD55211FE3020955B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:16:61:09:8d:8f:f6:cd:32:26:75:3c:43:
3b:17:af:d5:77:74:d9:96:43:7f:7f:d2:55:ca:a8:
7b:db:aa:45:5c:d6:f9:19:64:50:c0:b8:78:f9:5f:
1d:2b:4b:dc:4a:65:49:f9:b6:53:33:da:4f:05:e6:
bb:e6:27:de:b6:46:17:cd:fa:0b:48:15:de:d4:84:
b4:07:f5:34:1b:55:4e:f5:d8:c2:9b:48:2c:85:9a:
99:d9:fc:e5:02:f6:05:e5:a4:c6:03:db:8c:3b:81:
f1:23:8d:02:d9:12:29:96:0d:0f:45:5c:b5:9e:1b:
ad:14:f5:49:bd:16:e6:32:09:7c:69:0d:09:d3:4e:
f6:73:76:67:b0:11:21:ee:9d:aa:67:b5:7f:2f:cf:
cf:c4:8b:c2:6f:8b:aa:b4:1b:52:b3:93:93:8e:89:
17:b6:5a:30:c4:94:f2:c6:67:f7:68:5b:71:65:d9:
80:a5:e7:80:d1:be:98:2b:97:a8:a5:33:62:2a:d8:
c2:0a:50:b2:94:0c:28:8d:49:59:4c:42:a0:64:63:
95:ac:34:76:26:7e:28:66:73:6d:9b:14:5b:48:24:
ce:e8:e7:97:cc:35:58:1d:ee:be:e5:23:4e:b9:23:
8b:ed:57:cf:9e:e2:6b:fe:9a:0f:b6:5e:3a:a8:8b:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:C2:70:9D:CA:88:F5:FA:13:EA:BA:D5:52:11:FE:30:20:95:5B
X509v3 Authority Key Identifier:
keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:e5:b6:51:b7:54:c8:a1:82:d7:83:67:7c:9e:04:47:16:
f7:76:2e:db:83:a1:2e:2b:61:74:1d:71:61:59:da:77:b5:71:
d0:be:6b:c4:45:e4:20:22:de:ea:f8:c4:4a:6a:01:04:e8:bc:
95:e1:60:69:6e:8b:c8:09:04:af:f6:00:f6:3b:b6:10:d1:3d:
fb:cb:2d:5c:2e:73:34:19:10:76:d4:58:83:69:bb:0e:4a:ed:
1b:11:09:7d:18:0c:3f:80:82:ad:2c:21:4c:dd:0f:16:7c:4e:
31:a6:9f:bc:0a:29:fe:9f:3e:c0:7e:47:29:11:5d:71:73:92:
ee:df:22:3b:88:81:17:6b:d9:73:6d:ac:39:5c:7c:2a:70:b2:
1c:58:21:51:f5:04:b4:b4:02:09:bf:56:e2:fc:5e:b0:f3:bd:
74:4f:58:e8:d3:3d:62:b6:bb:e7:4d:00:fa:54:1c:09:b9:5d:
9c:04:2c:74:bf:79:1e:19:4a:56:57:4a:0d:74:2f:bf:a9:03:
ab:97:45:4f:1b:75:87:0a:92:e6:22:a7:32:a4:49:46:0c:86:
b3:98:18:b9:f0:bb:a5:c8:56:4d:42:37:37:5c:ed:ee:c0:20:
d8:af:91:fc:95:14:4d:43:26:77:6a:cc:44:e8:7a:ae:29:c5:
13:21:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:58:30 2026 by rpki-client