
$ rpki-client -vvvf rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
File: 1B2F08C5164B78E28A333599DD590FE906377257.mft (raw, json)
Hash identifier: sJvac5uSxFWU/tcPaDdoXhSjh8tbMiiCv+/lPW40KeA=
Subject key identifier: 09:9E:00:D3:AF:8C:AC:01:2D:84:48:45:DF:D4:0B:82:46:C1:80:2F
Authority key identifier: 1B:2F:08:C5:16:4B:78:E2:8A:33:35:99:DD:59:0F:E9:06:37:72:57
Certificate issuer: /CN=1B2F08C5164B78E28A333599DD590FE906377257
Certificate serial: 227FCDA15EAB1096DBFB90271B88F7D2425DA25D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2F08C5164B78E28A333599DD590FE906377257.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
Manifest number: D1
Signing time: Thu 29 Oct 2026 23:50:11 +0000
Manifest this update: Thu 29 Oct 2026 23:45:11 +0000
Manifest next update: Sat 31 Oct 2026 03:05:11 +0000
Files and hashes: 1: 323830343a373430633a3a2f33322d313238203d3e20323730393535.roa (hash: UniNxawqUmnlwVqeSjYTKVs0idJryYD1eojUda+ySB0=)
2: 3134332e3235352e3138302e302f32332d3332203d3e20323730393535.roa (hash: xdwJlSltt9F6PrxGetsTpO8k1UzTR0wlKWOOrpMxnbA=)
3: 3134332e3235352e3138322e302f32342d3234203d3e20323730393535.roa (hash: UAP0i5OkVdhDypsr4nJWBWojhiUC/vVnEWF1UikEor8=)
4: 1B2F08C5164B78E28A333599DD590FE906377257.crl (hash: KW/ZVQWhLoH6epPoPPqIF4dLqQzmsAbPTCkVyuO7Bog=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.crl
rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2F08C5164B78E28A333599DD590FE906377257.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 03:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7f:cd:a1:5e:ab:10:96:db:fb:90:27:1b:88:f7:d2:42:5d:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2F08C5164B78E28A333599DD590FE906377257
Validity
Not Before: Oct 29 23:45:11 2026 GMT
Not After : Oct 31 03:05:11 2026 GMT
Subject: CN=099E00D3AF8CAC012D844845DFD40B8246C1802F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:9b:89:0b:83:0d:7d:2b:e9:92:ca:28:0a:
53:f5:93:84:04:56:02:40:6b:c6:bd:61:9e:13:1d:
b3:16:37:39:f7:a8:64:5f:bb:95:f0:ef:47:99:3c:
f2:95:f1:81:44:b5:b5:90:d0:1b:7f:eb:0e:c7:ab:
60:28:4c:ab:0b:40:df:49:11:a3:41:33:23:df:6a:
83:d0:b7:61:ed:7a:24:72:61:ce:9c:c6:d8:83:b6:
73:3c:55:bd:7a:e0:2d:a9:d5:95:25:76:58:51:f1:
e5:ff:7c:a8:26:b0:6f:21:97:ba:f6:e8:a3:68:c6:
ce:77:79:8b:8a:54:bf:9b:7b:b1:f5:4f:0a:26:fb:
0a:5d:30:43:b3:85:a2:23:74:9e:72:dc:ad:29:d0:
49:02:24:d1:fe:28:e1:65:7d:9e:d4:61:fd:5b:32:
bd:7b:41:e0:a6:7d:54:0a:3c:f3:8a:9e:ff:d4:6c:
b7:ba:74:d4:02:06:eb:d5:2b:80:95:50:b9:09:6b:
63:eb:7c:66:35:16:ae:ff:4e:29:2d:8f:30:c9:d6:
f5:83:51:3d:71:ca:21:0e:c7:e6:de:72:97:ba:7e:
67:d1:df:7d:00:cf:e6:54:fc:26:ae:24:24:b5:85:
23:2d:66:f0:46:0b:f8:ee:e8:6e:24:14:ba:ee:42:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:00:D3:AF:8C:AC:01:2D:84:48:45:DF:D4:0B:82:46:C1:80:2F
X509v3 Authority Key Identifier:
keyid:1B:2F:08:C5:16:4B:78:E2:8A:33:35:99:DD:59:0F:E9:06:37:72:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B2F08C5164B78E28A333599DD590FE906377257.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pj1k3BvMLwNaRkT6sZg5fRVfvpKjzN7aa7E188fD5sT/0/1B2F08C5164B78E28A333599DD590FE906377257.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7c:28:da:99:e3:a3:c7:91:59:3e:75:fd:46:dc:87:1b:ab:
0b:07:a2:f2:5a:b3:df:33:24:5e:06:66:53:8a:2a:32:31:03:
79:7a:e9:4e:3f:b9:69:b3:97:5c:32:b5:30:0c:4d:b8:93:22:
57:20:f1:a0:f3:6c:cb:76:b5:af:d4:1c:20:a5:56:dd:f2:b1:
e8:dc:9e:d1:df:42:76:05:fb:1e:c1:dd:4b:f7:46:ee:9a:25:
d9:97:1b:67:f8:74:96:52:cd:df:63:c5:30:59:03:3a:fc:f8:
14:3a:ad:cc:28:9a:55:76:f2:c3:ef:59:e9:1d:31:76:ef:96:
b2:9c:15:8d:94:a2:5d:7b:b2:b4:ad:38:1a:ee:dc:9f:33:cc:
37:9f:ba:6c:9a:29:a4:c6:f7:8a:43:f0:ee:da:a6:f4:b4:cf:
32:af:e1:05:1e:d9:44:81:3f:5b:56:8d:25:1a:91:82:38:5b:
03:25:b4:63:9b:2f:a8:99:28:62:ba:94:6a:78:e8:de:23:dd:
00:2c:86:b0:01:65:01:79:e8:6e:0a:b9:6e:99:e8:06:39:a5:
c0:b5:3f:d4:c6:b1:53:cd:32:4c:c1:16:40:a2:ec:ce:d7:64:
d2:d5:f7:66:8a:c0:a5:b6:30:0c:ac:0d:66:c8:72:23:a0:8b:
e3:d5:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:25:23 2026 by rpki-client