
$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json)
Hash identifier: SPW/6WnfkyP7gxevzyi8smCnMSDoO+8ok+F6BNjzmj8=
Subject key identifier: 1D:22:E2:FD:45:45:1C:66:43:40:96:6B:1D:24:34:D5:D4:0D:B9:CC
Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Certificate serial: 2E951C213AA54BDD34CF0BCE92404632FE6901E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
Manifest number: 039E
Signing time: Mon 02 Mar 2026 01:45:44 +0000
Manifest this update: Mon 02 Mar 2026 01:40:44 +0000
Manifest next update: Tue 03 Mar 2026 03:18:44 +0000
Files and hashes: 1: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: NPq30V49ERmypc9YtcV0op96D1A9n4p81vggMqol7gc=)
2: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: cTqm/rvgz4qO/kqtsCcG4TxcjbMjdPsB9mUm0EvydEA=)
3: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: 2u21MGTV0ZKz5Jp6CdwaoFcBc2mvcxSeibhtvBbE01I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 03:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:95:1c:21:3a:a5:4b:dd:34:cf:0b:ce:92:40:46:32:fe:69:01:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
Validity
Not Before: Mar 2 01:40:44 2026 GMT
Not After : Mar 3 03:18:44 2026 GMT
Subject: CN=1D22E2FD45451C664340966B1D2434D5D40DB9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:49:40:be:79:bc:5b:d5:44:44:a7:c1:fc:
df:7e:94:f0:01:08:27:0b:48:9f:f3:69:27:c1:36:
14:a8:4f:41:98:82:33:ac:9f:19:e7:fb:1b:99:31:
71:02:62:46:8e:c3:ec:1a:82:cf:ab:76:34:9b:82:
88:65:00:ee:dc:7d:c2:8f:d5:0e:d5:60:42:49:5f:
bf:03:72:e9:77:c0:be:0d:20:d4:46:fd:27:c6:ae:
a9:14:08:b3:20:9f:e3:7c:77:2f:78:0a:8d:f6:84:
fe:15:ea:69:ac:7d:c9:f6:45:8f:86:25:c4:a9:a9:
a5:21:ce:3f:ff:bf:79:35:83:e0:5a:54:32:45:f7:
df:e0:0d:9d:51:35:17:bf:dd:fc:48:8f:1a:7a:ba:
96:c7:61:bb:da:a0:bb:68:5f:ce:43:e5:d3:e8:74:
5c:15:5f:80:d8:38:a6:1a:7e:73:4c:d3:c2:f1:6b:
c1:22:1c:f0:dc:b8:69:64:44:7b:f5:2b:5e:3f:5c:
4b:05:3c:82:ba:9e:90:70:da:e9:13:c8:85:b5:e3:
30:b7:4f:6d:e5:59:0f:76:ab:06:a6:be:34:cf:ee:
71:21:fe:ed:1c:0d:5e:2f:4f:3e:d0:ac:54:32:8e:
3b:f1:13:d5:ca:bc:a0:88:d6:13:84:ac:c7:7c:1f:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:E2:FD:45:45:1C:66:43:40:96:6B:1D:24:34:D5:D4:0D:B9:CC
X509v3 Authority Key Identifier:
keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:88:d1:ae:7f:47:e4:82:3c:f6:73:c2:42:f5:6b:cb:83:
26:9d:5a:af:2e:c7:14:66:e2:78:64:cf:f3:96:31:cd:89:a8:
49:af:8e:45:e5:60:ce:ad:2b:fd:fd:60:98:2f:54:d3:68:a8:
13:6c:83:9e:bf:67:79:5c:db:41:54:b1:5e:c1:65:b4:32:7a:
a9:da:b9:fc:5f:b6:2d:bb:59:74:34:bf:78:ed:b5:51:2b:8c:
73:a0:9b:c8:2d:e8:98:ae:85:ea:77:4c:8b:dd:8a:fe:97:69:
93:13:f2:e8:7b:f3:b3:f4:b5:7e:c6:05:2f:71:c1:5f:d7:80:
a7:c8:bc:f5:74:ed:29:f2:b0:c4:f7:5e:d7:aa:c4:08:d8:63:
cf:e0:c1:8e:4d:21:be:9e:46:1b:16:48:46:90:93:6b:30:c6:
94:55:a2:ec:0d:c6:42:97:39:9e:9c:d0:fa:24:08:87:f7:ce:
9f:1b:5d:88:a3:58:40:19:85:d9:53:83:f9:9c:45:d8:25:02:
4f:1d:43:d6:98:43:bb:b5:a4:1a:83:bb:13:04:86:c4:56:ee:
36:7f:ca:f7:63:36:00:91:c7:f3:2e:af:de:13:0f:24:da:de:
e5:1d:8a:5a:d7:29:ca:4b:7b:b2:7c:ef:36:ed:7f:1f:0e:26:
57:bf:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:34 2026 by rpki-client