
$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json)
Hash identifier: djreZsDtigjVakbaBSMbJseurmb1IgGLR225nVBKDsc=
Subject key identifier: 5B:65:DA:06:53:88:DD:62:AC:34:87:65:2A:16:63:CC:9B:AC:41:E6
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial: 322111E0A8C2C02EAFB043E3355A0614EBD65EA3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
Manifest number: 0388
Signing time: Sun 01 Mar 2026 21:31:28 +0000
Manifest this update: Sun 01 Mar 2026 21:26:28 +0000
Manifest next update: Mon 02 Mar 2026 23:21:28 +0000
Files and hashes: 1: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: z2Ye1MBT5pjkw+DRBw6rjJw2ZoVM8hv9+2noKBejJbM=)
2: 34352e3137372e3138392e302f32342d3332203d3e20323732373932.roa (hash: A/pSWtKQA/OxokA0LkXc4PfBb4bWMqi4QQ8NPqMk/+E=)
3: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: r7ueBavn8yN7twz5oL3sK0f4HYe74pLzuBYMQUpJvfM=)
4: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: AagghHzyJYNIrsyPSsv5EMU3NGi+etK49plVFA/yVE0=)
5: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: B2FmUMS2Bkr9WoSOOpUYNiYBbYqUxml5Wga+huxeMAs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 23:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:21:11:e0:a8:c2:c0:2e:af:b0:43:e3:35:5a:06:14:eb:d6:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Validity
Not Before: Mar 1 21:26:28 2026 GMT
Not After : Mar 2 23:21:28 2026 GMT
Subject: CN=5B65DA065388DD62AC3487652A1663CC9BAC41E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:45:ac:3c:f3:d0:96:a6:3f:88:b0:01:bb:
ef:3e:2a:c3:cf:ba:f8:0e:12:60:86:a5:89:e8:93:
c8:30:59:c2:f8:7a:5c:1e:01:a8:d7:b4:4c:6e:ba:
6c:2c:f5:4e:a0:d5:06:94:16:2a:d0:d4:a1:4e:b5:
93:5e:69:dd:e6:0d:bd:1d:2d:53:bf:b3:e0:9a:2b:
b6:54:55:7e:20:f1:72:bf:05:2e:8e:db:20:eb:fd:
97:c7:db:48:f4:b3:82:bb:d9:16:80:48:58:01:5f:
bc:48:78:df:d2:b7:07:a9:05:81:33:38:a6:57:f8:
bd:dd:7e:70:71:c9:08:76:4e:06:3b:57:eb:76:bb:
a4:72:cc:3f:42:43:d9:c3:e2:3e:77:73:fc:96:e1:
8a:46:58:a7:2d:9a:01:a4:a3:2c:16:c9:be:d2:e6:
7b:51:7e:94:3d:97:69:e1:ce:ec:81:69:f0:9b:e6:
33:b1:8e:81:8f:41:38:63:fe:87:8d:c3:bb:1a:e3:
6b:e4:39:05:db:9f:fb:24:80:a4:f2:0f:5d:b1:a6:
6e:2b:55:88:40:8c:c8:2e:e6:2d:27:b4:76:84:89:
91:d4:c2:a3:a4:b7:21:43:5e:ce:16:44:79:b8:bc:
36:42:a9:16:eb:53:28:79:b4:14:bf:3b:b0:b6:8b:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:DA:06:53:88:DD:62:AC:34:87:65:2A:16:63:CC:9B:AC:41:E6
X509v3 Authority Key Identifier:
keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:8d:14:ca:32:de:a7:8d:94:ac:bc:81:48:a5:7d:a5:9e:
42:49:7e:37:53:3f:ea:da:42:c1:84:57:77:a2:f5:96:e4:8c:
ca:ed:13:2f:3e:d9:42:a1:e5:ab:4e:14:af:ab:88:01:fc:1d:
b6:16:b8:25:9c:2f:78:99:fa:77:2c:c4:ed:bd:f1:c4:71:17:
1a:99:db:63:c2:ee:fc:25:d0:18:63:4a:3d:96:bc:26:51:f8:
3e:dd:e8:83:2e:8c:c9:85:a6:44:a3:d2:11:23:46:3c:b6:55:
0b:5a:c3:b3:79:e6:69:82:40:01:ce:42:9c:f8:e3:b0:d8:76:
c6:1e:1f:c7:64:30:d2:b2:16:14:3e:cb:4f:75:3b:68:38:1d:
f1:ef:4f:95:4b:58:17:b8:2b:bf:0c:09:b8:02:a6:05:47:64:
7d:73:90:36:c1:9d:bb:0a:29:e2:37:91:fd:43:94:7a:47:8a:
97:c0:fc:6c:57:8b:90:1c:f0:fb:98:97:af:eb:9c:a2:de:fb:
9f:6a:1f:05:22:5c:d5:63:31:77:2b:7a:b8:8f:06:6a:4a:75:
cc:59:1d:2e:c3:05:1b:6a:b8:d3:93:69:a2:78:bb:db:cb:1d:
56:2a:f0:00:7a:2d:e7:3b:b7:93:0f:94:c9:5b:b7:22:0b:15:
71:6c:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:48 2026 by rpki-client