
$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json)
Hash identifier: UzhUGvqdU/xNB8KpCv+q4hgLFIxVfBBRC64p05Hq//g=
Subject key identifier: 6B:B1:15:0F:86:7C:4A:D9:A0:FB:F0:14:C5:18:6F:72:DC:EB:90:5E
Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Certificate serial: 039BF13E0D8D022C4E1711DC2CEAA6D53F8FF4E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
Manifest number: 03A2
Signing time: Mon 02 Mar 2026 07:45:42 +0000
Manifest this update: Mon 02 Mar 2026 07:40:42 +0000
Manifest next update: Tue 03 Mar 2026 10:26:42 +0000
Files and hashes: 1: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: GJrwB99ujL2SB7jbYE+kyjHLvrcPI1VHU6p3gkvJmLk=)
2: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: cLWZH7fF8LrQwdp/Zg/1jWkVLX85FPQY0a4ML8PtgLo=)
3: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: 0yHNZRU/rOPWIWeTxxQK8crAOr43TecNrQxrFYd2xzM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 10:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9b:f1:3e:0d:8d:02:2c:4e:17:11:dc:2c:ea:a6:d5:3f:8f:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE
Validity
Not Before: Mar 2 07:40:42 2026 GMT
Not After : Mar 3 10:26:42 2026 GMT
Subject: CN=6BB1150F867C4AD9A0FBF014C5186F72DCEB905E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:f6:9c:bf:bc:df:41:a8:cf:7a:b8:02:29:
e1:c0:58:e0:f7:01:85:5e:48:3c:f6:19:02:fb:f1:
c8:ac:54:94:8f:81:bf:b2:8d:83:c5:1a:14:28:bf:
48:eb:cf:e6:37:34:4d:a0:f8:3c:b5:e1:09:c5:68:
bb:c8:29:10:c4:d9:fe:c4:ee:10:59:2e:88:24:9b:
e3:90:bb:3a:00:9b:72:41:70:8a:55:50:5e:96:fd:
84:c6:07:70:12:5a:a9:6c:7b:f5:f5:df:9e:c7:23:
39:47:95:1e:39:b1:0d:02:d6:bd:08:0d:ba:ee:b0:
ae:26:64:55:f1:14:19:9f:ce:4f:65:1c:66:90:bc:
5d:00:0a:40:eb:9a:9e:01:4e:e8:92:21:8a:1a:74:
e9:99:89:4b:9a:84:0b:7e:cd:d6:77:5c:65:59:7d:
fc:ac:d9:04:95:74:b8:1f:56:24:c2:83:d3:40:fe:
c1:6f:82:9f:6f:3d:84:34:0b:6f:77:af:ba:3d:3c:
10:2b:d8:6d:aa:f0:d2:cf:33:92:94:e5:c1:03:5b:
ef:d2:4a:57:5b:bd:fe:62:5b:94:ee:d0:ba:09:d4:
3b:e7:46:41:80:c9:d0:a7:e0:f5:5f:da:77:f6:da:
16:a1:a6:ae:3e:9d:86:f8:33:93:e5:94:b4:1d:1a:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:15:0F:86:7C:4A:D9:A0:FB:F0:14:C5:18:6F:72:DC:EB:90:5E
X509v3 Authority Key Identifier:
keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:25:5e:50:78:ec:1c:ec:da:05:6d:c7:8b:c7:bf:08:54:
e9:40:de:36:f6:f1:84:4b:30:b3:5d:b2:14:b9:3d:fe:20:7c:
bf:95:69:d2:c1:ac:8b:43:4d:89:c6:c9:ce:81:d1:31:b7:0e:
51:66:9b:99:27:c1:80:76:48:5d:73:85:69:88:93:46:e7:11:
03:4e:a7:4f:aa:49:e2:79:d2:7c:35:70:28:a4:79:8b:6d:cd:
fb:92:e8:65:eb:40:c1:21:01:bf:34:32:24:eb:cc:bf:fd:e2:
65:55:04:f7:52:e4:23:2e:a4:2d:65:6f:59:a7:08:3d:8e:d8:
75:a6:4c:e7:69:25:53:a7:6e:c7:07:fb:1e:f1:bd:22:89:3a:
56:c7:ff:c2:2e:e3:12:42:52:ad:c2:af:c0:64:8a:33:9c:aa:
fb:9b:4f:16:66:df:45:9d:aa:e0:0e:5c:59:25:5c:65:08:f2:
df:06:99:da:66:7d:b4:c0:d4:d8:d8:f4:5f:07:40:c0:5a:25:
12:3a:8f:eb:fd:fb:58:16:5b:4c:94:70:76:d0:ec:e6:3d:76:
f5:75:15:d1:61:c1:74:98:db:9e:ee:25:34:65:fa:7b:51:61:
68:b2:ac:52:d6:07:af:fc:46:ce:33:1d:48:87:6c:28:22:34:
09:16:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:12 2026 by rpki-client