
$ rpki-client -vvvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.mft
File: 2FA449690518010383B75A40A62E7FA858639347.mft (raw, json)
Hash identifier: UeyMSqkUG0t9/Kzbfl4mRgLcUJrNVpPGbfMo5wXv7ig=
Subject key identifier: 31:EB:F6:FE:DB:A8:5B:63:8E:5B:DE:88:1F:3C:B9:D2:E9:75:71:60
Authority key identifier: 2F:A4:49:69:05:18:01:03:83:B7:5A:40:A6:2E:7F:A8:58:63:93:47
Certificate issuer: /CN=2FA449690518010383B75A40A62E7FA858639347
Certificate serial: 4C72B1673128C51EE9D65196DC3BD6433FA62501
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.mft
Manifest number: 72
Signing time: Fri 30 Oct 2026 22:26:04 +0000
Manifest this update: Fri 30 Oct 2026 22:21:04 +0000
Manifest next update: Sat 31 Oct 2026 23:22:04 +0000
Files and hashes: 1: 34352e3233322e3134322e302f32332d3233203d3e20323637333239.roa (hash: pvh4GHgbNw9np+P1d41TgFCb2D6DoUVISrO7mID906E=)
2: 323830343a346263383a3a2f33322d3438203d3e20323637333239.roa (hash: 2ieGiJeuqthWyeomp9oRiVA1BT5Ly7H2PuixAshf1lA=)
3: 34352e3233322e3134302e302f32332d3233203d3e20323637333239.roa (hash: F6yEaHL+druy0JqeziUBJBOoBBhkAZ5KGoqG3LDSfkA=)
4: 34352e3233322e3134322e302f32342d3234203d3e20323637333239.roa (hash: r41ip//EcYmHmOZ/Lsnwe0pYutaCixJw4rsCuX7B8iQ=)
5: 34352e3233322e3134302e302f32322d3234203d3e20323637333239.roa (hash: qZEFsvrPNPZsay3oPyyVoJhjc5rlbmZGYNNwQ+gkgZw=)
6: 2FA449690518010383B75A40A62E7FA858639347.crl (hash: Qu9bKNMoDBsNEw6/dPWWoM2k2PAAMdp9zBbpIBDgaeo=)
7: 323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa (hash: 8YqEEY8zbMH8COiIHYhQXoKarODsONFLaUJG6r5NGWw=)
8: 323830343a346263383a313430303a3a2f34302d3430203d3e20323637333239.roa (hash: 7ygJNLy/NqjcpOOUVMVxX+djRX4ulNyJ5gIgNJl/4SI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.crl
rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 23:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:72:b1:67:31:28:c5:1e:e9:d6:51:96:dc:3b:d6:43:3f:a6:25:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FA449690518010383B75A40A62E7FA858639347
Validity
Not Before: Oct 30 22:21:04 2026 GMT
Not After : Oct 31 23:22:04 2026 GMT
Subject: CN=31EBF6FEDBA85B638E5BDE881F3CB9D2E9757160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:d8:94:56:5f:e9:b4:c8:45:27:92:b6:5a:
71:15:ec:7c:b8:12:9b:f9:b3:c1:6d:f6:ea:d9:78:
66:50:b6:16:11:e4:e8:df:cf:fa:b9:ca:79:b0:65:
ff:ae:df:47:e7:25:db:a0:27:f7:13:bb:b4:a2:a6:
bb:a4:f1:9e:fd:b1:97:90:eb:65:8c:29:51:7c:35:
c1:4f:71:c7:d2:52:3e:9b:d0:df:66:fc:95:fc:d8:
75:c2:81:10:43:b3:70:d5:c6:f2:7f:37:43:56:19:
e3:36:fa:6f:3d:ac:ea:2a:20:e7:59:bb:4e:ee:16:
76:a5:19:00:be:a9:d2:18:63:a4:3c:35:cb:f0:1e:
86:e4:7e:50:18:4e:7d:0c:af:6d:b2:15:d5:51:7c:
14:6f:76:4a:9f:03:06:f3:9c:0e:c7:e7:14:89:17:
e3:74:7d:fd:6b:16:fb:98:f8:e6:3b:11:a7:e8:78:
bf:08:66:fe:4b:47:8f:74:81:c1:0e:8b:4c:79:a1:
11:d4:07:9d:d0:f6:b7:94:65:25:c2:29:d8:07:56:
2b:cd:41:40:c6:63:47:5d:88:4b:87:a6:d0:b1:6f:
92:3f:30:0b:de:8b:85:82:26:f4:ef:91:39:7c:6a:
dd:4b:b7:39:7a:89:4a:1b:f0:e4:4b:a2:df:12:6a:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EB:F6:FE:DB:A8:5B:63:8E:5B:DE:88:1F:3C:B9:D2:E9:75:71:60
X509v3 Authority Key Identifier:
keyid:2F:A4:49:69:05:18:01:03:83:B7:5A:40:A6:2E:7F:A8:58:63:93:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:c9:66:e3:d5:90:85:32:aa:f9:05:7d:6e:67:60:4c:26:
7c:32:82:09:80:0e:f8:f8:e7:2d:36:40:34:6c:50:f9:c3:16:
43:de:a7:25:32:d6:9e:15:cf:84:c2:f7:02:41:b8:9a:91:66:
fe:eb:a5:b6:f7:19:74:e5:c7:0e:2f:8e:7f:1f:78:23:18:21:
a6:2b:7c:9f:48:06:ef:0a:55:cb:e4:f4:f6:0a:9f:5c:a1:b0:
6d:a0:f1:13:57:f1:a6:59:e4:c7:b5:d1:5e:5d:b6:e5:9e:1f:
f4:0e:14:f9:35:6f:a1:05:0a:68:8b:54:1d:fc:33:3a:bb:46:
c6:38:e2:d0:50:95:4b:98:9b:bd:d4:08:72:93:27:fb:c0:f3:
f1:d0:96:41:9a:b1:f2:89:2e:09:ba:e2:c5:1d:d0:6f:37:83:
90:17:0e:7c:90:73:24:ae:cb:ba:39:d1:68:71:7e:ad:ad:72:
5a:86:0e:bf:9d:7b:32:20:5d:bf:83:7f:bd:1d:c3:4e:d8:ed:
d7:33:6c:cf:ed:97:ed:29:af:8d:c8:2d:b0:9e:7e:18:3d:a4:
8d:08:f9:ac:70:73:c7:0c:fc:d5:ef:8c:e2:2a:0d:4c:8e:53:
98:c6:09:2c:25:10:d4:49:6d:7a:d4:06:ce:9c:ab:72:49:a8:
40:34:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:58:58 2026 by rpki-client