
$ rpki-client -vvf rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft
File: B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft (raw, json)
Hash identifier: AFkPYM+6jrU6LA3JFWYVyNADV+CBbx+4+WVv9kfJVn0=
Subject key identifier: 44:BE:2F:B2:F0:6B:4E:A1:AA:A5:04:A1:07:CF:53:68:EB:74:54:34
Authority key identifier: B2:EB:FA:8E:17:F5:E2:58:7A:A1:69:3B:02:99:D1:EC:AF:F3:2F:FC
Certificate issuer: /CN=B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC
Certificate serial: 10EE819423B664F1AA97DCFF103A3F3852E13D6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft
Manifest number: 31
Signing time: Mon 02 Mar 2026 09:50:35 +0000
Manifest this update: Mon 02 Mar 2026 09:45:35 +0000
Manifest next update: Tue 03 Mar 2026 11:44:35 +0000
Files and hashes: 1: 34352e3233392e38302e302f32322d3234203d3e20323638333834.roa (hash: rGVi45xHjlTVtgzfyDL4qhhpomUOgwyNhV/rpXBapR4=)
2: B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.crl (hash: G4ALz51yGEukojR9pfwvlHY8WDyQY+KPkPZPn1IvdDY=)
3: 323830343a353035633a3a2f33322d3438203d3e20323638333834.roa (hash: 1S9cBAXwQEggmrJCp940wp8SFkPB+bp7tmy2mA7RZx4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.crl
rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 11:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ee:81:94:23:b6:64:f1:aa:97:dc:ff:10:3a:3f:38:52:e1:3d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC
Validity
Not Before: Mar 2 09:45:35 2026 GMT
Not After : Mar 3 11:44:35 2026 GMT
Subject: CN=44BE2FB2F06B4EA1AAA504A107CF5368EB745434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:25:6f:98:d3:de:a4:da:44:44:8d:d3:f4:
6b:63:cb:38:4d:b8:04:98:35:a6:f2:cb:bb:77:9c:
b4:cb:37:c5:e9:71:69:f3:96:3d:06:33:12:d2:cd:
29:af:5a:ce:e3:ea:d9:75:39:31:e6:63:ca:a2:ae:
5c:82:be:53:67:f1:60:38:9e:9c:67:78:0b:d5:be:
56:eb:5f:b3:aa:29:5d:fd:82:3a:0c:26:30:01:c7:
6e:cf:6d:c9:da:0a:05:38:10:10:b4:54:62:67:0d:
40:e9:be:ba:29:f9:b5:3b:bb:70:61:05:ce:25:c7:
e4:91:f6:c9:df:84:e4:f9:5f:f5:d7:95:5c:96:51:
f1:20:83:b3:03:9c:d4:36:a0:da:7c:91:52:c0:d8:
e1:79:83:44:25:69:06:10:89:a5:6a:2a:6f:fd:a0:
5b:bd:46:f4:78:ff:5d:8c:73:71:34:08:28:1d:3f:
88:58:f6:0b:60:02:4c:2f:66:c5:50:d9:7a:db:93:
93:ae:2c:6b:aa:e1:8f:b1:7f:e0:d2:9c:49:7d:50:
bf:20:f6:bb:3e:a3:3e:f3:dc:d0:02:ba:45:e0:d7:
da:6c:4a:89:1a:b4:07:cc:87:86:57:99:2f:59:82:
17:20:b5:0c:22:bb:be:e4:27:dc:5f:08:1c:2e:26:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:2F:B2:F0:6B:4E:A1:AA:A5:04:A1:07:CF:53:68:EB:74:54:34
X509v3 Authority Key Identifier:
keyid:B2:EB:FA:8E:17:F5:E2:58:7A:A1:69:3B:02:99:D1:EC:AF:F3:2F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/B2EBFA8E17F5E2587AA1693B0299D1ECAFF32FFC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:03:4c:ea:18:0c:9a:7a:13:80:6b:63:2f:9e:2d:6f:82:5f:
3b:e2:4f:5e:09:ee:82:72:53:80:70:f3:88:43:27:ff:d7:3b:
71:f2:17:1f:41:da:d0:7c:31:7e:7b:88:bb:41:2f:cc:26:c1:
a7:8a:42:2a:0d:4f:37:15:7a:c1:d9:41:f3:72:ba:1f:fd:e8:
46:ac:4e:d6:06:0d:2b:ed:ce:0a:15:fe:e9:93:75:0c:d6:74:
49:f0:94:35:eb:18:5f:c4:86:31:c9:e5:47:5a:48:d9:c3:ed:
57:f2:55:bb:97:2c:c0:1b:38:6b:f7:06:e2:b7:98:7a:d0:b1:
ea:29:25:bf:6c:5d:42:d5:ac:bb:85:52:b8:86:e4:15:01:ef:
c8:f3:af:43:d4:57:be:8a:61:db:7d:25:a6:b1:ed:d3:b9:3e:
c2:fc:fb:9c:cc:68:23:fd:ff:bb:3f:22:2d:cd:43:19:f2:6e:
fc:41:85:2e:94:36:48:06:b6:2c:be:00:6d:94:d2:b9:07:66:
0d:8a:49:43:e0:a1:f6:fc:d6:73:f2:97:17:9f:b8:07:86:83:
f0:2f:a3:07:ab:55:1f:31:5c:b2:45:22:91:b2:fe:68:a3:9a:
a2:72:31:1c:2f:7c:51:96:48:d3:c5:51:8c:48:3f:06:46:9f:
49:de:f4:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEO6BlCO2ZPGql9z/EDo/OFLhPW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJFQkZBOEUxN0Y1RTI1ODdBQTE2OTNCMDI5OUQxRUNB
RkYzMkZGQzAeFw0yNjAzMDIwOTQ1MzVaFw0yNjAzMDMxMTQ0MzVaMDMxMTAvBgNV
BAMTKDQ0QkUyRkIyRjA2QjRFQTFBQUE1MDRBMTA3Q0Y1MzY4RUI3NDU0MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFSVvmNPepNpERI3T9GtjyzhN
uASYNabyy7t3nLTLN8XpcWnzlj0GMxLSzSmvWs7j6tl1OTHmY8qirlyCvlNn8WA4
npxneAvVvlbrX7OqKV39gjoMJjABx27PbcnaCgU4EBC0VGJnDUDpvrop+bU7u3Bh
Bc4lx+SR9snfhOT5X/XXlVyWUfEgg7MDnNQ2oNp8kVLA2OF5g0QlaQYQiaVqKm/9
oFu9RvR4/12Mc3E0CCgdP4hY9gtgAkwvZsVQ2Xrbk5OuLGuq4Y+xf+DSnEl9UL8g
9rs+oz7z3NACukXg19psSokatAfMh4ZXmS9ZghcgtQwiu77kJ9xfCBwuJocPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURL4vsvBrTqGqpQShB89TaOt0VDQwHwYDVR0j
BBgwFoAUsuv6jhf14lh6oWk7ApnR7K/zL/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ZlOWtXY05wMVNUOG1HVWNmZkFYQnBhRnVxTEVMREhYOVU0VzFNYUtI
M2YvMC9CMkVCRkE4RTE3RjVFMjU4N0FBMTY5M0IwMjk5RDFFQ0FGRjMyRkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyRUJGQThFMTdGNUUyNTg3
QUExNjkzQjAyOTlEMUVDQUZGMzJGRkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0ZlOWtXY05wMVNUOG1HVWNmZkFYQnBhRnVxTEVMREhYOVU0VzFNYUtIM2YvMC9C
MkVCRkE4RTE3RjVFMjU4N0FBMTY5M0IwMjk5RDFFQ0FGRjMyRkZDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzQNM6hgMmnoTgGtjL54tb4JfO+JPXgnugnJTgHDziEMn/9c7cfIXH0Ha0Hwx
fnuIu0EvzCbBp4pCKg1PNxV6wdlB83K6H/3oRqxO1gYNK+3OChX+6ZN1DNZ0SfCU
NesYX8SGMcnlR1pI2cPtV/JVu5cswBs4a/cG4reYetCx6iklv2xdQtWsu4VSuIbk
FQHvyPOvQ9RXvoph230lprHt07k+wvz7nMxoI/3/uz8iLc1DGfJu/EGFLpQ2SAa2
LL4AbZTSuQdmDYpJQ+Ch9vzWc/KXF5+4B4aD8C+jB6tVHzFcskUikbL+aKOaonIx
HC98UZZI08VRjEg/BkafSd70UQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:46:17 2026 by rpki-client