
$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
File: D5A1856A52E7F9EBF280FCB86750839A6466C111.mft (raw, json)
Hash identifier: 9kNYD1PLvVyyq9dln96RcarXRJgkqtVqMFzYZjk614Q=
Subject key identifier: BC:61:89:0C:5A:2D:F2:49:3F:B8:C7:1A:51:73:4B:DB:4D:60:E4:52
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Certificate issuer: /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial: 0B0D2DECC24D9A2CABD2BDA8FCA44F1E83E1FFD5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
Manifest number: E2
Signing time: Sun 01 Mar 2026 09:36:47 +0000
Manifest this update: Sun 01 Mar 2026 09:31:47 +0000
Manifest next update: Mon 02 Mar 2026 13:23:47 +0000
Files and hashes: 1: 3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (hash: KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=)
2: 3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (hash: iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=)
3: 323830343a383237633a3a2f33322d313238203d3e20323632393337.roa (hash: w7mrlzP9adJiyFUUgR0vUJKBTlOPeWaDs+XqI7y8EJY=)
4: D5A1856A52E7F9EBF280FCB86750839A6466C111.crl (hash: QNE9qLjqEjJsz8VwVMpj3AhvNpLtSAyt9WDv8KJsbP0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 13:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0d:2d:ec:c2:4d:9a:2c:ab:d2:bd:a8:fc:a4:4f:1e:83:e1:ff:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Validity
Not Before: Mar 1 09:31:47 2026 GMT
Not After : Mar 2 13:23:47 2026 GMT
Subject: CN=BC61890C5A2DF2493FB8C71A51734BDB4D60E452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:7d:3b:86:bd:35:28:f8:e7:c2:96:7f:d1:
34:60:48:2a:70:28:a5:e1:66:1e:d7:13:34:59:cc:
b5:07:cd:05:fc:eb:3a:e9:56:ac:46:55:65:d5:56:
e9:2f:bb:dc:5e:11:f9:7d:05:a0:e2:88:fb:86:0d:
b7:9c:65:89:35:5c:01:4a:58:67:6a:ba:58:14:63:
47:40:4c:dd:1f:5e:d2:21:64:9b:cb:6e:d4:14:44:
14:1c:69:da:48:91:a6:56:78:47:3b:67:8a:72:36:
3d:29:ef:60:33:5d:1c:7e:a5:33:cf:66:61:5e:ca:
c0:61:dc:ef:35:67:7c:1d:f9:3b:a7:0e:28:2c:bb:
92:e8:54:f5:52:87:61:82:86:85:e2:d1:d7:1d:47:
5b:cf:ef:02:7e:29:a3:bd:f1:c7:fa:1f:47:71:f0:
df:30:f2:db:6c:02:9b:e7:74:1d:90:2b:06:63:3a:
53:13:77:e9:ff:d0:06:f2:ef:98:1f:cd:dd:ef:7f:
ce:ee:e5:6d:45:c5:96:0a:36:55:9c:3e:95:5c:a9:
21:33:d3:0b:df:84:34:af:00:bd:48:8e:99:9a:bb:
f2:b2:6c:5b:30:53:99:a2:44:3a:0b:1c:f3:77:d0:
cf:33:e9:de:69:33:d4:39:ed:c6:87:75:96:11:d5:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:89:0C:5A:2D:F2:49:3F:B8:C7:1A:51:73:4B:DB:4D:60:E4:52
X509v3 Authority Key Identifier:
keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:37:d4:da:22:37:bb:ab:97:77:7e:89:29:7d:46:1d:ad:aa:
0e:c1:73:fd:e3:34:76:46:c2:95:32:2f:7b:43:0b:c8:e2:a0:
29:bc:72:db:9e:d7:67:03:4a:cf:8e:e5:dd:b5:5e:21:19:93:
f8:44:3a:71:8a:48:d3:37:78:92:4b:63:01:11:c5:9f:80:4a:
4d:f0:83:b9:a5:ff:0a:67:16:2d:ce:9e:97:b0:23:0e:51:7e:
e2:aa:82:7c:b4:79:f2:93:63:85:ed:03:54:fc:15:14:2e:bb:
dd:f3:da:cc:f5:22:15:c8:43:3e:f5:ab:33:25:be:b4:30:65:
fb:d1:cc:26:e4:e4:81:9a:b1:7c:c3:34:34:dd:a8:f5:34:2c:
20:b8:f0:af:8c:eb:22:2a:79:16:5e:d2:10:cd:68:07:87:21:
7a:eb:3a:23:00:60:fe:0c:4e:3a:ad:5c:d1:c8:04:a8:74:c5:
f4:d0:17:11:ff:e7:85:a9:46:1b:07:e6:e2:0c:9e:91:34:25:
b5:b7:c5:7f:2b:b9:3c:20:a7:a5:32:e2:3b:ee:b3:d5:d0:dd:
76:77:41:8c:4f:02:9d:3a:8d:c7:c2:36:3b:6f:d3:8f:dc:d4:
7a:49:e7:04:bc:8c:01:ee:1e:f7:42:78:7c:f3:f8:f6:0f:6a:
df:73:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:17:08 2026 by rpki-client