
$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json)
Hash identifier: T768mfCHHAolds7FM7IQwl+Lnsu0TwpdKZTnRYeSo2Y=
Subject key identifier: 2E:D6:E9:28:48:58:D0:41:F3:C4:7D:40:37:EA:5E:2F:43:E5:90:1E
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial: 2BD2DF2596B2B2236323F8012460644D7A34194B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
Manifest number: 03B1
Signing time: Sun 01 Mar 2026 19:23:06 +0000
Manifest this update: Sun 01 Mar 2026 19:18:06 +0000
Manifest next update: Mon 02 Mar 2026 19:41:06 +0000
Files and hashes: 1: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: C8nl6i1YJBXuY7KqnNcHZ82XxRjwU4qb4KZwT3Ruswc=)
2: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: 6qqQly8fj1pIk6aSIlrvnSFvdMYQB2GBvscX+DADI14=)
3: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: N2i/qBjBq5/TJnBxu2abDlDhuFcVTp1FhoYaGw4HyrY=)
4: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: RJSiz6X40u1exZ0lylVroJmRjsSn1sj876c4G/oZyzw=)
5: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: xZOGYqIMw2Xb3OgmunSGGwwg8xrOZJS8s2Q0thZGd0A=)
6: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: Qpd92una+o0M64MRFqLgVC0UqGox5KHsiEkX8amoamo=)
7: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: pWacx1NTt02D42bFq04vbBmqRB/XXWUQOecty6CnIa0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 19:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d2:df:25:96:b2:b2:23:63:23:f8:01:24:60:64:4d:7a:34:19:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Validity
Not Before: Mar 1 19:18:06 2026 GMT
Not After : Mar 2 19:41:06 2026 GMT
Subject: CN=2ED6E9284858D041F3C47D4037EA5E2F43E5901E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:e4:1f:b5:20:88:f6:db:e4:4d:dd:eb:30:
25:52:c7:65:b1:f2:bb:77:8c:9b:ea:26:cc:f2:bb:
68:77:65:6b:cb:a3:c9:bc:69:93:1e:7c:98:7e:09:
55:db:97:db:bd:e1:1c:21:0c:f6:77:3b:97:ef:ef:
27:03:6b:85:17:c0:50:db:ba:f8:7c:f8:eb:0a:07:
00:42:80:31:01:5b:c9:a7:ba:39:a6:b0:c0:0b:4f:
5d:27:0e:ef:23:b9:a1:68:e5:27:4a:29:12:a4:1b:
78:9c:90:33:fd:cb:b7:44:6b:a2:c3:c6:53:8b:76:
5a:9e:ab:51:dd:27:42:0e:0f:ab:2a:f5:7c:8b:29:
fa:a4:5f:ba:f8:01:7a:78:e5:eb:ac:6f:1a:4b:c2:
27:14:fc:56:3a:f7:54:5a:13:86:d8:20:3f:ef:92:
2e:56:1d:e2:99:21:11:be:a1:91:bd:eb:9f:9f:cb:
af:c6:3e:11:60:07:8e:39:1f:d8:d7:fa:9c:dd:5c:
0a:5e:9e:10:ea:58:ab:dd:ba:15:b9:bc:97:d3:f5:
a6:e3:04:4b:95:fc:0f:3e:fe:97:56:84:af:76:b7:
24:99:3e:10:77:3b:75:17:90:12:cf:52:76:f7:37:
30:56:26:23:e9:9e:47:06:7d:d6:89:6d:ae:2e:19:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:E9:28:48:58:D0:41:F3:C4:7D:40:37:EA:5E:2F:43:E5:90:1E
X509v3 Authority Key Identifier:
keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:11:48:5d:53:fc:b3:7a:3d:e3:61:f5:e3:37:f6:79:3c:c5:
db:6f:4d:4e:5e:2b:46:7d:b6:32:f9:a8:e3:92:25:69:24:a1:
0e:80:3d:1f:4b:e4:d4:ad:01:65:6e:03:a9:3b:f8:9d:01:f0:
be:17:3a:dc:6d:05:2c:b2:3d:6e:a5:33:b3:66:f9:40:8b:35:
bd:5f:1c:5b:60:f2:10:a7:dd:18:29:1e:73:4f:0a:6c:0f:9d:
c7:75:38:01:14:5b:ee:ce:85:c7:44:9b:8d:f2:7d:92:5d:a0:
e4:22:a3:33:be:64:af:b2:b7:e9:15:b2:09:29:13:46:21:f6:
23:38:06:31:28:53:42:13:22:ff:4c:df:e7:e8:18:e6:69:87:
78:fa:89:2c:3e:bb:71:43:9d:33:28:15:8d:22:33:11:f5:47:
79:1b:db:59:1f:22:73:3c:dc:b6:0f:07:b4:75:05:6d:ff:0d:
e1:d7:ab:03:8a:c2:68:65:4e:46:78:77:38:2f:9c:fa:e1:ba:
77:c9:c1:df:fd:d5:db:be:9c:2b:4a:6c:b0:77:b1:5e:11:90:
6e:2f:06:3d:db:f4:07:6c:58:6e:69:28:bd:5b:bd:9a:d5:00:
8c:89:55:6a:0b:15:f0:29:24:55:e8:97:a5:e4:24:15:78:1c:
03:19:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:26 2026 by rpki-client