
$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json)
Hash identifier: AWMraeBhW9LujsEv/MdqpvqeL/xw2mZEzXZCjaUSKn0=
Subject key identifier: DB:B1:AD:92:17:B0:63:DE:B8:04:E6:28:3E:58:E8:A3:A8:38:08:79
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial: 74A154A38A4AE1F06720E0E09E552A6C3A045065
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
Manifest number: 02B2
Signing time: Fri 17 Apr 2026 06:07:25 +0000
Manifest this update: Fri 17 Apr 2026 06:02:25 +0000
Manifest next update: Sat 18 Apr 2026 08:57:25 +0000
Files and hashes: 1: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=)
2: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=)
3: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: IOqtb691FHgagHkBBAvcxICwVlOgFgVAhIK3GYtGNOU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 08:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a1:54:a3:8a:4a:e1:f0:67:20:e0:e0:9e:55:2a:6c:3a:04:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Validity
Not Before: Apr 17 06:02:25 2026 GMT
Not After : Apr 18 08:57:25 2026 GMT
Subject: CN=DBB1AD9217B063DEB804E6283E58E8A3A8380879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:5c:3e:8e:3d:ca:fc:e0:92:f2:22:7a:07:
ac:73:32:61:55:b6:d8:94:54:eb:13:4e:c8:04:71:
24:3e:1e:38:13:75:08:88:f1:bc:10:c6:52:b9:a6:
ae:b7:2b:d3:f2:b9:32:28:23:ee:30:91:86:99:34:
b0:8a:3a:75:3e:6e:44:68:a1:5d:c6:1f:16:31:d7:
02:df:a1:c5:57:ee:de:e3:fc:3d:9a:a9:aa:77:c6:
80:f4:2c:7d:88:21:91:54:ab:c7:47:1c:c5:1c:9a:
41:92:93:e8:0f:40:31:e0:3b:f1:36:42:56:10:e4:
69:63:9e:e4:37:0c:ff:83:e2:8f:59:18:43:06:4b:
58:38:c7:9a:26:ff:e1:f5:96:bd:b3:22:8b:10:2a:
58:38:18:2d:16:3b:78:54:ba:e8:74:e5:1b:af:4b:
30:13:72:d2:78:a6:1b:ed:8f:9d:ae:da:9b:fe:5a:
d0:c2:f4:50:35:df:50:7b:41:91:02:cc:66:e5:ad:
99:11:9a:2e:08:6f:1c:11:84:bf:69:5a:e0:d0:ac:
d8:ab:ff:42:62:58:26:ba:48:0d:a1:43:28:04:13:
76:36:19:c5:43:3c:58:ce:f7:c0:6d:d8:18:64:9d:
f8:3f:a8:4b:1d:e3:45:98:83:02:52:e8:78:17:bd:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:AD:92:17:B0:63:DE:B8:04:E6:28:3E:58:E8:A3:A8:38:08:79
X509v3 Authority Key Identifier:
keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ac:87:f0:4c:27:1c:df:e3:58:8b:db:4a:ae:4c:31:a7:d3:
8a:75:a0:a7:db:c9:c7:43:cc:cc:c8:44:b6:81:6d:24:ad:c9:
d7:c3:48:2f:c1:d4:44:95:85:dc:26:c9:56:fc:09:bd:c3:71:
93:f8:d0:b2:d1:70:37:3f:bf:04:54:ee:4f:3a:21:7c:e2:2c:
af:fd:75:da:bc:2c:2d:34:26:0c:6b:85:cd:b1:92:96:2f:f3:
3a:2c:10:8d:ed:83:82:06:6e:55:08:e5:98:3a:1b:51:e9:26:
99:7f:97:b3:e0:08:31:5a:a8:d2:44:0e:01:ae:06:2b:93:4a:
f2:61:28:42:e0:51:1c:96:d9:6d:25:73:40:ae:64:16:16:fa:
86:f3:fc:f6:2d:cc:df:8f:4c:cf:7c:36:ad:b0:84:71:3d:01:
6d:37:71:8f:6b:3c:f7:50:db:a9:20:21:5d:8f:fd:d2:77:1d:
1d:55:7c:00:7d:f9:cd:d9:15:22:ba:29:63:06:70:71:31:46:
1c:3c:fa:14:d1:01:82:7b:36:48:02:c6:ed:42:7c:88:82:99:
ae:3c:1e:5d:4b:8e:88:45:f8:50:ec:2d:32:99:5a:51:0a:a6:
28:aa:be:bb:da:22:95:94:4b:f2:8b:b2:27:89:c6:8b:14:52:
95:92:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:48 2026 by rpki-client