
$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
File: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft (raw, json)
Hash identifier: Lzw5nY9eCFzll3581YaVNz9CPvWfueia3Tdq8zgPbsg=
Subject key identifier: 55:A7:BF:DD:A0:AC:0F:57:87:B8:E1:B6:C1:EF:9C:40:8D:E2:CC:2A
Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20
Certificate issuer: /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
Certificate serial: 3B37F936AA9E73D5E39972714AB14A35554D9AB9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
Manifest number: 0121
Signing time: Sun 01 Mar 2026 21:53:12 +0000
Manifest this update: Sun 01 Mar 2026 21:48:12 +0000
Manifest next update: Tue 03 Mar 2026 01:46:12 +0000
Files and hashes: 1: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: 9A3cX7k7kk2IJpB44lk3hlv1TswpdFdx1DMVnvG/hKw=)
2: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: fofo5LEclRsN25dyqv5FM8Psn+rvWBQBv16VnCSHHKo=)
3: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: cuPNuR6f/unuifUQxVS0d26Own5a7oHMvIJYpooXwQ0=)
4: 34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (hash: u4vxwdC/Vm4BxLFrw347cV1aKyGF5wyQSZiJYKVZ51g=)
5: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl (hash: O/mnMjLE+Sp/P85Qq4JJSeGUzUgJAFpnOnqY1bBE88o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl
rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 01:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:37:f9:36:aa:9e:73:d5:e3:99:72:71:4a:b1:4a:35:55:4d:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
Validity
Not Before: Mar 1 21:48:12 2026 GMT
Not After : Mar 3 01:46:12 2026 GMT
Subject: CN=55A7BFDDA0AC0F5787B8E1B6C1EF9C408DE2CC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:dc:c2:30:cf:f0:a3:ce:3f:8f:9e:d6:51:
60:bf:19:19:c0:f1:20:8b:1f:59:4b:5f:2a:39:c1:
56:93:e1:ed:3d:84:98:ba:01:10:40:e2:01:97:38:
f2:d4:26:2f:c9:bd:18:c6:ff:32:a2:b8:98:93:de:
a1:fb:14:81:84:36:03:0d:66:73:fa:3d:17:df:e5:
e8:f2:c7:cd:35:1f:d1:09:ec:76:b4:ad:cb:a5:da:
e6:39:0a:a0:d4:c6:fe:52:0e:0b:6d:86:20:32:6f:
07:85:4f:d4:05:d0:84:49:09:12:3a:6b:88:c9:ec:
2e:2a:32:28:fe:d0:67:4e:e0:fc:16:2f:26:ef:22:
9f:04:24:99:54:bb:c9:97:78:35:3b:8a:02:8d:fd:
df:82:99:55:40:5c:48:29:24:f8:6e:13:02:f7:5c:
3f:a7:54:17:b0:e5:08:07:de:e3:c7:09:5f:89:32:
19:41:63:f4:c5:5a:38:58:9e:fe:7f:df:c6:c3:25:
73:12:46:90:ed:ef:e8:27:e4:a5:fc:8c:3f:8f:48:
f4:87:ab:38:c6:69:5a:63:98:b9:b5:79:3d:03:9a:
d0:ed:a8:1f:58:68:1b:1e:a0:68:6a:a0:aa:8d:62:
75:f0:72:e4:a1:19:61:0b:ef:c6:02:ee:cc:2f:e6:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:BF:DD:A0:AC:0F:57:87:B8:E1:B6:C1:EF:9C:40:8D:E2:CC:2A
X509v3 Authority Key Identifier:
keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0d:46:e8:1b:a9:c4:e2:39:3b:f6:d5:c7:f1:11:88:c0:8b:
e3:d8:66:66:82:47:5b:37:ef:1a:d4:40:89:0c:5c:f8:29:f0:
7f:4d:d2:6d:7e:88:12:2f:fa:ca:92:1d:5a:e6:e8:5a:cf:39:
2e:2b:f7:63:43:ef:a4:c1:ce:ac:0d:67:c7:83:51:06:d5:dc:
85:e6:b7:af:62:29:68:81:b2:2b:30:40:d4:bd:ba:f1:6b:d1:
77:8b:97:7a:76:89:2e:17:ee:df:02:13:04:c2:bd:a6:2d:29:
8d:0d:82:33:bf:f0:a5:98:0e:e0:72:4c:29:6e:d1:6f:e6:22:
71:68:56:37:c7:f4:30:01:91:84:18:22:43:d2:16:0c:0a:a6:
ff:58:23:a3:32:8f:5c:f9:8a:dd:23:6c:8a:23:c2:39:8b:52:
df:4c:db:11:64:2c:f7:a2:e5:f6:6c:10:93:6e:ab:e0:0b:ee:
91:ec:24:40:a4:ec:0f:47:30:fb:e5:15:a3:11:3b:85:4d:a9:
7b:40:ab:3f:05:16:a5:1c:62:6c:b7:87:17:91:bc:40:4e:8c:
47:9b:e3:b4:93:02:09:cc:f4:ae:8b:bb:63:42:b8:c0:28:c8:
91:0b:08:a1:3d:1e:91:31:79:ca:51:a9:f2:e0:f6:f6:f7:c3:
bf:ee:e1:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUOzf5Nqqec9XjmXJxSrFKNVVNmrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBMEYxQTI1OTRFNTczOEMzMTIyNjU4RkRBNUJGREFG
NjZENEUyMDAeFw0yNjAzMDEyMTQ4MTJaFw0yNjAzMDMwMTQ2MTJaMDMxMTAvBgNV
BAMTKDU1QTdCRkREQTBBQzBGNTc4N0I4RTFCNkMxRUY5QzQwOERFMkNDMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDtzCMM/wo84/j57WUWC/GRnA
8SCLH1lLXyo5wVaT4e09hJi6ARBA4gGXOPLUJi/JvRjG/zKiuJiT3qH7FIGENgMN
ZnP6PRff5ejyx801H9EJ7Ha0rcul2uY5CqDUxv5SDgtthiAybweFT9QF0IRJCRI6
a4jJ7C4qMij+0GdO4PwWLybvIp8EJJlUu8mXeDU7igKN/d+CmVVAXEgpJPhuEwL3
XD+nVBew5QgH3uPHCV+JMhlBY/TFWjhYnv5/38bDJXMSRpDt7+gn5KX8jD+PSPSH
qzjGaVpjmLm1eT0DmtDtqB9YaBseoGhqoKqNYnXwcuShGWEL78YC7swv5nzJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUVae/3aCsD1eHuOG2we+cQI3izCowHwYDVR0j
BBgwFoAUK6DxollOVzjDEiZY/aW/2vZtTiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMC8yQkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTBGMUEyNTk0RTU3MzhD
MzEyMjY1OEZEQTVCRkRBRjY2RDRFMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41UzMvMC8y
QkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfg1G6BupxOI5O/bVx/ERiMCL49hmZoJHWzfvGtRAiQxc+Cnwf03SbX6IEi/6
ypIdWuboWs85Liv3Y0PvpMHOrA1nx4NRBtXchea3r2IpaIGyKzBA1L268WvRd4uX
enaJLhfu3wITBMK9pi0pjQ2CM7/wpZgO4HJMKW7Rb+YicWhWN8f0MAGRhBgiQ9IW
DAqm/1gjozKPXPmK3SNsiiPCOYtS30zbEWQs96Ll9mwQk26r4AvukewkQKTsD0cw
++UVoxE7hU2pe0CrPwUWpRxibLeHF5G8QE6MR5vjtJMCCcz0rou7Y0K4wCjIkQsI
oT0ekTF5ylGp8uD29vfDv+7hrw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:26 2026 by rpki-client