
$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
File: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json)
Hash identifier: HwZv/mN5TKfgwkkNCleTMn6e9S3ix5r9vSXFK6sfqP8=
Subject key identifier: D1:37:FF:71:9E:2F:E5:9E:90:16:35:57:8F:C6:EE:0A:6B:B5:9E:A9
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Certificate issuer: /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial: 35EB99B1D3B66BF1ACD65C80CFBAB86F11A18CC5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
Manifest number: 039D
Signing time: Mon 02 Mar 2026 10:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:55:54 +0000
Manifest next update: Tue 03 Mar 2026 10:14:54 +0000
Files and hashes: 1: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: MC+ifAOyusP+MK/Dxtzto9TFXNr3vKRG+iV2GWExfxc=)
2: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: YMqTdw5VFtJIgoeYUerjCmjKKfRNvNrBpH6I5AxEEQI=)
3: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: 10ESZg/nXpiQ5YcpFaVRMShI8gWX/NEY7fxsKOskTZw=)
4: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: 7JnfRuMlTKrTLeyIcC/LEQyzbBPYiJ+lEs1+lwu8IbM=)
5: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: FluKTTdbQTNGH5T5JLGPKT1RZr1AJ1O4GPQ/5xzK5Ps=)
6: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: /Xyoy8/SbfMmqoYxS6Cg4OAykvCE+kYl49ecM5t9z34=)
7: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: AGfypEsCCJ0ZQbll9z8r8n2J/peHclCTyKbC3EM/6ao=)
8: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: NXtQO00UY1+bRiPxy9gwMgtX0KfH6HuIRZtjFLe3+Ks=)
9: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: /nrfbegvFRFE0//r/iWAOY310loLfLMiFZ2Gk9hm1RE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 10:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:eb:99:b1:d3:b6:6b:f1:ac:d6:5c:80:cf:ba:b8:6f:11:a1:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Validity
Not Before: Mar 2 09:55:54 2026 GMT
Not After : Mar 3 10:14:54 2026 GMT
Subject: CN=D137FF719E2FE59E901635578FC6EE0A6BB59EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cc:af:0a:f8:4d:02:b5:51:91:74:22:b9:b1:
68:df:8c:d3:79:4d:1b:e3:f2:06:ca:3c:3b:7e:03:
54:42:62:6f:b7:2c:7b:c5:8d:7f:03:32:22:a6:f8:
a9:ae:f3:78:60:ad:13:69:cf:bf:ba:f1:f4:a4:1f:
6c:aa:b9:82:78:11:90:8d:5e:09:6a:ed:32:03:66:
ee:f4:5e:e8:f2:4e:9a:6c:12:25:30:f3:ef:ae:5e:
bd:a3:78:2f:84:2e:25:53:ac:df:9d:89:62:d4:f9:
d9:cf:87:e3:cf:36:73:86:76:67:7d:d2:7c:b5:49:
eb:89:ed:d3:94:ee:ae:12:76:af:0c:c9:3d:49:bc:
6d:26:d8:78:d7:02:43:d6:b7:f7:71:c5:9d:ae:4d:
9c:8f:0c:cd:30:62:2d:b8:7f:87:c9:1f:fb:47:47:
c2:e8:0e:b1:4c:ff:93:3a:49:da:d1:d5:8b:d5:be:
00:b4:1a:4f:49:c3:d1:a6:a7:67:b1:84:37:03:69:
2f:5e:c9:76:42:a1:eb:2e:f9:94:00:ba:0d:ac:0b:
cd:bf:5e:9e:90:67:ff:2c:d7:15:96:08:ab:a3:94:
c3:da:cf:8d:4e:37:c9:3e:93:f7:9a:ac:20:dd:ff:
6d:57:13:9c:ba:d9:63:85:3f:4e:39:7a:16:13:c0:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:FF:71:9E:2F:E5:9E:90:16:35:57:8F:C6:EE:0A:6B:B5:9E:A9
X509v3 Authority Key Identifier:
keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:00:33:ee:00:f3:f4:3e:26:78:53:5e:21:21:37:ce:8c:df:
88:46:d5:a3:5d:d5:0b:38:26:77:93:54:9a:aa:29:28:61:fd:
7e:c2:ba:5c:76:36:29:29:cf:6f:f3:5f:54:00:36:fc:b8:6e:
5e:1f:29:ca:49:3a:11:26:8b:5d:53:ba:07:bb:b1:f9:50:22:
9c:c7:41:5e:46:11:55:fc:d5:45:df:e7:ac:cc:38:58:82:83:
67:12:58:36:47:6a:25:9a:cd:c0:f3:32:50:66:2f:4c:3e:7d:
aa:ec:4f:40:17:d6:0d:96:f9:50:8d:b2:0d:d1:c1:8e:6f:40:
02:aa:43:38:98:f0:89:f5:f6:b1:e1:d0:e8:76:b3:2e:8d:ba:
70:2d:4d:15:91:49:5d:89:29:15:f9:a0:b5:73:22:d6:e6:77:
8d:db:83:f3:16:f0:56:7f:03:47:e2:46:a2:bf:23:ab:85:3b:
d5:3d:5b:16:43:dc:0b:9d:26:eb:bc:5d:47:6c:8a:85:c9:f3:
0f:af:25:3b:d7:28:76:c3:59:90:15:84:8b:19:50:1d:6c:66:
24:42:e3:00:13:b6:f8:f7:c6:aa:87:9b:78:63:8d:94:7c:f4:
51:34:32:53:5e:fb:95:ff:d5:4f:f4:cf:be:42:ad:ac:7d:d5:
7a:7e:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:04 2026 by rpki-client