
$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
File: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json)
Hash identifier: moXdnorp0wMP8ItFtekNgdIEw6huWAHrmutkDvIp6EU=
Subject key identifier: 37:59:51:D8:FF:AA:ED:90:56:43:D3:F1:C5:77:D5:D9:6B:2F:34:F7
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Certificate issuer: /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial: 358AD0F8266A4405F4A31CAE17151CFB90590F04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
Manifest number: 03DB
Signing time: Fri 17 Apr 2026 11:21:34 +0000
Manifest this update: Fri 17 Apr 2026 11:16:34 +0000
Manifest next update: Sat 18 Apr 2026 15:02:34 +0000
Files and hashes: 1: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: MC+ifAOyusP+MK/Dxtzto9TFXNr3vKRG+iV2GWExfxc=)
2: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: YMqTdw5VFtJIgoeYUerjCmjKKfRNvNrBpH6I5AxEEQI=)
3: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: AGfypEsCCJ0ZQbll9z8r8n2J/peHclCTyKbC3EM/6ao=)
4: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: 5iSbM9ONvUd2unK5Sj5o5DbY/nGVBCWKjlGc+l4YqKM=)
5: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: 10ESZg/nXpiQ5YcpFaVRMShI8gWX/NEY7fxsKOskTZw=)
6: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: 7JnfRuMlTKrTLeyIcC/LEQyzbBPYiJ+lEs1+lwu8IbM=)
7: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: /nrfbegvFRFE0//r/iWAOY310loLfLMiFZ2Gk9hm1RE=)
8: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: NXtQO00UY1+bRiPxy9gwMgtX0KfH6HuIRZtjFLe3+Ks=)
9: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: FluKTTdbQTNGH5T5JLGPKT1RZr1AJ1O4GPQ/5xzK5Ps=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 15:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8a:d0:f8:26:6a:44:05:f4:a3:1c:ae:17:15:1c:fb:90:59:0f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Validity
Not Before: Apr 17 11:16:34 2026 GMT
Not After : Apr 18 15:02:34 2026 GMT
Subject: CN=375951D8FFAAED905643D3F1C577D5D96B2F34F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:d9:20:a8:68:df:d7:fd:ce:82:bc:d1:98:
78:43:54:d4:b0:81:14:89:26:da:c1:02:a0:ee:e5:
01:2c:a9:32:f8:b2:b3:fb:2c:07:70:1f:1d:20:ed:
e5:28:b1:32:9a:af:8b:90:5b:9a:bf:ce:ef:a5:6f:
99:11:66:87:64:22:aa:78:7f:2f:5f:a6:7e:5b:ba:
c3:44:86:83:a6:c7:3b:d3:f3:b6:19:83:11:0f:da:
7c:7e:4c:64:ed:95:b6:6a:a9:26:33:93:76:98:a3:
eb:ab:8c:71:a0:0e:7e:11:bf:78:70:b9:17:04:79:
73:76:78:a3:86:79:d9:c3:09:5d:07:75:bd:60:0e:
b5:33:79:86:1c:4e:95:e2:0e:2a:cf:c4:a3:d7:e3:
03:c6:38:99:65:2e:00:58:7c:55:09:dd:e5:07:08:
33:44:b3:1f:3f:ef:6c:76:97:4f:87:5e:34:0a:7e:
d7:11:33:58:52:2c:f3:f8:15:7f:b5:f1:1c:1e:2f:
65:ca:41:44:08:5e:9e:46:e9:49:ba:b4:c4:57:ca:
1f:e7:0b:e5:9f:b4:c3:91:b8:06:8e:03:fd:fe:51:
57:a6:8a:0b:ed:7e:30:88:a2:0e:a6:03:64:a9:c2:
38:ce:cb:9f:75:e2:f6:2c:44:60:f2:d0:9f:b9:5b:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:51:D8:FF:AA:ED:90:56:43:D3:F1:C5:77:D5:D9:6B:2F:34:F7
X509v3 Authority Key Identifier:
keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:33:1b:e5:72:a3:b3:5b:a7:68:b9:fd:d4:81:1d:fd:f1:
bf:94:f5:c5:6f:97:a1:f1:7c:a7:ce:53:81:b0:8e:1c:a8:fe:
54:47:ec:99:b2:a9:63:4f:69:52:ac:23:e0:c7:01:a8:99:1e:
64:0f:8b:0f:54:3e:f4:ca:5e:99:95:b2:e3:3a:70:28:99:42:
4f:48:a5:42:86:6c:c3:d6:5b:41:43:d5:e8:40:0f:35:b4:02:
01:96:33:46:4c:4b:df:25:20:46:00:59:4a:ad:25:38:21:4b:
b0:3a:3e:eb:9d:22:8a:b1:a2:a4:c7:34:9b:6d:01:1d:6e:0a:
9b:3e:60:a1:38:17:e4:c5:6a:b1:64:26:35:59:5a:d9:6e:2c:
9f:6e:dd:b9:bf:74:f4:c4:ce:45:cb:cc:64:10:60:e3:4f:91:
ba:5a:64:9b:41:71:2c:ca:30:04:60:a4:5a:4c:65:6f:64:de:
8e:8d:4f:fd:15:81:c5:52:9e:be:b2:73:9c:78:7c:27:68:1f:
92:52:e2:54:1f:cb:84:fe:5a:44:03:be:60:f9:2f:f7:bb:97:
9e:2f:00:4b:79:d6:1e:a1:43:00:c4:70:3e:ae:bd:fe:1d:fd:
5b:ec:78:47:da:91:c5:37:f2:1f:e3:09:c8:93:d0:cb:d6:b5:
a9:22:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:59:16 2026 by rpki-client