
$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json)
Hash identifier: OeCBR/0fkLAjjn/RD5GmdRwlIqECcvW6ZnnAIDjCJFU=
Subject key identifier: 5A:9C:39:E4:BD:18:E1:1E:1D:43:9B:D7:C3:5B:63:47:4B:28:44:1B
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial: 2C7CB30606E21C6BC37EFCE33D094D49327CBA9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
Manifest number: 039E
Signing time: Mon 02 Mar 2026 09:29:58 +0000
Manifest this update: Mon 02 Mar 2026 09:24:58 +0000
Manifest next update: Tue 03 Mar 2026 12:43:58 +0000
Files and hashes: 1: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=)
2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=)
3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=)
4: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: JYDfOIUs4TGcysTdi4+8b5uix0yyCxjRjRpssTN7/Yc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7c:b3:06:06:e2:1c:6b:c3:7e:fc:e3:3d:09:4d:49:32:7c:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
Validity
Not Before: Mar 2 09:24:58 2026 GMT
Not After : Mar 3 12:43:58 2026 GMT
Subject: CN=5A9C39E4BD18E11E1D439BD7C35B63474B28441B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:8b:0f:1f:99:d7:4f:aa:d4:4e:f1:41:9c:
1a:b0:5e:08:51:41:c5:33:68:3d:1c:32:0c:e1:a5:
14:28:bd:83:d5:66:c9:2a:22:ca:af:09:47:31:be:
04:f9:2b:c8:5b:28:4d:02:f5:21:58:13:0a:6e:91:
e2:84:c4:31:c4:d5:3d:77:1e:b2:9a:c7:44:4f:2b:
ed:92:1c:78:67:bb:b9:1d:99:cc:23:b4:db:f6:3d:
53:5c:76:62:83:0b:10:4f:18:e9:2e:3b:3d:98:0c:
50:c1:78:5f:54:3b:de:b5:a6:89:ed:23:47:3e:fa:
16:d4:67:5d:d8:bb:ee:a5:f4:8c:e0:d1:db:af:7f:
70:25:15:7f:2a:44:0b:b1:d0:a9:b9:2f:d7:29:d0:
54:65:97:fd:6a:54:97:e7:08:fd:31:a0:aa:2d:99:
85:14:c2:f9:9e:35:0d:0b:f2:b5:1e:77:73:13:36:
5e:88:df:0b:f7:2f:24:7d:aa:ad:50:a1:8a:3c:64:
95:a1:bf:26:b4:37:ba:96:fe:5f:a1:87:ab:c7:38:
e9:df:2b:a6:af:81:8e:ca:b8:88:8c:3b:99:db:78:
24:6b:76:df:cc:71:cb:0d:81:d9:39:60:14:15:89:
eb:de:9d:f9:27:6c:47:5d:2b:a7:cc:f6:c6:eb:c6:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:39:E4:BD:18:E1:1E:1D:43:9B:D7:C3:5B:63:47:4B:28:44:1B
X509v3 Authority Key Identifier:
keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bc:07:d2:03:07:d8:aa:d7:4d:3c:19:31:9d:0e:0d:9d:86:
35:5f:19:fa:8f:ec:a2:7b:34:b3:58:01:14:b5:5a:ea:c8:ad:
54:a0:ed:03:f6:b2:1b:ec:10:0d:43:e7:78:e8:ab:ee:f4:3d:
fc:28:0b:8b:7e:3e:8c:5c:c8:c9:99:12:45:1e:1b:58:22:41:
6e:f1:ac:e7:4c:0b:b4:13:70:58:69:46:12:99:03:6b:c1:99:
5a:28:ff:69:86:5c:aa:ee:b7:a0:f5:15:ec:da:23:9d:aa:8e:
36:eb:06:bd:bb:d9:74:73:9e:8b:e1:98:f0:1e:a3:af:51:d2:
79:65:96:87:6e:00:02:07:94:6b:fd:9d:4b:d7:df:a5:8c:67:
f3:3c:a3:d5:a0:77:7b:b2:3f:e8:8e:23:6a:3d:41:9f:8d:90:
1c:c8:23:e2:68:bc:d8:7f:a7:48:df:3e:c6:fa:62:b4:d4:65:
98:7f:1a:33:ac:76:49:7d:18:53:2d:a2:be:2a:51:97:7e:fa:
37:d3:04:7a:df:02:fc:ab:e7:84:28:7a:fa:a3:3b:f9:1a:46:
cc:52:16:0a:6e:09:85:18:28:b1:f8:95:1e:b5:67:56:3f:ee:
93:3f:f0:bc:ab:ec:08:ad:95:67:92:ee:34:64:a0:e1:23:09:
dd:85:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:25 2026 by rpki-client