
$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
File: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft (raw, json)
Hash identifier: aBbltj3WjE9OfC4t1g57C8pmDdX+szAUXeWGP9xtCys=
Subject key identifier: 54:05:B0:50:4F:7B:8E:38:C6:68:E6:AF:7E:34:33:87:0F:28:08:0E
Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
Certificate issuer: /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Certificate serial: 349A7071C9C5D8CE64D0C481D262F06B846189A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
Manifest number: 01C3
Signing time: Fri 24 Jul 2026 14:33:16 +0000
Manifest this update: Fri 24 Jul 2026 14:28:16 +0000
Manifest next update: Sat 25 Jul 2026 17:59:16 +0000
Files and hashes: 1: 323830343a313465633a3a2f33322d3438203d3e20323633333539.roa (hash: dufzx5C/MUIhq0a4kwePlh544fsUMy1r5kATXaxTxo0=)
2: 23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl (hash: K9ojcEAlzOZruEECNc3Qc9hcSDdByBxaEKeLUlNjJIY=)
3: 3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (hash: +ofBSaFjksYoFmqDhiPdgz7zjSxhH4q1BBCNS7SNk9E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 17:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9a:70:71:c9:c5:d8:ce:64:d0:c4:81:d2:62:f0:6b:84:61:89:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Validity
Not Before: Jul 24 14:28:16 2026 GMT
Not After : Jul 25 17:59:16 2026 GMT
Subject: CN=5405B0504F7B8E38C668E6AF7E3433870F28080E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:5b:6b:af:27:98:4a:07:bc:97:fc:b8:fd:
88:72:2c:7a:dd:c8:c3:17:e1:2a:6d:f0:31:95:26:
2f:55:b3:a6:d8:65:39:0b:cf:2f:53:fd:b0:cc:34:
89:74:14:af:1a:57:53:12:33:9c:e7:2d:fd:03:74:
18:1a:17:b7:d5:a4:5d:ca:83:00:e2:5e:50:7e:23:
85:4f:54:6b:cd:05:73:ca:07:d7:82:4d:99:d5:d9:
de:69:82:08:46:c0:84:b2:e8:8e:04:8c:25:37:39:
3b:6d:b6:6c:e3:8f:d8:64:2f:c8:6e:a1:f6:ac:55:
af:6d:4a:6a:49:5c:9f:a8:dd:ad:11:a3:b3:b8:5c:
cf:f4:78:25:a3:6f:22:93:ad:91:11:c7:b1:74:0d:
d9:8f:50:01:2b:3d:4c:8c:66:5f:30:03:f2:4a:50:
67:d8:7a:6b:dd:a9:41:e7:27:78:52:d5:c9:23:88:
bf:de:48:c0:6d:6b:29:3b:f4:48:d4:cb:f1:de:14:
2c:8a:0b:88:12:53:0e:3f:a7:b6:39:10:a4:c3:d3:
a0:fd:59:bf:74:68:30:c9:f5:85:29:74:8f:cc:b0:
18:79:56:b3:ae:4d:84:e8:5f:2e:f7:8a:bb:b5:ef:
7c:e7:0f:3b:1c:26:09:5e:ae:19:69:dc:8d:44:db:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:B0:50:4F:7B:8E:38:C6:68:E6:AF:7E:34:33:87:0F:28:08:0E
X509v3 Authority Key Identifier:
keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ac:dd:d1:f1:25:28:b1:95:b2:2d:98:2e:b7:7d:f2:6e:fb:
e9:58:e6:7a:ab:67:db:bc:75:dc:63:ca:7d:02:01:84:3e:1f:
f9:a8:e7:ad:90:4c:9d:68:1c:d8:a5:64:d4:b5:b5:e5:a9:48:
2d:ac:6d:ba:b6:de:b7:16:50:82:75:70:fa:f2:c8:a4:69:42:
3d:00:91:53:3c:a2:70:99:33:26:a5:80:49:55:2e:d4:b7:20:
d7:d4:d5:ad:c4:fa:16:5b:15:4f:4b:3f:17:12:51:45:9a:7e:
63:79:0c:c0:00:8b:75:97:51:46:d7:e9:15:52:26:ab:1b:af:
cd:6a:bf:7b:f2:e0:4d:40:5d:5c:0e:54:52:e8:14:6c:4c:63:
c7:b5:ab:4f:2b:a7:95:f1:a8:82:e8:fa:77:18:ea:50:8a:49:
c4:d7:41:c5:e3:cf:5f:52:7c:8a:7d:67:aa:86:a4:0c:27:ac:
fe:9f:71:bd:42:08:91:25:d0:39:f5:8f:f4:20:22:cc:81:a8:
6e:e0:53:b7:ed:be:1d:9f:f1:fc:61:7e:12:80:8f:63:3f:16:
f8:13:78:5e:5f:14:0a:16:77:ae:b6:69:a6:c2:34:50:ee:17:
54:7f:54:9c:be:7d:46:e8:6b:1c:25:a9:92:18:66:5e:6b:af:
77:65:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:53:20 2026 by rpki-client