
$ rpki-client -vvf rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft
File: AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft (raw, json)
Hash identifier: u0wVKuElLe3tO66EcqPL/avkx0lYDOMilFizqlOOGgI=
Subject key identifier: 5C:8C:99:9D:4B:5E:41:D4:0C:6F:AE:60:06:57:25:E6:D2:A8:18:81
Authority key identifier: AF:22:FD:FE:9E:74:C4:49:6C:70:B5:04:FF:EC:28:64:F1:F6:A8:69
Certificate issuer: /CN=AF22FDFE9E74C4496C70B504FFEC2864F1F6A869
Certificate serial: 24F198DBC8262EDD5F07C977B35B7E7B75F4A43E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft
Manifest number: 0A
Signing time: Wed 25 Mar 2026 06:11:01 +0000
Manifest this update: Wed 25 Mar 2026 06:06:01 +0000
Manifest next update: Thu 26 Mar 2026 09:45:01 +0000
Files and hashes: 1: 323830343a383565343a3a2f33322d313238203d3e20323732363037.roa (hash: z12JUICPQb7EB2kRvswPIiP31KqgoENdf8iJc4MIQxY=)
2: AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.crl (hash: pGlP6b8qYCV4XDh4sOtNGSAu+5bT+MzMyDjVr7cdXqY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.crl
rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 09:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f1:98:db:c8:26:2e:dd:5f:07:c9:77:b3:5b:7e:7b:75:f4:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF22FDFE9E74C4496C70B504FFEC2864F1F6A869
Validity
Not Before: Mar 25 06:06:01 2026 GMT
Not After : Mar 26 09:45:01 2026 GMT
Subject: CN=5C8C999D4B5E41D40C6FAE60065725E6D2A81881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:42:91:3b:ab:d2:0c:26:78:d7:8a:69:32:ce:
63:e9:3b:88:79:37:05:62:92:07:4b:a6:37:b0:48:
60:73:65:26:f3:11:7f:92:a0:2e:fb:bc:37:1b:52:
b1:23:7b:85:07:8a:3a:cf:06:27:a9:49:03:09:5e:
49:a5:80:c4:85:34:dc:61:db:aa:30:ca:2e:66:f3:
16:13:93:a7:81:3f:3c:c5:4a:94:0d:9d:61:26:b1:
42:3e:14:7f:b3:d6:c8:ee:b7:90:a5:7d:0b:1a:a8:
e7:b4:7e:8f:20:a3:93:ab:19:1f:cc:f9:6b:c6:82:
8e:3b:3d:2b:48:0c:e5:3b:d2:f1:3e:c4:c5:02:65:
c0:0d:51:6a:55:8a:a2:7e:c0:c2:5b:4e:7b:f7:33:
5c:87:da:f4:28:8b:fc:50:46:84:ec:e5:62:57:3a:
5b:3a:62:96:28:bc:1a:97:90:ca:94:b7:a1:41:f7:
9e:00:3f:ec:39:80:1a:08:4c:70:87:fb:d3:3e:ef:
7b:db:3c:bf:a3:b3:34:a9:9c:62:4c:c0:9e:77:40:
99:2b:89:b4:f2:25:0a:c2:98:3c:f7:91:f9:2d:44:
b5:b2:96:e0:d2:8c:d8:61:08:24:0c:61:a6:50:ce:
3c:ca:9a:bd:85:1b:11:b8:aa:f4:0e:1b:7d:a5:e7:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8C:99:9D:4B:5E:41:D4:0C:6F:AE:60:06:57:25:E6:D2:A8:18:81
X509v3 Authority Key Identifier:
keyid:AF:22:FD:FE:9E:74:C4:49:6C:70:B5:04:FF:EC:28:64:F1:F6:A8:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:13:55:d6:d7:f4:bd:61:61:5b:87:9b:83:f4:bf:dd:ba:
62:9b:d7:08:97:65:da:ef:71:89:ff:f2:ee:40:57:c2:60:1d:
cc:03:d4:4a:31:1e:97:ac:45:6f:a6:a1:a6:0f:41:e9:77:e0:
08:dd:c8:ae:d8:32:6a:79:01:96:01:da:66:c9:92:db:ae:11:
36:2c:9a:17:3e:98:f3:97:d4:e1:65:43:be:71:c4:4b:f0:e9:
9a:43:40:a7:d3:a2:0f:10:99:e0:85:64:b9:61:cf:d9:e5:c6:
95:de:03:d3:b8:c9:bf:1c:52:80:86:c3:4c:f4:29:b3:18:4e:
f7:8a:d6:a5:51:b4:ac:62:bc:00:e1:bd:d3:84:4b:ce:e9:a9:
98:42:0e:19:1c:d9:0d:5a:e1:d5:5e:6b:f6:6d:b6:3e:62:5f:
f5:43:14:19:c0:31:42:36:dd:01:78:b6:e7:2e:15:b4:aa:e1:
8a:7b:13:e8:3c:63:01:63:33:1b:d7:c7:21:94:47:a9:00:06:
8f:71:4c:d6:df:2f:ec:ce:f1:37:19:9c:15:31:04:b9:2d:9c:
a5:1d:74:81:01:14:a8:98:2e:87:17:70:cd:4e:8b:2b:b3:fe:
88:57:c5:fb:c6:ab:14:0c:5e:46:f2:cd:fd:ea:f8:39:fc:e2:
74:6e:c7:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJPGY28gmLt1fB8l3s1t+e3X0pD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYyMkZERkU5RTc0QzQ0OTZDNzBCNTA0RkZFQzI4NjRG
MUY2QTg2OTAeFw0yNjAzMjUwNjA2MDFaFw0yNjAzMjYwOTQ1MDFaMDMxMTAvBgNV
BAMTKDVDOEM5OTlENEI1RTQxRDQwQzZGQUU2MDA2NTcyNUU2RDJBODE4ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwQpE7q9IMJnjXimkyzmPpO4h5
NwVikgdLpjewSGBzZSbzEX+SoC77vDcbUrEje4UHijrPBiepSQMJXkmlgMSFNNxh
26owyi5m8xYTk6eBPzzFSpQNnWEmsUI+FH+z1sjut5ClfQsaqOe0fo8go5OrGR/M
+WvGgo47PStIDOU70vE+xMUCZcANUWpViqJ+wMJbTnv3M1yH2vQoi/xQRoTs5WJX
Ols6YpYovBqXkMqUt6FB954AP+w5gBoITHCH+9M+73vbPL+jszSpnGJMwJ53QJkr
ibTyJQrCmDz3kfktRLWyluDSjNhhCCQMYaZQzjzKmr2FGxG4qvQOG32l5+zRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXIyZnUteQdQMb65gBlcl5tKoGIEwHwYDVR0j
BBgwFoAUryL9/p50xElscLUE/+woZPH2qGkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRKaFlXZEsydUVuUGcxMjZzTkg5aXJrM0JReXU5TXhqZTYxSEp1emJQ
cjgvMC9BRjIyRkRGRTlFNzRDNDQ5NkM3MEI1MDRGRkVDMjg2NEYxRjZBODY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMjJGREZFOUU3NEM0NDk2
QzcwQjUwNEZGRUMyODY0RjFGNkE4NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmRKaFlXZEsydUVuUGcxMjZzTkg5aXJrM0JReXU5TXhqZTYxSEp1emJQcjgvMC9B
RjIyRkRGRTlFNzRDNDQ5NkM3MEI1MDRGRkVDMjg2NEYxRjZBODY5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP3QTVdbX9L1hYVuHm4P0v926YpvXCJdl2u9xif/y7kBXwmAdzAPUSjEel6xF
b6ahpg9B6XfgCN3IrtgyankBlgHaZsmS264RNiyaFz6Y85fU4WVDvnHES/DpmkNA
p9OiDxCZ4IVkuWHP2eXGld4D07jJvxxSgIbDTPQpsxhO94rWpVG0rGK8AOG904RL
zumpmEIOGRzZDVrh1V5r9m22PmJf9UMUGcAxQjbdAXi25y4VtKrhinsT6DxjAWMz
G9fHIZRHqQAGj3FM1t8v7M7xNxmcFTEEuS2cpR10gQEUqJguhxdwzU6LK7P+iFfF
+8arFAxeRvLN/er4OfzidG7Hvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:20:50 2026 by rpki-client