
$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft
File: CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft (raw, json)
Hash identifier: SCUt/wav37sAzn4bCKztTOg4dqRym4RgbKwrU+7wqSo=
Subject key identifier: 95:EE:C3:B9:65:A6:0E:48:B3:06:EE:5F:32:DD:CC:98:58:B3:E7:1A
Authority key identifier: CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA
Certificate issuer: /CN=CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA
Certificate serial: 0BAAA4B4CD4B64CCF0BC480ACB660A3AAB0FD256
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft
Manifest number: 0D
Signing time: Wed 25 Mar 2026 22:23:17 +0000
Manifest this update: Wed 25 Mar 2026 22:18:17 +0000
Manifest next update: Thu 26 Mar 2026 23:46:17 +0000
Files and hashes: 1: 3137372e35322e34302e302f32322d3332203d3e20323632343337.roa (hash: ONXcXCfa0ilI1Z8QDTms6v6yeCIjrhJRAQqHP4+DqpE=)
2: 3230312e3137352e34382e302f32322d3332203d3e20323632343337.roa (hash: F27yvA8oEMYfBmWVuzv7MbXVIzW+io4xAvOrJcd/DDU=)
3: 323830343a3437633a3a2f33322d313238203d3e20323632343337.roa (hash: o8eR2IfZRG1u4RF7SBJ2rr1UFixmywHUP8nntyvK+Js=)
4: CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.crl (hash: eG/SMBMlnHe3N6wQweWb398I+Q0ZhchsVUCBfroU1Qw=)
5: 3137302e38322e382e302f32322d3332203d3e20323632343337.roa (hash: sgJJsyHHruVv9esiFhIxhle3WLXGcG3me6vMTeWzujE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.crl
rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 23:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:aa:a4:b4:cd:4b:64:cc:f0:bc:48:0a:cb:66:0a:3a:ab:0f:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA
Validity
Not Before: Mar 25 22:18:17 2026 GMT
Not After : Mar 26 23:46:17 2026 GMT
Subject: CN=95EEC3B965A60E48B306EE5F32DDCC9858B3E71A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:d7:39:c1:3e:13:2c:76:52:ee:bc:8f:f6:
02:2b:46:1d:ea:8e:df:31:c0:7c:36:92:d3:37:c1:
7f:4c:bc:d3:17:32:12:15:7e:6a:09:bf:78:e8:44:
31:30:0a:da:4f:00:ee:f9:c9:a7:01:af:b1:89:20:
b7:8b:7b:46:16:e1:5c:b1:34:10:3f:a1:1b:02:7a:
d1:da:27:0d:83:cf:13:7f:d6:59:0f:f4:c7:f7:23:
7d:fc:0d:85:4d:09:6d:8a:87:26:d4:a2:72:b6:ab:
99:ea:a9:49:ea:cf:07:df:68:e8:7c:64:40:88:10:
23:aa:4a:b8:24:4b:43:be:a3:1d:3e:a4:63:6c:4a:
61:fc:f0:1d:ba:29:fa:d6:81:68:1f:de:a9:75:d9:
0b:cd:86:f0:b8:88:1f:93:01:04:b9:06:ff:22:86:
4f:5a:a5:a4:a6:f5:b4:80:f8:df:7b:4e:41:a6:58:
5a:64:65:d1:34:8c:ea:1d:a0:16:05:a2:e5:22:3d:
57:51:b3:ff:2f:ee:51:eb:a8:91:1e:d1:df:d6:fa:
f7:d3:71:24:b9:71:67:fa:b7:e5:0a:84:14:1d:f7:
32:d8:03:27:3f:b7:48:8f:bd:91:7d:3e:6f:11:3a:
44:f5:a5:53:8a:f9:4b:8c:76:bc:d2:1a:05:5a:54:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:C3:B9:65:A6:0E:48:B3:06:EE:5F:32:DD:CC:98:58:B3:E7:1A
X509v3 Authority Key Identifier:
keyid:CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2e:7e:db:5a:c1:5b:e2:57:03:ef:4c:24:58:67:1c:0d:bc:
4e:bc:51:f8:7d:ae:a0:14:1a:d8:54:9c:a8:ed:ca:ce:0a:e6:
44:ab:94:2b:d3:22:1c:7f:40:94:27:c3:ec:a4:6d:8c:de:c3:
da:17:97:f2:88:c9:c3:bf:20:29:a9:ad:fa:7d:4e:4e:06:ca:
d7:2e:40:4b:53:df:f2:18:c4:7a:c6:9e:99:10:db:c4:94:57:
f7:69:e8:e8:98:7b:ce:7b:16:7b:b8:be:e2:cc:12:0a:38:65:
d0:8f:fa:db:b7:cd:8e:95:0e:45:38:24:05:41:6f:15:39:64:
0d:cb:de:33:b9:8e:ae:1d:f9:6b:b1:09:9c:27:ef:56:92:84:
1f:9f:73:dc:f7:bf:a3:38:88:c2:ce:32:57:17:c8:91:15:11:
60:07:0d:f3:31:5f:c4:22:dd:81:78:cc:9b:68:a9:25:6e:db:
74:67:22:ce:a7:93:ca:ce:19:5c:b5:6e:14:ce:8b:26:32:12:
b8:d9:9e:4d:4f:52:84:cb:ef:31:cd:9b:a0:4e:2a:43:98:3c:
30:60:21:57:5e:fe:e3:e8:f4:53:1a:99:35:45:c8:4e:ad:68:
ac:02:cc:80:cb:b5:ef:e9:f2:5b:cf:45:b1:29:77:61:5d:c1:
b1:ce:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:20:10 2026 by rpki-client