
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
File: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json)
Hash identifier: XlzmVsmXd5/NOnJdWXakIgNrHo5DJgMTgkG/2VdnJXY=
Subject key identifier: 67:5E:FD:27:A4:50:27:58:F6:BA:EB:70:55:04:BF:9B:3D:D8:73:B9
Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Certificate serial: 48CD3D771C6F6C47B4162DAB95AC7E02CE6A12D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
Manifest number: 011B
Signing time: Fri 24 Jul 2026 02:50:37 +0000
Manifest this update: Fri 24 Jul 2026 02:45:37 +0000
Manifest next update: Sat 25 Jul 2026 02:58:37 +0000
Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=)
2: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: NUpf2cmV7cCwKUa/ZZYruubNweVXKOKNKgQZFXS5wh8=)
3: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 02:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cd:3d:77:1c:6f:6c:47:b4:16:2d:ab:95:ac:7e:02:ce:6a:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Validity
Not Before: Jul 24 02:45:37 2026 GMT
Not After : Jul 25 02:58:37 2026 GMT
Subject: CN=675EFD27A4502758F6BAEB705504BF9B3DD873B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:ae:d6:01:aa:42:20:74:cc:0c:3a:a5:aa:
f4:cd:4c:4f:f3:ae:8b:e5:54:23:bf:a1:f5:b0:cf:
c2:88:7c:09:06:9a:de:84:9b:8c:95:15:47:1b:6e:
2a:1c:71:6c:50:e1:69:63:d5:26:ea:3f:7d:3c:f4:
e4:f5:c2:65:74:f4:48:24:ca:09:2b:2f:37:96:b3:
48:b2:2b:14:80:61:7e:70:0a:a7:ea:01:7e:0c:b7:
9b:7a:fa:09:56:c7:7e:b8:ea:d4:1a:00:7c:98:1e:
97:b5:e8:4f:28:b9:d9:35:6b:81:9f:82:fa:0d:9b:
85:df:58:9b:02:aa:8c:aa:aa:51:bd:ab:7b:bf:8e:
5e:ce:2d:1d:db:86:9e:45:77:30:e4:38:74:a3:42:
44:c4:bb:93:c9:34:45:a5:43:bf:52:01:60:55:01:
17:24:68:f0:7f:97:c2:02:47:7d:b4:0e:ea:ed:5e:
8a:0c:81:31:8d:32:1c:8c:1c:0c:8e:55:e2:3d:a1:
6d:46:13:d0:ff:96:0c:23:d8:b7:03:ca:61:7d:50:
d0:ed:02:76:74:d6:72:62:29:23:da:80:71:1a:57:
e5:04:0e:fa:50:45:c4:83:70:a1:3c:e5:ea:81:de:
2d:a2:6c:97:1a:94:0a:2e:c9:d8:bb:ad:1f:ba:66:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:FD:27:A4:50:27:58:F6:BA:EB:70:55:04:BF:9B:3D:D8:73:B9
X509v3 Authority Key Identifier:
keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:86:60:39:ed:47:dd:df:72:e7:29:e5:3e:99:c1:47:ae:de:
52:13:a3:dc:07:e4:54:3a:68:c0:cc:0a:78:33:91:ca:1b:7b:
fe:bc:30:be:67:e1:7c:e0:cc:35:24:cf:96:05:05:40:cd:8a:
9b:c2:d3:56:f4:39:48:88:79:f1:7c:f4:87:f5:d0:6d:8d:71:
2d:61:e8:f2:3d:d9:ea:72:37:19:d8:d8:26:02:9e:d4:76:72:
d4:2d:68:fb:c0:a8:ce:99:7b:08:25:4c:e4:18:8a:39:34:d0:
43:0a:12:de:94:76:0b:dd:d4:b5:15:69:29:52:fa:b8:61:c9:
20:8c:3d:78:fb:5e:2b:88:f4:6c:93:ef:45:8e:39:3e:3e:cc:
c4:22:73:49:7f:1e:9f:2c:51:89:f2:f6:5e:79:de:5b:a3:49:
86:3e:c5:48:d0:c5:53:9d:04:9b:7a:4f:51:9f:5d:e1:eb:0f:
c3:1f:ff:c3:91:55:3c:be:3e:b9:23:fa:ec:26:27:76:8b:d7:
74:f5:4f:76:cb:ef:a2:9d:f2:c8:08:ff:bc:33:42:7b:46:d7:
00:64:b3:ca:5d:92:d8:22:8a:8d:46:55:ab:b7:00:bb:2a:c1:
0b:80:a3:54:61:69:bd:36:79:7c:79:b2:f7:72:88:82:7c:81:
d6:d5:2e:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSM09dxxvbEe0Fi2rlax+As5qEtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF
QjkxQTA3QTAeFw0yNjA3MjQwMjQ1MzdaFw0yNjA3MjUwMjU4MzdaMDMxMTAvBgNV
BAMTKDY3NUVGRDI3QTQ1MDI3NThGNkJBRUI3MDU1MDRCRjlCM0REODczQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfe67WAapCIHTMDDqlqvTNTE/z
rovlVCO/ofWwz8KIfAkGmt6Em4yVFUcbbioccWxQ4Wlj1SbqP3089OT1wmV09Egk
ygkrLzeWs0iyKxSAYX5wCqfqAX4Mt5t6+glWx3646tQaAHyYHpe16E8oudk1a4Gf
gvoNm4XfWJsCqoyqqlG9q3u/jl7OLR3bhp5FdzDkOHSjQkTEu5PJNEWlQ79SAWBV
ARckaPB/l8ICR320DurtXooMgTGNMhyMHAyOVeI9oW1GE9D/lgwj2LcDymF9UNDt
AnZ01nJiKSPagHEaV+UEDvpQRcSDcKE85eqB3i2ibJcalAouydi7rR+6Zt7/AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZ179J6RQJ1j2uutwVQS/mz3Yc7kwHwYDVR0j
BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz
Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF
MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMC9B
RkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbIZgOe1H3d9y5ynlPpnBR67eUhOj3AfkVDpowMwKeDORyht7/rwwvmfhfODM
NSTPlgUFQM2Km8LTVvQ5SIh58Xz0h/XQbY1xLWHo8j3Z6nI3GdjYJgKe1HZy1C1o
+8Cozpl7CCVM5BiKOTTQQwoS3pR2C93UtRVpKVL6uGHJIIw9ePteK4j0bJPvRY45
Pj7MxCJzSX8enyxRifL2XnneW6NJhj7FSNDFU50Em3pPUZ9d4esPwx//w5FVPL4+
uSP67CYndovXdPVPdsvvop3yyAj/vDNCe0bXAGSzyl2S2CKKjUZVq7cAuyrBC4Cj
VGFpvTZ5fHmy93KIgnyB1tUu1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:50 2026 by rpki-client