
$ rpki-client -vvvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
File: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json)
Hash identifier: mgz0d71JbV8p7E1H4pDh4Gtwxfarhk+oa1x9VYcw9JA=
Subject key identifier: 38:57:8D:9A:59:02:64:AA:11:14:DE:0D:19:B8:7B:EE:5A:9F:FC:06
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Certificate issuer: /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial: 3A2B08D654995F7016B1EC6232FED31DB2BF8E6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
Manifest number: 03FF
Signing time: Mon 19 Oct 2026 04:40:39 +0000
Manifest this update: Mon 19 Oct 2026 04:35:39 +0000
Manifest next update: Tue 20 Oct 2026 05:50:39 +0000
Files and hashes: 1: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: YZsTTVBxh9O1FAxlvHBBWY8t9o4OiBkf8hw5m24oIx4=)
2: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: AJeEclXa5CwX2AB7q02vhN8/s4ZahQeA1KNn13EmJOg=)
3: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: QxpEpRdpz00jGtNTG7SSlMeuaQmHcvLeklQz9JSGTms=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2b:08:d6:54:99:5f:70:16:b1:ec:62:32:fe:d3:1d:b2:bf:8e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Validity
Not Before: Oct 19 04:35:39 2026 GMT
Not After : Oct 20 05:50:39 2026 GMT
Subject: CN=38578D9A590264AA1114DE0D19B87BEE5A9FFC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:da:bd:a2:a7:8c:af:9c:19:40:cf:57:e3:
f5:47:91:5a:04:74:6a:28:80:86:19:e8:eb:0c:6f:
42:6f:77:4e:31:4a:a2:0e:31:25:2d:e5:91:65:d5:
3b:e8:80:2a:cf:18:cf:f5:85:20:62:11:99:3d:f8:
b7:4d:97:62:5c:b4:88:2d:43:27:b3:e5:1b:4c:bf:
b3:89:fc:42:fd:3a:e3:8e:9a:fd:87:10:62:95:c2:
90:a9:ea:28:f3:ad:18:c8:dd:cc:ed:f5:72:75:6b:
d5:73:17:a9:07:72:af:f0:5e:02:f5:4a:92:ab:8c:
a6:71:58:d9:fe:22:af:f6:c3:75:ae:55:f4:03:5d:
71:5a:75:18:ff:7d:3d:1c:00:f9:dc:06:46:42:57:
f8:a3:e9:ca:e5:78:0a:df:22:3e:fa:71:57:57:98:
6f:af:a3:b6:38:b0:6e:35:06:cb:3f:71:cd:47:93:
26:a6:cc:9b:e7:58:94:37:d7:a5:f1:da:88:bf:7f:
ac:c9:ed:79:9d:96:f7:4b:33:63:fe:a9:ea:1a:6f:
92:57:7c:5c:6f:58:0a:ef:4f:f6:8d:23:8f:e6:b1:
c7:7a:98:82:4d:02:7e:18:95:cb:96:f5:2c:20:52:
40:f7:c3:4f:23:ce:7b:84:66:ea:99:fe:98:e8:a0:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:8D:9A:59:02:64:AA:11:14:DE:0D:19:B8:7B:EE:5A:9F:FC:06
X509v3 Authority Key Identifier:
keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:20:0d:9d:1b:9d:03:21:ed:11:af:f5:c0:97:49:da:34:3e:
ec:57:79:5d:21:be:90:d5:7b:e3:65:2b:6a:5e:ca:bf:83:c4:
e6:f5:12:1a:f5:bc:b9:e6:11:46:bc:6f:10:1b:e3:d7:10:21:
ee:34:13:3c:80:3b:55:a4:d6:ed:37:8b:e2:53:cf:7b:95:8f:
a1:e4:0b:ba:5b:37:c1:d3:08:76:0c:e8:82:d8:e4:55:0d:d0:
ab:e6:fa:c1:31:b0:b0:8e:b3:a1:f3:b0:eb:3e:33:e6:a3:eb:
8f:97:d1:9c:8a:80:07:be:79:8e:94:e8:1d:5e:4a:30:e3:b5:
27:e3:1d:89:12:5c:18:3a:65:52:12:1a:f6:58:0b:73:bb:ac:
4b:39:ba:25:17:a3:b6:d6:ab:1c:0b:cd:aa:92:88:f5:2e:cc:
e3:17:b9:fe:86:95:44:c3:a4:60:aa:95:57:b0:11:29:e8:15:
13:6d:ff:c2:c3:af:ec:97:54:83:26:59:1b:27:ea:48:6d:bd:
22:2e:a4:f0:12:7e:82:a8:2e:fc:cc:ee:14:99:7f:1f:32:7d:
54:c7:9a:1b:af:34:64:1d:5d:ec:44:63:ee:97:cd:3e:7e:46:
07:d5:68:ff:e3:81:b6:b1:0c:27:9e:37:33:ea:1f:e8:6d:95:
14:29:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:37:11 2026 by rpki-client