
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json)
Hash identifier: +VULmsuOp+ubnPXD7dj7Y/rk33yhvI2thSEX4pnYMqQ=
Subject key identifier: 44:3A:92:4A:41:74:56:B2:A9:EE:A0:70:5D:49:D9:4B:29:87:B2:48
Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Certificate serial: 6E4C14D29F64621EC42A2348F351C5602C4831AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
Manifest number: 019C
Signing time: Fri 24 Jul 2026 06:22:48 +0000
Manifest this update: Fri 24 Jul 2026 06:17:48 +0000
Manifest next update: Sat 25 Jul 2026 07:49:48 +0000
Files and hashes: 1: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=)
2: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=)
3: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: l8PicWKGvKjQuGbw0+TPozQyDmKzNTN8Ca2Or3tlblQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 07:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4c:14:d2:9f:64:62:1e:c4:2a:23:48:f3:51:c5:60:2c:48:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Validity
Not Before: Jul 24 06:17:48 2026 GMT
Not After : Jul 25 07:49:48 2026 GMT
Subject: CN=443A924A417456B2A9EEA0705D49D94B2987B248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:63:23:0c:65:6f:3c:71:f5:81:8f:5d:8b:
2d:cf:87:21:6a:13:2c:c2:7f:b0:ed:5d:30:d1:56:
86:4b:9a:62:41:c7:46:80:74:ba:9e:2d:48:fe:59:
fe:e3:3d:d2:7b:82:27:05:c9:88:20:5b:6d:b1:17:
16:3f:b1:ca:09:7a:95:72:e7:b2:b5:0f:24:b3:0e:
25:e5:c3:6b:ee:89:da:f0:bf:b2:c8:7d:8c:86:e2:
90:3c:57:83:20:a3:87:8b:3e:8c:7e:68:df:70:40:
f2:8e:bc:4d:d9:29:25:21:91:3e:cb:cf:3b:0d:68:
f9:e5:72:cf:b5:07:0d:db:26:8c:2e:8d:d9:4d:d6:
b6:73:64:f5:44:53:45:29:9c:fc:47:ed:66:b2:ad:
73:c1:66:01:fc:17:9e:13:26:5c:6c:8e:af:5d:0b:
3a:3f:81:ac:cf:70:bb:56:4d:01:4c:79:be:9d:cd:
e6:09:c4:bb:af:c3:14:04:eb:8a:9f:2f:b1:5a:e5:
ad:52:f4:ca:42:e9:74:72:a7:ff:ce:1c:b0:f4:24:
82:17:4d:58:28:d3:09:30:cb:f7:40:cf:25:2f:23:
5b:20:58:3e:4a:15:36:83:5d:fb:77:64:2b:c4:94:
a8:ee:50:ec:37:bb:17:5b:40:c7:56:c6:02:27:87:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:92:4A:41:74:56:B2:A9:EE:A0:70:5D:49:D9:4B:29:87:B2:48
X509v3 Authority Key Identifier:
keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a2:25:b8:90:fb:8e:4f:e5:f5:37:8e:20:d9:db:e7:0e:1c:
09:01:31:7e:b6:5c:eb:91:5d:19:4d:7f:e4:7a:8c:27:56:9f:
83:33:59:32:b5:74:c9:83:6e:12:62:7b:2c:69:3d:bb:16:f2:
05:40:ea:7b:b6:41:8c:e9:6e:5b:00:71:56:73:8b:e0:72:80:
9e:22:76:d2:c1:52:8a:ec:bf:ef:90:84:c7:ad:b7:ae:d3:e9:
48:d8:48:e3:9c:71:d4:57:41:39:8f:90:eb:97:ce:18:51:c9:
58:30:58:c5:e8:42:3b:48:7d:ac:6d:c5:30:60:fd:cd:19:4c:
16:df:93:be:0c:32:18:c2:22:fa:9b:c2:b7:31:3d:e7:db:8f:
37:43:ce:5e:29:40:59:c0:a3:8d:25:36:08:f0:75:e9:63:4d:
1c:0c:28:e6:a6:9d:e5:b3:ab:74:08:d0:54:f0:56:eb:4f:6c:
df:08:94:7d:0e:d3:d1:fd:96:4c:54:83:61:c2:bd:c0:5f:8b:
b0:8a:c2:5b:54:a6:65:e6:06:d1:3e:24:dc:a1:fc:ed:20:bd:
c6:55:52:83:e8:15:18:dc:ed:e8:b7:f8:40:a4:2a:6a:c3:23:
dd:83:bc:a8:40:fa:64:a5:18:c7:39:e8:dc:f2:7f:87:78:1b:
1c:37:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:06 2026 by rpki-client