
$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
File: CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft (raw, json)
Hash identifier: 7pkipl9WV4pD5zoOBTYCQY7ELNkDfffv13WwCGwUbdk=
Subject key identifier: 78:58:5D:C6:E3:09:8C:D2:6C:A1:2C:81:B6:A6:C6:EA:55:51:96:A0
Authority key identifier: CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
Certificate issuer: /CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Certificate serial: 2150D7FEB5E3CA3191B4F7498440E32CD5B89967
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
Manifest number: 0E
Signing time: Thu 26 Mar 2026 17:43:05 +0000
Manifest this update: Thu 26 Mar 2026 17:38:05 +0000
Manifest next update: Fri 27 Mar 2026 19:30:05 +0000
Files and hashes: 1: 3230312e3138322e3139332e302f32342d3234203d3e20323637353330.roa (hash: sJ5l6d7wZu203B3RoC+9yzOBkuHPbLgOurWGsKNtwAY=)
2: 3230312e3138322e3139322e302f32322d3232203d3e20323637353330.roa (hash: cXb/czMKwOYAAtmtT7uAebMmUEp9GOrGjvVCXgxxQz8=)
3: 3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa (hash: 4ZlPNxelWiFFTA0KwGp3vzYll948VHNG7kjorTioRNk=)
4: 323830343a343264343a3a2f33322d3332203d3e20323637353330.roa (hash: gg7SR/2jdbd/mkxi5XH8yUKR4ZDX0vlgqv0PMou/IzI=)
5: CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl (hash: j5y43ZdU5EbEEYfojX8PlH/YqjDa165wBbXukXec6UI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 19:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:d7:fe:b5:e3:ca:31:91:b4:f7:49:84:40:e3:2c:d5:b8:99:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Validity
Not Before: Mar 26 17:38:05 2026 GMT
Not After : Mar 27 19:30:05 2026 GMT
Subject: CN=78585DC6E3098CD26CA12C81B6A6C6EA555196A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:5a:1f:6f:79:24:e4:f5:e5:67:ca:73:1c:
d4:5a:d1:8a:93:23:d8:21:94:53:a8:b5:eb:53:31:
50:9d:62:38:2d:98:88:0f:3b:c0:c1:0f:a5:3a:be:
64:fd:3c:9e:79:23:37:02:f3:0d:9a:7c:7f:c8:9a:
44:1f:26:fa:4c:dd:44:e4:41:cf:e0:69:3c:ea:b1:
ec:b5:ac:42:2a:53:66:81:4b:df:8c:89:e6:de:aa:
d6:2b:f1:1d:f7:0c:ad:49:78:be:8b:f3:c2:16:fe:
61:10:c9:a6:ea:a2:a9:fc:aa:38:b7:1f:a0:f3:ac:
5e:fa:77:d8:fd:5e:8a:23:8e:be:5d:1f:61:e2:3c:
6e:51:e0:39:0e:32:af:80:e6:64:ff:b7:09:0f:5a:
13:ef:e5:1e:0a:01:2e:78:55:6c:26:0c:5c:6d:4e:
73:ad:91:ae:79:aa:bc:03:62:9e:81:72:fa:13:c3:
09:d4:8f:cc:b1:34:37:e0:79:5b:d4:4e:4b:89:fe:
7b:4b:b0:19:7c:7e:3c:f4:1e:6f:bc:e6:78:17:91:
b6:36:59:d2:c9:08:0a:18:6e:1b:24:e5:92:59:c3:
1b:b1:88:8a:42:00:b4:26:ab:dd:f0:6b:08:c7:33:
00:b5:79:ef:8c:54:7a:9c:1f:d3:41:27:c5:1d:79:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:5D:C6:E3:09:8C:D2:6C:A1:2C:81:B6:A6:C6:EA:55:51:96:A0
X509v3 Authority Key Identifier:
keyid:CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:43:af:1f:6f:c7:cb:7d:6a:3c:39:ff:76:de:55:ef:d8:d3:
08:08:cc:27:e8:d0:52:8b:a9:43:2d:52:bd:8f:a2:1c:89:56:
ae:cb:06:6a:cd:0b:40:68:c6:09:7e:d2:17:2e:32:f6:bf:3a:
02:a6:4a:49:1b:81:45:75:8d:4d:04:14:fd:bd:5a:ee:0f:ac:
f2:d1:5a:82:fd:35:3b:4a:b9:3b:61:72:92:5a:f4:d2:9e:c9:
03:1c:59:a3:e8:74:d8:5e:bd:2e:92:c6:4e:10:a1:dc:be:a1:
03:71:e8:aa:2d:4f:56:67:5b:fb:fc:0f:33:77:70:87:bc:0e:
6e:3d:aa:49:38:d2:a6:f3:63:06:56:9a:39:1a:7f:11:e3:3e:
03:1f:6f:58:d7:8e:0a:bf:02:3f:33:1b:96:50:10:29:fc:f3:
20:8c:f6:07:ee:0c:de:18:24:99:51:76:3c:76:73:48:b9:e1:
16:46:06:46:f6:1e:f5:63:88:25:58:3b:cb:aa:9b:ba:7b:af:
57:27:c8:80:24:06:75:fe:7b:c2:3e:25:c2:2c:e9:09:f0:7b:
96:85:98:b7:78:2d:d1:bf:d0:d3:0b:72:bc:c7:88:e2:16:46:
f1:37:c6:68:9b:58:a4:77:d2:5e:37:ce:db:1a:02:e1:35:42:
e0:01:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:17 2026 by rpki-client