
$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
File: CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft (raw, json)
Hash identifier: OT2m7amHAx28Qiey4fhXAjVWTTz2mfW1MnCEvdYnCcc=
Subject key identifier: 69:87:30:89:00:AA:20:1D:D2:C5:29:3D:04:7F:02:E7:A3:7A:32:CF
Authority key identifier: CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
Certificate issuer: /CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Certificate serial: 73AFE5842F587A9B7D788AFC4243D106F1B23B33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
Manifest number: 4E
Signing time: Wed 13 May 2026 12:00:37 +0000
Manifest this update: Wed 13 May 2026 11:55:37 +0000
Manifest next update: Thu 14 May 2026 12:17:37 +0000
Files and hashes: 1: CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl (hash: xinCG7B62cFQ2tvxSMUJAyk3uIidQtgFtHyIZf/gn7g=)
2: 3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa (hash: 4ZlPNxelWiFFTA0KwGp3vzYll948VHNG7kjorTioRNk=)
3: 3230312e3138322e3139332e302f32342d3234203d3e20323637353330.roa (hash: sJ5l6d7wZu203B3RoC+9yzOBkuHPbLgOurWGsKNtwAY=)
4: 323830343a343264343a3a2f33322d3332203d3e20323637353330.roa (hash: gg7SR/2jdbd/mkxi5XH8yUKR4ZDX0vlgqv0PMou/IzI=)
5: 3230312e3138322e3139322e302f32322d3232203d3e20323637353330.roa (hash: cXb/czMKwOYAAtmtT7uAebMmUEp9GOrGjvVCXgxxQz8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:af:e5:84:2f:58:7a:9b:7d:78:8a:fc:42:43:d1:06:f1:b2:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Validity
Not Before: May 13 11:55:37 2026 GMT
Not After : May 14 12:17:37 2026 GMT
Subject: CN=6987308900AA201DD2C5293D047F02E7A37A32CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:8e:38:e7:e0:c6:1a:93:7f:9b:ea:ca:e0:
bc:21:1e:b9:8d:e8:85:2d:4c:b1:05:52:7f:99:7f:
37:b0:41:5d:80:c0:3b:4f:ed:e5:66:db:d0:45:9a:
27:b9:e2:15:68:72:8b:fd:20:e1:d3:bb:ad:b0:c1:
8f:5b:2c:e6:0b:c4:c9:7c:ec:b2:36:80:2d:e1:53:
64:9d:a3:25:4f:b6:36:dc:64:ac:fe:78:b2:ee:31:
ad:ef:58:34:50:c3:de:a4:9b:9b:f9:4e:5d:d7:fa:
76:36:3d:e0:e4:81:fd:a4:c3:d9:46:1e:90:22:fe:
bf:ff:14:35:27:63:33:e8:70:5a:bb:0a:5a:94:d0:
ec:ff:73:f5:fe:79:c8:3e:f4:4e:bf:ff:0d:4d:35:
c0:8f:5e:7b:8d:e5:e4:fb:bd:cc:43:c5:bc:07:68:
a5:0b:ce:22:e0:50:97:1b:06:a9:bc:a0:77:8d:53:
c0:42:54:a3:51:d2:12:27:38:20:41:ff:ef:35:3a:
8a:17:28:d9:f8:61:0f:21:3a:df:f6:f6:f2:a0:2c:
cc:9e:85:bf:be:f2:90:6e:67:98:1c:d9:a8:c0:bf:
9b:3c:45:94:a5:a6:c8:90:b2:dc:1b:cb:39:ed:43:
1a:42:ca:c1:aa:d7:7b:c2:b2:dd:4b:70:94:8e:57:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:30:89:00:AA:20:1D:D2:C5:29:3D:04:7F:02:E7:A3:7A:32:CF
X509v3 Authority Key Identifier:
keyid:CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:65:a1:8e:79:91:ba:7d:6d:30:2a:48:ca:7e:10:09:df:
58:48:5a:55:e5:e6:a7:77:89:29:46:be:1c:93:98:c1:c7:24:
0f:ac:86:c2:35:b1:d1:e8:b4:b1:db:68:64:a0:a0:a3:cd:98:
d7:f3:f9:75:10:a5:df:a8:e4:73:7f:4e:5b:65:41:67:05:b2:
2b:11:29:8c:17:60:9c:10:86:4f:ad:b6:be:46:c5:27:7f:45:
1e:dc:03:3b:1b:8a:a3:6a:ad:43:35:0b:e9:13:b0:f9:ad:b5:
65:04:8e:9b:4c:49:d2:a6:45:ed:09:c3:30:f7:10:1c:35:ad:
48:e7:3e:eb:b2:0c:c8:8b:18:36:18:4a:b6:fa:76:d0:9a:31:
90:9c:ed:4b:f3:61:15:e3:59:24:23:d0:3c:f3:65:7d:3a:c9:
8b:ce:d9:e0:00:25:f5:35:33:67:5a:62:06:3b:20:59:2c:c5:
03:09:69:a9:12:2f:8f:b6:f0:d2:34:c2:13:a3:73:23:c2:c6:
cf:69:32:f9:5f:89:83:05:2c:72:6a:25:91:ef:6f:b8:2c:85:
06:48:a4:7f:aa:31:48:02:65:8c:15:88:2a:ba:4f:7c:b5:21:
f6:e7:2c:7c:32:f3:2a:f5:aa:20:22:65:ae:9c:31:41:e0:eb:
e5:aa:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:19:08 2026 by rpki-client