
$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json)
Hash identifier: kkaNUoeNdQ08yq535f2wNxreSOGGqbnai/l+DjH+rd0=
Subject key identifier: 7D:E8:84:33:84:32:FD:A8:C7:F4:6D:1B:5C:AE:CE:50:70:AB:F4:3E
Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F
Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F
Certificate serial: 1C2F0813D7A898A7003CE2B53FF5FFDB2FB5445F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
Manifest number: C4
Signing time: Wed 13 May 2026 11:07:20 +0000
Manifest this update: Wed 13 May 2026 11:02:20 +0000
Manifest next update: Thu 14 May 2026 14:16:20 +0000
Files and hashes: 1: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=)
2: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: Y+9ZoZ9kZLoFK03yMNUAfnuknEYBoiqLrJw03xMzI/w=)
3: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=)
4: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl
rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 14:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2f:08:13:d7:a8:98:a7:00:3c:e2:b5:3f:f5:ff:db:2f:b5:44:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F
Validity
Not Before: May 13 11:02:20 2026 GMT
Not After : May 14 14:16:20 2026 GMT
Subject: CN=7DE884338432FDA8C7F46D1B5CAECE5070ABF43E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:bb:66:f9:d6:95:f8:1e:5c:90:2e:81:2d:
97:9e:dd:43:58:d5:07:50:ab:9f:2a:e4:3c:31:86:
99:97:dc:0a:0d:3a:07:9b:9b:99:46:1b:47:7f:3c:
66:ea:46:a0:fa:6b:3e:72:c7:04:5f:8f:1f:b5:7f:
41:fa:ea:47:c6:e9:f7:8e:a4:4b:11:72:04:0a:58:
02:60:90:5b:8e:82:91:28:1b:fe:06:39:9d:36:66:
b9:84:45:ac:3f:70:9f:e1:15:d1:7b:93:2f:b4:a8:
7c:0f:34:7a:cc:c9:ef:ab:01:67:3e:bf:e4:70:1f:
05:3b:03:ed:8d:82:ef:c2:9d:8a:7b:e5:0a:39:5a:
06:38:fc:b2:cb:50:96:ee:dc:13:ff:c8:b9:88:f0:
88:f2:a8:6d:e9:17:68:f1:7c:7a:03:2e:ca:3f:72:
fc:d1:49:fe:f1:d2:b6:09:1b:2a:44:f8:11:45:ec:
3f:a9:20:ad:ed:46:cb:2c:75:a2:79:73:b4:3d:4a:
2a:52:29:94:60:e2:6e:c9:a6:37:c6:32:61:ac:ff:
4c:f0:d0:2b:db:b9:cd:cb:88:47:9d:0d:ad:4e:c5:
10:72:ea:9a:06:ab:0d:e7:76:f2:f5:a5:3e:88:d8:
0d:66:a7:d7:cc:d8:e5:75:37:a8:61:46:a4:e6:43:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:84:33:84:32:FD:A8:C7:F4:6D:1B:5C:AE:CE:50:70:AB:F4:3E
X509v3 Authority Key Identifier:
keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:79:06:03:43:63:2f:cc:7b:78:64:52:70:a9:ec:20:5d:
b8:7c:d7:80:dc:8b:e3:77:8c:a9:c0:21:6c:39:23:b9:a3:05:
52:13:a8:35:aa:75:59:d8:40:af:0a:56:7f:2e:78:bb:e5:4a:
46:c8:33:36:73:29:54:d4:f7:91:56:23:47:9a:a5:f0:03:42:
80:1c:48:10:a0:b5:69:f7:48:38:51:9c:16:4e:b9:dc:b7:2a:
38:7a:0e:12:9d:62:68:10:e8:51:c5:d6:50:34:e7:2d:e6:37:
a5:af:bc:8f:fc:65:0a:58:db:87:9e:a6:b7:90:ee:76:1a:64:
01:51:11:23:a8:27:e7:ee:db:a3:e2:8a:ed:df:b9:00:c1:5e:
30:b5:78:2b:f7:9e:0f:46:a5:c4:23:27:1a:01:30:98:62:eb:
7b:d6:86:f1:b4:45:a5:9d:91:cf:42:3e:da:ba:db:bb:78:b5:
81:3d:7c:86:1b:76:ef:df:ac:6b:8b:38:80:02:14:a7:55:10:
07:11:a1:be:a5:89:df:bc:e5:5e:7e:9f:3b:c9:85:d6:19:e6:
08:64:4f:fa:ab:70:22:01:ac:55:e8:22:bf:13:c0:78:70:6a:
df:7d:bc:20:2a:2f:75:4d:53:4f:65:c9:a8:a3:e9:77:0c:d7:
87:d3:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:39:02 2026 by rpki-client