
$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
File: CF357620357B25129A68E7D55D716CED7E4E1516.mft (raw, json)
Hash identifier: 3UwvCU8FNF1kxnS1uxLjNUieZmXDPDiCRwNKRx5VdtQ=
Subject key identifier: 4C:B9:49:55:B5:2F:F2:C1:5B:2A:2F:85:0F:79:73:C4:1E:41:FB:C0
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Certificate issuer: /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial: 337C3C4D5F517B61B1CA8910036508FF15A25C50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
Manifest number: 02A1
Signing time: Wed 25 Mar 2026 18:10:51 +0000
Manifest this update: Wed 25 Mar 2026 18:05:51 +0000
Manifest next update: Thu 26 Mar 2026 19:06:51 +0000
Files and hashes: 1: 3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (hash: FrtYQgGX76cnE7uQafuRYboGA917Ay3diGxJLT0XKGM=)
2: CF357620357B25129A68E7D55D716CED7E4E1516.crl (hash: cLlXOT6a7/lHyPnoMRGt7c+mX7F/tt1ZlSKpGujIp1I=)
3: 323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (hash: lU6VrvpBYvmFhj9XMV8wCL1iuM4M5kJ+oQfWSvxRzlc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 19:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:7c:3c:4d:5f:51:7b:61:b1:ca:89:10:03:65:08:ff:15:a2:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
Validity
Not Before: Mar 25 18:05:51 2026 GMT
Not After : Mar 26 19:06:51 2026 GMT
Subject: CN=4CB94955B52FF2C15B2A2F850F7973C41E41FBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:16:52:53:1d:6c:ad:7b:ad:26:a7:56:de:
0a:a1:73:ee:00:29:f6:ed:b0:7c:ce:34:63:24:61:
e8:a7:b7:6f:c4:33:e5:c0:4d:b4:b8:67:61:ef:8b:
5d:12:c9:90:0b:38:71:0b:43:c8:76:af:d6:79:67:
d3:8d:c3:2c:fa:f8:22:2f:29:8f:3f:0c:d7:fb:70:
91:65:9f:3a:b6:44:bd:bc:4d:b7:a2:d1:9b:b9:39:
ea:a7:0a:57:37:73:dc:bd:12:8d:3d:2a:97:18:4d:
53:99:09:ea:3a:ab:14:6b:fb:a9:ec:9c:83:70:f2:
51:83:b6:74:2a:fb:ad:fb:f1:38:85:96:3a:61:ed:
36:af:c4:1d:34:d9:b4:2c:71:4f:55:59:6d:73:8b:
35:13:28:85:22:69:0a:29:bf:04:72:da:6a:3e:fe:
8e:c9:fb:bf:3c:25:96:57:53:f4:95:78:8f:12:ab:
86:5b:99:5a:92:cb:56:3f:85:aa:05:1a:3a:bb:8a:
e0:12:8f:29:02:c7:80:93:5e:d0:d1:f4:16:e8:44:
61:5f:12:f7:93:2d:82:52:f5:d3:82:b3:68:1d:32:
0b:a2:66:f6:fe:7e:4a:5f:5a:0a:40:bc:1f:89:7b:
05:23:ae:3f:71:76:82:7a:02:25:a9:32:00:42:7d:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:49:55:B5:2F:F2:C1:5B:2A:2F:85:0F:79:73:C4:1E:41:FB:C0
X509v3 Authority Key Identifier:
keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3d:09:78:7e:96:56:c8:94:12:50:9e:2e:73:ce:ec:b3:2d:
c2:a2:66:6b:50:c9:5a:4e:26:ab:ae:57:0f:02:c6:f5:85:6c:
83:24:b2:eb:fd:d1:21:91:35:c6:00:fc:c7:8b:90:cd:c7:27:
95:07:99:3b:43:67:86:da:3e:30:a7:c0:68:b8:69:42:cb:08:
3a:cb:1d:8b:29:7f:de:99:54:b5:33:6b:6f:d9:00:94:dd:73:
57:8c:2c:9a:3c:65:26:01:51:d5:33:3b:b8:8b:d0:9e:04:aa:
a5:3b:73:4f:4e:94:dd:5a:c1:4f:9c:17:73:b6:5c:ff:69:27:
bc:01:24:3b:f1:46:f3:ef:ad:d1:75:14:32:27:90:5e:eb:b1:
61:65:b1:ea:fc:7d:cd:f5:a6:4f:5e:f6:68:86:cb:6e:d6:43:
26:4c:d2:41:3f:09:7e:28:99:41:29:f6:2b:2c:10:14:20:a1:
8c:0f:7b:13:50:83:f2:be:6d:50:38:63:bd:ef:22:77:5b:1b:
b6:1c:db:8d:f3:53:35:fb:ef:00:d5:4f:ad:b6:08:63:98:ff:
df:d5:3f:1e:bc:aa:48:8e:7b:5f:18:a8:c0:c7:63:43:79:16:
34:e0:45:3d:52:ed:31:07:9e:48:57:7c:ba:79:25:58:50:dd:
d8:48:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:32 2026 by rpki-client