
$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
File: AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft (raw, json)
Hash identifier: alRPtBuWMVA99o7EwAk1xzFQe28fxxCaPQRkm4QKXaA=
Subject key identifier: 74:5C:28:CF:74:AA:EA:97:FF:CB:AF:3B:41:BE:8B:03:35:3C:91:FA
Authority key identifier: AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D
Certificate issuer: /CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D
Certificate serial: 31B732D0BFDBC5B13FB3735CF5665215AC138B2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
Manifest number: A0
Signing time: Wed 13 May 2026 07:27:58 +0000
Manifest this update: Wed 13 May 2026 07:22:58 +0000
Manifest next update: Thu 14 May 2026 08:14:58 +0000
Files and hashes: 1: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (hash: hrE4qbNMZ/t+HxyrgMu0+iUYmAsIKUuouY7MuX68HtQ=)
2: 323830343a353864303a3a2f33322d3336203d3e20323638313531.roa (hash: GqMm8NNFLr5JuLBOAeiL74wqbaAr3JHCNftTnAcvSZ0=)
3: AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl (hash: jUn1ViPrfSPJu1T1SwMPfIy2Znr7Fn8ci7UVIpw1oEs=)
4: 3133382e35392e3135322e302f32322d3234203d3e20323638313531.roa (hash: m6wayj/8ArygpAe9VjU7LDB0oCkWCiYOwx2YKY6abP0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl
rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 08:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b7:32:d0:bf:db:c5:b1:3f:b3:73:5c:f5:66:52:15:ac:13:8b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D
Validity
Not Before: May 13 07:22:58 2026 GMT
Not After : May 14 08:14:58 2026 GMT
Subject: CN=745C28CF74AAEA97FFCBAF3B41BE8B03353C91FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:35:86:4b:9f:58:99:da:97:3b:1c:bc:f2:
15:7f:d0:76:1f:1b:af:f3:42:3b:63:a8:36:c5:20:
f1:3f:1e:a4:53:11:61:b3:ba:da:e8:2a:4d:24:4b:
e3:3c:bf:0c:50:a0:c7:73:7b:22:e6:6d:96:25:20:
9b:e4:97:07:32:ce:3d:7c:ac:a7:d3:6c:24:7b:c1:
a0:fc:28:a1:a6:3c:6c:d8:b7:24:53:6d:91:92:e2:
4c:48:61:21:00:40:65:08:96:b5:39:04:a7:25:95:
b8:e9:be:60:0d:4e:43:09:c1:c7:0e:a6:39:6f:ac:
45:ab:77:1f:f7:df:4e:3b:90:03:c1:23:04:0e:9a:
63:8d:97:73:b7:77:ff:c0:6d:20:31:2b:be:d2:df:
03:47:08:ef:94:59:4a:96:59:ae:0d:25:6c:fa:ab:
48:9f:28:5c:25:6e:81:d4:8c:4f:a7:8e:5d:de:d2:
ea:7b:a8:75:66:a5:87:a5:ce:ba:c9:67:28:7a:ee:
65:f7:39:55:05:cd:14:79:30:e8:de:05:13:78:38:
56:99:78:7d:4b:8c:85:94:dd:27:ed:fd:18:e3:67:
d2:08:80:2a:ad:53:c1:e9:b4:5a:f5:29:ed:83:d9:
4b:ee:1f:4a:c6:92:68:9d:07:e6:76:94:78:28:2a:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:28:CF:74:AA:EA:97:FF:CB:AF:3B:41:BE:8B:03:35:3C:91:FA
X509v3 Authority Key Identifier:
keyid:AE:79:3E:3F:B8:E1:E7:F9:17:2E:5E:9E:E5:8E:B4:D2:29:37:44:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/AE793E3FB8E1E7F9172E5E9EE58EB4D22937443D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0f:ad:cd:c2:ee:b4:9d:4f:54:b3:e0:5a:25:6d:74:ce:3e:
8a:ce:56:c9:8b:c6:43:34:ad:f2:5e:1f:e7:e4:b6:33:46:fb:
80:cb:80:10:f2:64:15:a5:4f:ac:5a:fb:9f:00:53:1b:0c:18:
ca:9a:76:e9:d5:6b:27:4e:bf:a9:e8:e2:64:b5:86:bf:f4:74:
65:ad:57:63:61:6f:56:9d:c2:69:91:70:3f:82:91:0d:30:1c:
43:f9:bb:4b:a4:4d:a8:8d:0b:28:cb:5a:ef:4d:75:f4:ce:04:
a7:63:98:f6:07:5c:47:12:66:64:ad:26:d9:47:62:9b:ce:b4:
ab:de:43:16:c9:0e:21:09:3e:85:30:8f:10:1b:f9:3b:1c:d1:
cb:a4:43:ca:2b:4f:52:3e:60:cf:12:10:f9:5c:50:a0:66:aa:
95:de:fd:e4:e9:1a:d8:6c:2a:96:ba:d5:bd:ce:0e:9f:d6:11:
09:b6:63:49:9a:17:79:55:46:f6:83:c3:72:c4:3b:9b:7b:7d:
9b:51:04:66:b4:39:1f:b2:4b:97:a6:f9:03:6f:3c:a4:d3:c4:
85:b1:c9:9b:51:eb:79:8e:bb:33:2c:47:b7:91:78:ad:4b:3d:
23:55:d2:f5:de:43:c3:1c:07:b4:3b:ca:68:64:90:89:27:39:
10:34:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:38:13 2026 by rpki-client