
$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
File: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft (raw, json)
Hash identifier: 6PHTOWW5KjcBatUc2ZYaNELa5ZR6CBNck/yWo5Qc4+A=
Subject key identifier: 17:E3:4B:2C:0F:75:6A:AC:DD:75:DE:2A:34:41:B2:AA:BA:74:B9:99
Authority key identifier: AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6
Certificate issuer: /CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
Certificate serial: 71878D10AD0B98490F75D2B5BB534DF1189DFDCA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
Manifest number: 021B
Signing time: Wed 25 Mar 2026 20:10:50 +0000
Manifest this update: Wed 25 Mar 2026 20:05:50 +0000
Manifest next update: Thu 26 Mar 2026 20:40:50 +0000
Files and hashes: 1: 34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa (hash: umFa4GC/duQRvjfsWVEOD57TA6aUaq8a96tJwmW0d8M=)
2: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl (hash: aKyJp1QkbXCWoDmguH4qH1CDV2eMbYkbs1agAGM4vNE=)
3: 323830343a376533343a3a2f33322d3438203d3e20323731363039.roa (hash: nPRuI94igBJx6U2HfzJUzoSEPIf/jwPwFyi43PPI/UA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl
rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 20:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:87:8d:10:ad:0b:98:49:0f:75:d2:b5:bb:53:4d:f1:18:9d:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6
Validity
Not Before: Mar 25 20:05:50 2026 GMT
Not After : Mar 26 20:40:50 2026 GMT
Subject: CN=17E34B2C0F756AACDD75DE2A3441B2AABA74B999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:4b:b0:a3:04:21:39:95:37:c4:a1:b8:89:
9a:52:ee:2f:e7:2a:f6:83:da:4b:3d:ad:df:c1:6d:
7e:7a:5f:d6:da:df:06:03:5e:20:67:6a:49:f4:71:
ad:66:90:8b:35:55:56:54:8f:01:a8:53:1b:f8:30:
17:1e:5a:cd:e3:f3:c9:a1:18:26:8d:25:64:9b:a2:
08:02:79:39:0c:f8:4d:9a:fd:31:7a:ab:9b:a7:91:
11:dc:4c:35:e0:cb:08:53:ef:9c:ff:a6:8b:c1:8d:
3e:79:cc:57:1d:73:4d:99:b9:1f:b8:7d:a5:a3:e2:
69:b6:89:46:cb:04:68:0e:68:a8:61:bd:99:58:a2:
dc:99:2e:19:a0:bf:92:df:89:9a:ec:8b:65:48:e6:
5c:bf:56:8b:bf:43:d8:c6:f2:a4:8d:02:4b:9a:70:
c2:2c:6f:41:0c:64:64:bc:59:c0:32:88:e5:5a:76:
97:5a:76:e0:f5:87:a5:67:a0:93:e7:72:fb:0a:bb:
a5:49:c9:75:64:b3:65:5c:81:ec:be:c9:5a:27:8a:
7e:db:dd:c8:a5:f0:08:be:39:b9:64:e4:57:8a:d2:
a4:bf:5e:1f:1f:72:36:81:02:48:40:1e:40:2f:19:
12:64:43:03:1c:17:25:22:ba:f1:d0:0c:33:b1:61:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:4B:2C:0F:75:6A:AC:DD:75:DE:2A:34:41:B2:AA:BA:74:B9:99
X509v3 Authority Key Identifier:
keyid:AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:45:47:7b:3a:d2:36:b7:17:51:5c:9d:dc:be:4f:e1:9d:01:
9d:09:a2:64:ef:96:ef:71:7d:eb:86:58:fc:71:d8:f1:98:39:
74:cd:41:04:65:dd:49:2b:86:38:5d:34:c7:29:8e:74:d9:4a:
7f:19:13:8b:aa:35:3c:a0:b7:b2:8a:a8:20:33:42:27:6c:ba:
3f:45:f6:44:1c:67:0b:d2:19:ef:01:ac:48:e3:63:95:fa:4c:
bc:9c:26:0e:06:51:91:a0:90:b4:a3:51:90:c3:14:dd:d6:2b:
d3:9a:8d:57:0d:00:0d:43:0b:b5:ab:20:2f:73:6c:1a:ed:7a:
26:54:0f:63:a2:76:e0:ad:4d:5c:03:e1:39:2c:91:40:b6:ad:
40:fa:ff:d4:28:da:e0:14:de:cb:d8:d4:5d:ae:64:f2:40:51:
e1:3c:41:2d:85:cb:ce:56:6c:8c:65:83:ce:ae:52:57:47:1e:
e7:dd:cc:e4:46:0d:9d:e4:d1:b0:cb:14:16:6a:e6:f1:79:23:
fe:9c:d6:5c:49:a4:91:b2:2d:fc:4c:af:e7:19:01:fb:68:a7:
1e:39:ff:41:2f:1a:c4:62:d3:6f:4e:f3:03:df:53:ba:32:c5:
8e:6e:c0:07:d0:2e:e4:27:9a:39:16:8f:2c:72:f7:22:0e:78:
4e:54:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:50 2026 by rpki-client