
$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier: zACjm6tSvxNO1Fh9buTEpdWRdCly/40/zmqe75O/Wac=
Subject key identifier: CA:6B:33:0C:A6:8E:7A:32:6B:02:B5:69:50:18:A9:B9:29:B7:C0:60
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial: 6836B4445F944DE42E79A9C8B7B6138BA15911F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number: 0180
Signing time: Thu 26 Mar 2026 14:56:07 +0000
Manifest this update: Thu 26 Mar 2026 14:51:07 +0000
Manifest next update: Fri 27 Mar 2026 17:51:07 +0000
Files and hashes: 1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: hiXnpFDApqnOOVDI9NjgcSy9iT/WMGGHTtnGTf3DoiI=)
2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 17:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:36:b4:44:5f:94:4d:e4:2e:79:a9:c8:b7:b6:13:8b:a1:59:11:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Validity
Not Before: Mar 26 14:51:07 2026 GMT
Not After : Mar 27 17:51:07 2026 GMT
Subject: CN=CA6B330CA68E7A326B02B5695018A9B929B7C060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:ec:1d:96:30:b1:dc:f5:d0:3e:3c:6f:2b:
c4:3d:85:f1:a3:8f:b2:df:b0:39:e3:39:84:d9:ec:
39:26:3c:da:81:56:91:b8:e2:d5:b3:f6:1b:a5:5f:
5a:8e:35:bd:5c:6d:c8:a2:6d:3a:b9:6a:76:ee:58:
fb:08:54:10:2d:59:4f:ab:18:70:37:67:4c:53:a6:
b1:b1:ce:49:d8:90:79:59:f4:f1:8b:29:7c:27:1c:
69:11:a4:e2:f3:4d:9f:af:61:90:4b:31:df:0a:69:
f1:f6:b3:50:a9:6d:c3:0e:8e:2b:15:b2:fb:de:5f:
0d:0d:db:60:9a:c2:7d:1d:8b:fe:fd:a6:d1:b0:94:
09:c8:19:bd:a1:9d:83:3f:8c:1c:50:91:6f:3f:aa:
1c:f6:ac:1c:d4:2d:52:41:c3:4f:86:6b:8e:15:10:
02:b0:82:74:be:7c:45:2d:c1:c2:b4:a3:7d:a5:4d:
1b:55:76:e3:6f:c1:58:92:0b:01:4f:8f:80:68:38:
46:0d:75:b6:43:4e:55:e1:1d:d7:2c:17:cc:80:56:
4f:04:6c:ef:1d:bd:a7:54:e7:b9:5c:04:e6:0b:4a:
fc:77:84:1b:39:e7:72:1d:46:14:3c:a1:cd:c3:13:
f7:00:d6:aa:b5:a5:6a:e6:6a:17:68:3e:e3:0b:27:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:33:0C:A6:8E:7A:32:6B:02:B5:69:50:18:A9:B9:29:B7:C0:60
X509v3 Authority Key Identifier:
keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:58:e7:02:e9:78:b6:e4:09:6f:92:77:a0:20:c6:26:f7:7a:
43:bb:96:0c:f5:7d:b6:e0:43:d6:bd:96:48:43:b9:ab:0e:8b:
0d:14:4f:5b:b4:a8:34:27:27:f4:68:7d:6b:99:8e:79:ea:75:
d9:cb:4a:13:59:ca:ce:c9:b4:68:fd:b0:a8:5a:aa:85:6e:3d:
ac:c2:82:78:56:c3:88:2a:83:29:44:b6:28:c6:d9:ed:a3:ba:
25:5c:16:f0:d7:0b:25:82:c5:a2:30:9c:12:77:ce:e4:bd:35:
6c:27:4a:fc:8e:dc:00:cb:04:ee:2f:6e:ac:b0:52:39:a7:0d:
29:7e:02:c9:e1:e5:de:10:0b:2f:55:27:f4:9c:8c:b6:6c:2c:
0d:97:0c:67:3f:28:bf:7c:c0:78:90:f0:75:3e:65:4c:f1:f7:
c4:f8:1d:ef:a6:52:8b:50:0f:4c:b7:01:73:53:2c:3b:8d:1e:
47:79:26:0a:fd:03:ae:8b:5a:c7:46:0d:45:79:8a:ff:b0:6c:
d4:26:6c:63:00:f0:20:a3:ea:87:3f:0b:a1:6f:10:ad:2e:f0:
3d:0a:44:66:e8:e3:22:9c:2d:d8:b0:13:a3:7d:ec:e4:e7:51:
6c:de:99:98:7c:e8:73:82:60:9e:96:4c:90:f7:0a:51:65:d9:
1b:8d:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:16:26 2026 by rpki-client