
$ rpki-client -vvvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
File: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft (raw, json)
Hash identifier: um7NBWIAbwkDhft2pMM89Vz+KWnkz+7l60SSGx19KIA=
Subject key identifier: 49:42:A0:23:3D:DB:DA:8A:4D:7D:F6:87:08:A5:94:A6:A4:AA:05:C1
Authority key identifier: D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
Certificate issuer: /CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Certificate serial: 4123DA999179508A5282AA8ADA50163EC3C9A334
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
Manifest number: 014A
Signing time: Wed 14 Oct 2026 03:11:25 +0000
Manifest this update: Wed 14 Oct 2026 03:06:25 +0000
Manifest next update: Thu 15 Oct 2026 06:55:25 +0000
Files and hashes: 1: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (hash: X1mFsLI4Qx5oGKiy8k7VNSxBc0vv6a0K1FRl2fNhhiQ=)
2: D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl (hash: OBfAdHnOj7GFvysK6ghbQSAr8mCbuPNhJwTbJalyFSo=)
3: 323830343a336163383a3a2f33322d313238203d3e20323636313039.roa (hash: R3uhZoJSvdBAFSKZLP45MaoIVASbthNAoqzbBhFGlmI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 06:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:23:da:99:91:79:50:8a:52:82:aa:8a:da:50:16:3e:c3:c9:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AF457CCB4BD1099BB111DDD79C7A5253148C3F
Validity
Not Before: Oct 14 03:06:25 2026 GMT
Not After : Oct 15 06:55:25 2026 GMT
Subject: CN=4942A0233DDBDA8A4D7DF68708A594A6A4AA05C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:c9:bb:52:79:0f:09:28:02:76:04:52:2f:
6e:80:80:c5:52:9d:ca:56:c8:c1:a0:23:ca:29:42:
07:e4:92:e8:5f:22:01:39:a7:d2:5d:24:e1:5b:83:
e1:5a:a1:ee:a1:96:7c:f0:ed:cd:14:ad:60:be:ec:
4c:3f:d7:73:69:00:ce:c5:b2:05:2c:77:2f:9d:60:
1b:c0:09:3e:ad:d5:7e:4a:3a:1a:46:9d:93:dc:b2:
b2:5f:92:ff:96:ce:fb:2e:93:b9:3b:89:f4:51:80:
5a:63:91:b2:68:93:16:95:89:8a:11:dd:ab:c8:95:
de:78:26:e0:ef:cc:4b:37:3a:35:47:15:9c:7c:c3:
82:d2:59:a0:1f:42:b7:28:88:df:0f:ec:89:34:03:
0a:91:de:8d:4a:a0:9f:4d:f7:7e:78:6b:6e:87:23:
7b:c1:08:14:35:46:c0:4a:af:7b:66:97:9c:df:6d:
7e:32:38:c4:c8:a0:43:04:4d:2f:a6:ad:23:7b:c4:
e3:39:5a:e9:ed:57:b4:a7:83:d3:b8:f0:14:23:96:
7f:f3:28:20:33:2f:28:23:a1:48:2e:57:e4:15:a5:
0b:6f:77:4f:c8:fc:d0:40:10:42:1a:c7:6e:86:fd:
42:e5:5f:a0:f1:6f:0d:86:43:86:43:b7:1f:9b:8b:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:A0:23:3D:DB:DA:8A:4D:7D:F6:87:08:A5:94:A6:A4:AA:05:C1
X509v3 Authority Key Identifier:
keyid:D1:AF:45:7C:CB:4B:D1:09:9B:B1:11:DD:D7:9C:7A:52:53:14:8C:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/D1AF457CCB4BD1099BB111DDD79C7A5253148C3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:84:b0:3e:c9:dc:86:23:7e:d5:96:5d:a7:60:dc:4d:63:f8:
cd:98:c8:9a:df:89:3d:16:2a:0c:a5:b9:e5:ce:e5:bb:d9:3d:
d5:58:9d:25:72:8b:6c:79:ad:49:90:29:ab:8d:68:69:65:5c:
ad:98:1b:55:9c:ae:b9:da:88:86:05:96:a6:e1:e2:d9:8a:0d:
41:fe:7b:9c:50:51:74:14:da:4d:55:7b:65:7e:13:24:fc:09:
64:28:a8:4c:7d:87:29:f8:83:58:c5:81:75:67:e4:60:b9:5d:
71:03:45:d6:8c:20:32:86:aa:fb:25:d4:db:d2:6a:a0:bc:66:
d3:a1:9b:37:92:ff:79:ed:d6:c4:94:2d:94:fe:75:15:66:a8:
9f:64:38:fa:70:3e:7f:62:a1:49:60:a2:ff:3d:3b:2a:8f:67:
73:6d:c4:15:26:41:1c:fd:a1:42:20:d9:1a:21:05:ba:95:0e:
0a:67:fd:bc:1e:42:21:87:75:16:31:1c:1e:e1:7c:c5:8b:9f:
56:ff:7b:2b:2e:79:4d:90:75:24:e5:9f:2d:ac:06:55:3a:85:
31:89:12:a4:e4:3a:ad:1a:9f:f6:b3:4e:e9:b3:df:bb:91:d5:
65:87:d0:d2:96:ff:a0:02:fd:c9:08:d8:bf:2f:7f:b9:45:b0:
07:6b:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:02:20 2026 by rpki-client