
$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json)
Hash identifier: lfq4fhvJ+E8fc2VXgrZwnPeVu3Sh9uHKva3Yz/6INKk=
Subject key identifier: AE:EE:BC:2B:CC:41:6C:99:39:54:7A:4E:DB:93:9E:F4:FF:A3:D0:7D
Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Certificate serial: 2777AB83BE9AD544ABD36BFF2016CFDF2CAE5CC5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
Manifest number: 024D
Signing time: Fri 24 Jul 2026 01:08:20 +0000
Manifest this update: Fri 24 Jul 2026 01:03:20 +0000
Manifest next update: Sat 25 Jul 2026 02:41:20 +0000
Files and hashes: 1: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=)
2: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=)
3: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: B2k8fn4p05jlDlh3OJ45jCfpBu8W/1AYlOTh6I5/BlY=)
4: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 02:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:77:ab:83:be:9a:d5:44:ab:d3:6b:ff:20:16:cf:df:2c:ae:5c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007
Validity
Not Before: Jul 24 01:03:20 2026 GMT
Not After : Jul 25 02:41:20 2026 GMT
Subject: CN=AEEEBC2BCC416C9939547A4EDB939EF4FFA3D07D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:fa:fd:3e:2c:ac:74:2a:a5:36:1e:3d:4b:
c7:76:8e:e1:50:5a:bf:f6:ae:f9:57:a5:1c:6c:36:
41:07:79:bf:5a:b3:a4:b6:b3:81:0b:51:ff:b3:7e:
3c:b1:0a:13:88:ff:ce:5f:75:c9:9f:a5:44:f3:3e:
4d:eb:c0:ca:fb:27:ab:b6:fc:44:9c:d3:d7:a1:ae:
5a:38:e4:a8:e6:fb:58:4f:b2:f2:44:8d:b9:29:de:
5d:f1:10:09:25:1c:fa:66:e8:a0:9f:fe:2c:09:0a:
d4:19:66:3e:b8:17:33:0e:16:2a:bf:08:d7:32:54:
46:1c:89:a7:24:b7:13:20:38:b0:f6:55:24:df:3e:
24:f1:d0:5d:12:62:1f:6b:56:8d:80:64:25:99:7a:
55:ef:0e:d5:b2:02:6d:ce:f2:0a:34:9e:5d:d1:3d:
e3:3f:c8:ae:85:ba:ad:2f:04:4c:46:29:49:37:23:
97:9e:71:c4:55:08:15:0f:00:cd:88:b2:f3:f9:93:
15:7c:3a:54:82:a0:5b:b0:b1:ac:0a:3d:a5:08:a1:
57:1c:21:dd:d2:a9:ea:22:d0:22:9e:2e:1b:ab:97:
a7:58:e8:0a:f0:91:35:ab:76:bd:e9:37:4b:94:e4:
88:84:64:45:a4:e6:d4:5b:b1:33:27:0a:93:b0:45:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:BC:2B:CC:41:6C:99:39:54:7A:4E:DB:93:9E:F4:FF:A3:D0:7D
X509v3 Authority Key Identifier:
keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:bd:63:4f:15:67:5e:5b:b1:73:ac:17:0a:ee:b3:6a:e7:
fb:77:50:c7:85:1a:18:20:bd:c2:ab:ba:d6:22:6b:cc:29:58:
4c:11:cd:35:f9:d5:64:d5:6c:39:20:26:da:8a:cb:39:fe:66:
4e:73:72:be:21:a3:a7:8c:04:52:e7:33:6c:e2:c7:cf:a1:33:
5d:91:4c:b9:33:a3:6f:28:77:a0:46:65:14:93:3d:9c:59:1f:
4e:e3:63:ea:16:a7:67:9b:19:a0:41:24:d8:28:5c:e4:ff:34:
1e:28:e7:ee:2b:3c:09:44:4d:6a:44:92:39:42:74:14:0e:8f:
13:a7:13:9b:c3:92:f6:86:4d:dd:1f:79:27:fd:69:4f:ab:ee:
fe:54:1c:e0:b4:dc:ad:3b:01:37:d5:e6:63:f9:87:3e:a4:ef:
47:9f:cc:c8:51:99:40:59:36:72:3b:22:56:6c:11:ff:93:d1:
3c:74:95:ee:22:d0:61:50:7f:8f:33:7c:88:07:42:3e:ce:1c:
c5:0b:5a:4b:d7:7b:af:b4:42:09:fe:e2:52:9f:e3:9b:3d:14:
c3:83:bd:e5:2e:4b:7f:4f:62:08:e5:77:ea:0b:a1:5f:f9:77:
cc:87:a2:d5:74:8e:d7:65:b9:d6:98:40:95:b2:cd:03:c7:19:
af:1d:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:16 2026 by rpki-client