
$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
File: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json)
Hash identifier: IzB5mTKAtfA4esAmkTlh37R8CBc9DCgxjFmmBEhNwsU=
Subject key identifier: 97:A8:62:8E:92:22:5A:B7:C8:5E:93:3D:0A:C1:A3:2F:8C:CD:E4:C4
Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Certificate serial: 6B360E35AFA1683A5BBF12901B04B1A7F45601DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
Manifest number: 8F
Signing time: Tue 07 Apr 2026 23:29:05 +0000
Manifest this update: Tue 07 Apr 2026 23:24:05 +0000
Manifest next update: Thu 09 Apr 2026 03:04:05 +0000
Files and hashes: 1: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=)
2: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: rFkhtdccdjhrfyWG7RA6D3IOQGPbWnAZtlOIzT3RVoo=)
3: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 03:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:36:0e:35:af:a1:68:3a:5b:bf:12:90:1b:04:b1:a7:f4:56:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A
Validity
Not Before: Apr 7 23:24:05 2026 GMT
Not After : Apr 9 03:04:05 2026 GMT
Subject: CN=97A8628E92225AB7C85E933D0AC1A32F8CCDE4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:41:e7:91:a8:f0:a5:be:fc:bf:ea:a7:c7:
fe:60:8c:1a:ba:52:63:5a:db:c7:dc:de:17:73:00:
39:5a:f3:33:99:3e:69:3b:1c:63:78:31:45:6f:1a:
75:b6:6f:26:b1:9e:54:5d:3d:cf:c9:96:86:6f:bc:
f6:d0:5c:61:f1:4e:68:17:5a:41:8d:3b:de:66:7b:
b7:e1:e7:b5:f3:3f:5b:24:78:b6:51:05:73:31:fb:
59:3f:e9:51:fe:0c:df:43:0e:2b:18:dc:36:69:f4:
82:95:a3:18:6b:f9:d6:73:99:cb:3c:13:d7:64:3d:
1f:e9:37:22:e6:e9:d1:f3:88:33:db:98:6d:41:94:
08:dc:03:53:a1:12:30:e1:ea:64:2c:80:83:f5:1a:
42:0b:3d:5f:d7:82:b9:af:bf:8c:35:ca:2d:dd:7e:
e0:0a:88:ea:0d:9a:05:51:86:64:74:ca:52:b6:ba:
df:33:77:46:2b:74:c2:c9:a9:96:45:ef:ce:04:5e:
1d:08:44:ce:db:2e:55:f4:4e:0b:d6:ef:2a:84:44:
3a:1e:eb:67:a1:f0:00:1d:11:1e:dc:8e:b8:d9:e7:
e8:a1:2a:87:ae:88:35:71:73:4a:b4:17:d5:95:a1:
19:84:af:18:3b:11:e6:69:42:49:3a:4c:82:02:57:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:62:8E:92:22:5A:B7:C8:5E:93:3D:0A:C1:A3:2F:8C:CD:E4:C4
X509v3 Authority Key Identifier:
keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:40:40:28:a9:ea:bb:0f:32:12:01:0f:4f:b7:46:24:8a:76:
ff:f3:bd:ee:82:aa:00:69:7b:3e:96:e0:72:07:aa:96:9f:b1:
12:5c:3d:97:af:23:12:38:92:27:2e:2d:05:0c:74:e1:20:d2:
f6:05:25:c5:33:87:a6:9e:53:68:65:9e:69:15:9a:82:74:8f:
8e:bb:17:2a:2a:06:e7:da:c8:5d:4b:01:a4:f9:09:00:12:5c:
32:b9:e5:09:f9:39:45:d9:22:82:66:dc:13:8e:9a:af:d9:5a:
a5:c5:75:d9:03:a4:9a:16:af:0d:f8:c9:66:06:c3:3f:f6:d5:
8a:dc:a8:01:a0:16:33:8b:e6:fb:7d:6f:c9:e2:cb:58:2e:e9:
08:3c:15:7f:87:8e:38:99:90:82:c2:46:09:8d:e7:98:9f:c5:
9b:6a:c9:5c:36:d8:d7:fe:0f:d2:e1:35:37:14:29:bd:bf:63:
12:8a:be:75:12:34:90:7f:b2:8f:70:55:47:38:25:9c:7f:b1:
cc:0c:17:10:d8:72:c0:9a:e5:2c:bb:2f:d6:4b:da:bb:7d:56:
49:a7:10:71:bd:57:e9:35:0b:d6:1a:4d:c0:32:b4:c5:91:92:
49:73:26:98:75:20:16:10:d6:13:e2:72:1a:f2:2e:d6:4c:9b:
d0:6c:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:18:47 2026 by rpki-client