
$ rpki-client -vvvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
File: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft (raw, json)
Hash identifier: Cwmh+XTOVgeFKKUkT2nLHHUR2W1RA0GKJmbh6kPDupA=
Subject key identifier: 73:3C:C5:94:28:02:5B:00:D5:8B:C3:57:20:6C:F7:39:25:6B:39:A3
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Certificate issuer: /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial: 222C02AD627921217240DF30C9D5E040136FF967
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
Manifest number: 03B5
Signing time: Mon 24 Aug 2026 04:24:25 +0000
Manifest this update: Mon 24 Aug 2026 04:19:25 +0000
Manifest next update: Tue 25 Aug 2026 06:20:25 +0000
Files and hashes: 1: 3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (hash: AJeEclXa5CwX2AB7q02vhN8/s4ZahQeA1KNn13EmJOg=)
2: CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl (hash: DlErATTJw0YyPjzjQF6iNrYUepeOKHNvxIjaMpV3jh8=)
3: 323830343a366336633a3a2f33322d3438203d3e20323730343637.roa (hash: QxpEpRdpz00jGtNTG7SSlMeuaQmHcvLeklQz9JSGTms=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 06:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2c:02:ad:62:79:21:21:72:40:df:30:c9:d5:e0:40:13:6f:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Validity
Not Before: Aug 24 04:19:25 2026 GMT
Not After : Aug 25 06:20:25 2026 GMT
Subject: CN=733CC59428025B00D58BC357206CF739256B39A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:13:d7:eb:8d:cb:c8:eb:01:89:ad:81:5c:
e2:a0:b3:b6:ea:a0:71:94:51:cd:dd:47:44:b5:77:
8a:19:24:3c:8c:28:d3:2f:c0:5f:a4:f7:02:38:0a:
09:91:3a:db:05:d0:31:26:03:69:24:76:a2:3d:49:
92:d9:8a:b3:90:9b:44:bf:2e:d8:c4:81:70:f2:f9:
c8:10:62:cf:2e:2c:30:27:db:73:de:ae:8f:7f:67:
e2:9f:40:69:4d:6f:b2:6b:7f:9b:bb:2d:a5:ff:82:
32:c4:14:25:62:52:72:f8:db:29:56:cb:ce:58:04:
4a:76:36:e4:11:fa:10:ce:06:43:ed:19:f2:46:d1:
e6:ff:57:99:b7:41:82:ca:f3:66:81:be:67:41:b9:
52:bf:d7:61:d0:9f:04:4e:60:44:78:31:65:b8:9d:
3e:eb:d1:4b:7e:3d:f3:56:c8:86:40:1a:57:9b:36:
16:70:36:fc:90:6b:e1:82:75:21:ee:e6:04:d7:84:
90:7b:b5:80:cc:7b:cd:23:7f:ef:f4:2b:ff:51:d7:
2d:b2:7f:d6:12:c2:0d:7f:f6:65:24:c3:b9:d4:79:
15:c1:5a:95:2d:6c:f3:db:2b:8b:67:7d:10:7a:57:
08:f3:c2:79:55:e1:44:a4:d9:d2:c9:10:bd:45:58:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:C5:94:28:02:5B:00:D5:8B:C3:57:20:6C:F7:39:25:6B:39:A3
X509v3 Authority Key Identifier:
keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:04:0b:fc:e7:61:65:a8:c0:65:dd:cd:bf:1c:2e:45:be:cd:
52:8c:ef:79:4c:d2:d5:8f:52:d9:48:5f:97:74:5b:b7:e9:2e:
1e:63:5b:53:a1:da:49:fc:b1:a1:73:a3:6f:2d:ef:f3:5d:6a:
7d:d4:fa:b1:77:bd:50:e5:f7:5b:e8:e6:87:0d:60:40:be:76:
32:eb:d9:08:cf:8a:e8:27:b1:3f:91:b0:ec:65:9e:ff:6a:ab:
be:88:4a:ef:b4:e2:a9:48:a3:23:61:3e:d9:db:2d:6a:32:b4:
d8:36:46:a3:0f:f0:a7:0a:fe:6e:a1:7d:6f:bd:3e:53:e9:6d:
33:28:75:fe:1a:6a:e1:b3:8e:31:fd:df:7a:ab:33:74:da:45:
59:f4:45:e3:db:bf:d0:d1:b9:5b:9a:12:4a:b1:c8:e5:a3:f1:
ae:ac:6a:95:91:9f:30:ac:40:13:af:09:6b:7f:28:01:cf:fd:
12:8d:f6:48:c9:59:2d:c9:ea:34:b4:ba:d4:9c:8f:1f:92:d7:
74:6a:90:3a:25:b8:2a:ae:57:f8:aa:31:c5:58:d5:b8:1f:77:
5c:19:8d:d4:bc:e2:4e:b1:84:9a:50:ce:12:86:30:c5:79:b5:
19:ff:bd:c7:a9:3c:a2:79:3a:af:fb:fe:50:e4:9c:8f:9e:96:
2d:79:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:07:59 2026 by rpki-client