
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json)
Hash identifier: ukosyV62fLJwy+3SulWNkztvRlDO3jHnIVjziLiMOOM=
Subject key identifier: 26:B2:07:4F:2A:32:DB:73:8E:70:1F:C2:C8:65:C5:CA:0E:9B:A3:08
Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Certificate serial: 6D624D6FC5D7F6A863521C91A29D0AF294F9BFFE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
Manifest number: 014A
Signing time: Sun 24 May 2026 13:48:13 +0000
Manifest this update: Sun 24 May 2026 13:43:13 +0000
Manifest next update: Mon 25 May 2026 14:50:13 +0000
Files and hashes: 1: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=)
2: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=)
3: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: e2Gc3wOlqmLKS+KIwy2B0oidHYgd2hdtel0QDZaqEbA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:62:4d:6f:c5:d7:f6:a8:63:52:1c:91:a2:9d:0a:f2:94:f9:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B
Validity
Not Before: May 24 13:43:13 2026 GMT
Not After : May 25 14:50:13 2026 GMT
Subject: CN=26B2074F2A32DB738E701FC2C865C5CA0E9BA308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:fe:ef:aa:cf:91:8f:ec:d6:88:53:c0:85:
1b:81:73:27:41:54:ed:de:0c:c3:67:31:c6:e7:d9:
ba:12:2d:94:d5:6f:c7:d8:4a:c0:22:a3:65:87:9b:
4c:27:2b:ed:b3:eb:26:b2:b3:98:83:1d:e8:b8:72:
94:cc:5e:92:53:9d:ea:03:44:20:4f:60:bf:d8:a2:
f6:24:cf:87:d7:6b:c5:74:f5:65:13:5d:ee:26:eb:
0e:ff:6f:0d:d3:b6:9d:24:32:fc:c9:e5:69:8a:38:
95:50:6d:60:f7:a7:d5:98:ed:b7:dd:ec:55:9e:7c:
d7:d8:31:13:13:93:95:e7:74:c1:b8:d1:a9:7e:ff:
a0:32:9a:0b:3e:b0:e8:2c:97:b6:37:e2:76:dc:4c:
b9:61:03:e4:62:45:52:f1:f0:c3:5f:47:31:45:f9:
47:31:56:c5:73:aa:78:9b:f0:e6:b8:2e:02:ed:8f:
d8:21:6d:70:37:00:b7:12:2d:e5:aa:02:a1:ef:e8:
45:43:60:07:bb:d5:db:18:0c:e5:a6:49:6c:7d:6a:
b6:3e:a4:0e:da:7a:b4:85:46:97:1b:2e:e7:87:c1:
0f:54:46:a9:b8:b5:57:d3:0b:87:c3:63:f4:a1:3d:
3f:be:68:b7:2f:64:e2:ce:6f:23:e8:e6:1f:e4:20:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:07:4F:2A:32:DB:73:8E:70:1F:C2:C8:65:C5:CA:0E:9B:A3:08
X509v3 Authority Key Identifier:
keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d1:4a:fd:3a:22:cc:bc:00:da:7f:aa:81:89:ec:9e:60:40:
2f:5b:fa:c8:2a:04:1e:12:e1:b1:f3:09:22:bb:e1:66:a4:53:
2d:c9:d2:ac:73:97:5c:39:cc:fc:7b:9a:23:47:13:e7:e4:b3:
14:20:7c:f5:02:97:bd:11:09:09:10:d2:c2:5a:0e:61:ae:80:
ab:29:62:bc:b2:56:fa:7c:e2:72:66:26:24:9a:e6:03:f2:c9:
00:51:bc:93:cf:5a:6e:cf:d8:d1:17:3a:b6:aa:a8:43:5e:75:
37:77:03:45:92:18:da:cb:9c:43:ed:15:54:a1:b8:e5:7b:a2:
80:4d:ec:e3:1e:ed:c5:8f:db:d2:7a:69:50:9d:71:91:63:0b:
c6:29:77:5d:ba:f4:a1:9c:88:22:8c:76:53:6f:09:13:05:f8:
0b:89:a2:f7:94:cc:3d:87:57:cc:d2:fb:45:97:48:f1:8e:1e:
06:68:54:73:5c:04:7e:9b:25:24:cb:f9:6b:4a:fd:71:b6:da:
ff:7a:04:2d:0d:02:0f:6e:9c:34:47:5c:66:47:9b:d5:e0:cb:
27:14:8c:f6:2f:2d:2b:61:50:bd:19:46:05:2c:92:08:7a:64:
65:eb:d5:f1:57:fa:45:7e:dc:88:2d:5e:10:97:fb:41:46:6a:
57:b3:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:19:41 2026 by rpki-client