
$ rpki-client -vvvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
File: CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft (raw, json)
Hash identifier: vnAdbT56mvP1Q65g4q0em69K3pWzvGSkq3EKE1Yu9GI=
Subject key identifier: 5C:C6:5B:42:92:0F:DE:D6:62:05:5D:A6:91:E5:3D:7C:59:12:13:AE
Authority key identifier: CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
Certificate issuer: /CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
Certificate serial: 304A64A0CACE9B4488C83B17DC2F11EA8B0E60A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
Manifest number: 0101
Signing time: Wed 28 Oct 2026 18:14:19 +0000
Manifest this update: Wed 28 Oct 2026 18:09:19 +0000
Manifest next update: Thu 29 Oct 2026 19:58:19 +0000
Files and hashes: 1: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: dd6RD2+XhfcKd7iVsxSQ4vvl5c2kA1b7ficMYQnUdJ0=)
2: CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl (hash: g2G5csr3+/5z+BX0oFhG2rPsWA3e+gbFC+tHF3dBh3g=)
3: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: 5xr1YaFN4+xG05Qnz6cLW5dfNkTEDukYh2zUMcqpZOM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl
rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Oct 2026 19:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4a:64:a0:ca:ce:9b:44:88:c8:3b:17:dc:2f:11:ea:8b:0e:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
Validity
Not Before: Oct 28 18:09:19 2026 GMT
Not After : Oct 29 19:58:19 2026 GMT
Subject: CN=5CC65B42920FDED662055DA691E53D7C591213AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:2f:71:2a:d6:60:00:87:85:43:0f:7f:f6:
35:70:28:95:29:34:5e:49:97:d6:29:25:62:a5:38:
3e:8a:af:6d:14:68:72:db:19:91:91:85:ea:95:f2:
86:8b:e2:ba:61:9e:10:ab:41:aa:9e:83:9a:8d:92:
7b:c1:36:eb:db:78:85:10:b0:bd:d9:d5:aa:05:e9:
fa:2e:cf:25:1f:ae:d0:ad:80:f6:30:9c:77:4f:79:
5c:a5:a1:71:6c:9c:2a:cc:15:ab:1c:fe:11:18:ac:
17:7e:68:74:3c:35:7e:89:68:b9:f9:a6:0d:5f:53:
75:c8:d1:04:31:40:74:9f:b3:d3:7d:c3:97:92:ab:
85:6d:ca:36:49:b2:25:71:29:52:36:de:b5:c1:7d:
e8:d3:fb:0d:ee:9b:b7:3d:8a:a9:79:a4:4a:a4:18:
6e:3e:42:a8:b1:d6:74:22:99:da:0d:bd:c3:a7:c2:
b7:84:e0:11:01:bc:05:a8:d0:5a:df:a9:be:cf:9b:
30:93:57:cf:4c:72:af:9e:c3:e1:56:04:df:1b:e8:
1b:1c:8c:f8:54:b1:34:71:17:65:79:fe:a3:88:96:
84:0e:13:b6:b2:d1:8c:ab:58:73:88:44:b9:ad:ce:
04:3a:5c:6c:83:21:1e:48:11:02:ad:00:f2:26:bf:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:5B:42:92:0F:DE:D6:62:05:5D:A6:91:E5:3D:7C:59:12:13:AE
X509v3 Authority Key Identifier:
keyid:CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1d:3a:d1:92:e2:e8:8e:73:53:87:85:13:a6:7b:e7:e3:5f:
23:7d:32:e9:e3:7c:82:6a:77:8f:93:ca:3c:88:c6:73:90:32:
9c:d0:31:60:d4:83:9a:e8:df:0e:3d:ce:42:52:a4:73:73:cd:
80:0b:ac:01:e9:fb:24:f8:58:86:52:7b:46:9b:e9:6d:cd:32:
b1:ae:32:fb:bb:f1:ab:ce:80:e6:ff:a8:b7:53:7b:70:e2:53:
50:c2:f3:65:06:ab:62:06:6b:34:43:d9:5c:cf:90:1e:e9:85:
f6:7a:e6:4c:84:9e:20:3b:03:e6:bc:31:02:97:23:1a:e3:08:
35:15:41:6d:c2:c8:c2:71:ef:a6:03:db:94:75:03:8f:62:91:
34:0f:d6:e2:06:9e:39:4b:95:c5:a6:42:97:f4:d2:1c:1d:48:
03:13:b3:45:0e:9a:ca:f3:06:6d:44:8d:d6:52:e0:bc:cf:df:
8e:1a:8f:93:e4:86:f5:b6:e0:aa:65:16:30:39:6a:5d:85:5f:
96:49:9e:18:88:1c:d6:d1:8d:a9:18:ce:c5:16:2b:66:80:17:
a1:46:5a:2b:c2:17:21:e5:d1:05:3c:61:d3:7d:c7:9a:0f:84:
3d:f9:0d:33:ac:c4:f9:ed:f6:eb:ed:8f:d0:9e:4d:9e:5d:09:
1e:4a:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:28:18 2026 by rpki-client