
$ rpki-client -vvf rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
File: CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft (raw, json)
Hash identifier: bfL1CH/dNgXQguGrtZsociogto3oEp+Muvr55/jUSXA=
Subject key identifier: D7:AE:55:C2:2E:1A:00:45:A5:D1:3C:5C:CE:FC:F3:70:95:D6:65:C6
Authority key identifier: CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
Certificate issuer: /CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
Certificate serial: 4269D6B14BF014547FAE2D115DC05EF04DF1FFC9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
Manifest number: 36
Signing time: Sat 23 May 2026 19:04:38 +0000
Manifest this update: Sat 23 May 2026 18:59:38 +0000
Manifest next update: Sun 24 May 2026 22:05:38 +0000
Files and hashes: 1: CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl (hash: bn8lzsJsgcDb96xH1qafO530q9AO98mnltGne/Rtzt0=)
2: 34352e3137312e31322e302f32322d3332203d3e20323638313737.roa (hash: 5xr1YaFN4+xG05Qnz6cLW5dfNkTEDukYh2zUMcqpZOM=)
3: 323830343a353933633a3a2f33322d313238203d3e20323638313737.roa (hash: dd6RD2+XhfcKd7iVsxSQ4vvl5c2kA1b7ficMYQnUdJ0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl
rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 24 May 2026 22:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:69:d6:b1:4b:f0:14:54:7f:ae:2d:11:5d:c0:5e:f0:4d:f1:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF3633BB72B7566B387E3FE16D022B86157ED3EF
Validity
Not Before: May 23 18:59:38 2026 GMT
Not After : May 24 22:05:38 2026 GMT
Subject: CN=D7AE55C22E1A0045A5D13C5CCEFCF37095D665C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:d0:58:2e:ec:cf:31:be:27:48:a3:6d:57:
b9:c1:e6:33:23:ff:d7:bb:4f:68:f2:7f:29:87:4b:
3e:e1:4e:29:0c:64:e6:1c:2e:d5:0e:c3:2c:2a:23:
49:eb:65:24:99:bc:f3:bc:12:17:d3:1b:c5:38:2e:
3e:84:2f:e1:42:a8:f6:34:f1:8a:c5:91:6d:5e:ac:
ae:0d:b1:7f:31:7b:f9:ba:dd:be:22:2a:5f:fc:cd:
92:b4:8b:43:7d:14:32:54:4e:ab:56:90:44:ec:e4:
e1:c8:ab:73:e0:cd:cb:92:2f:0d:04:d6:42:5a:45:
f9:01:a5:51:30:7f:66:85:61:7c:03:ab:e7:16:cf:
61:09:db:90:36:46:2a:ab:16:d8:69:69:49:46:a0:
19:f4:86:48:41:99:25:66:2f:b0:d9:7e:e5:a0:b4:
c4:fc:7d:07:48:65:5b:e5:2c:10:47:56:92:9d:85:
45:d1:eb:9b:27:24:83:f3:94:13:30:01:2b:41:b5:
d1:e5:6e:82:6d:1b:fe:38:b2:a3:e1:85:1d:a3:c7:
39:80:2a:a2:ad:11:4f:30:01:dc:0f:ad:70:4f:79:
9f:4a:a8:01:e1:ad:2c:f5:10:04:5f:81:a4:50:fe:
74:ba:00:b8:ba:fd:ef:e0:46:ee:9e:19:d7:01:1d:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:55:C2:2E:1A:00:45:A5:D1:3C:5C:CE:FC:F3:70:95:D6:65:C6
X509v3 Authority Key Identifier:
keyid:CF:36:33:BB:72:B7:56:6B:38:7E:3F:E1:6D:02:2B:86:15:7E:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3633BB72B7566B387E3FE16D022B86157ED3EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bASGRMN5d3fkWZdpwFsdR6sukprzCMJyJN17kjJFguZ/0/CF3633BB72B7566B387E3FE16D022B86157ED3EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:87:30:47:08:76:ad:af:8c:9d:5c:e1:1e:b0:7b:cd:29:e2:
08:4a:c8:fe:c6:6d:c6:3f:b4:5d:4d:32:20:69:87:7c:37:9f:
87:c8:1a:7c:28:00:da:3b:1f:c9:95:1f:e3:17:68:89:0b:d5:
e1:2f:5c:58:80:1c:d4:bd:48:82:0b:d2:63:93:66:08:0f:bb:
3a:76:d3:07:15:2f:68:9f:d8:8c:2e:63:9b:af:bb:9e:ad:41:
b6:5b:f1:3e:33:61:23:68:11:13:6a:50:fb:4e:28:0c:21:f7:
72:84:b4:3d:16:cb:46:53:05:88:8c:17:e7:42:14:ee:21:bc:
6c:63:78:06:2e:d5:a4:e0:cf:76:9b:ab:1b:2d:5e:e8:ef:d8:
3b:b0:0b:bc:ab:69:8b:f8:04:0c:08:2b:84:61:a1:c9:a4:bc:
36:a4:06:7b:9e:f3:dc:78:b5:2c:a4:d0:59:b4:5e:1f:27:49:
5a:fa:f2:83:d6:22:8c:03:dc:49:56:94:b5:0c:16:90:78:13:
e8:ca:21:94:6d:17:6a:bb:a4:ce:be:c1:1f:1d:d3:b7:cf:e5:
cb:5b:6f:ff:dc:23:85:df:35:c5:43:72:ff:e9:4f:f7:11:fa:
41:b9:6d:1c:51:93:dd:0d:42:0d:ee:bb:e3:b7:9d:08:03:78:
bf:85:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:05:37 2026 by rpki-client