
$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier: c5nuYqlm3Q8Z80dC1rbrM+OcJF2dbHNi2ntbrAdpaJg=
Subject key identifier: C9:D7:CC:57:52:55:A9:BF:65:A3:90:E6:69:76:EE:F1:67:B4:93:92
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial: 4752C349FE0A64964167D50FC907DA82B5E0C0CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number: 0192
Signing time: Thu 09 Apr 2026 10:41:31 +0000
Manifest this update: Thu 09 Apr 2026 10:36:31 +0000
Manifest next update: Fri 10 Apr 2026 12:17:31 +0000
Files and hashes: 1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: nAk+e+cJl+iij1jPYG+K6A8shE4uSL30TSvDn8IXj6Q=)
2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 12:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:52:c3:49:fe:0a:64:96:41:67:d5:0f:c9:07:da:82:b5:e0:c0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Validity
Not Before: Apr 9 10:36:31 2026 GMT
Not After : Apr 10 12:17:31 2026 GMT
Subject: CN=C9D7CC575255A9BF65A390E66976EEF167B49392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:0e:c2:f0:38:6b:1b:8f:31:a5:84:26:5e:
a4:11:b6:9b:01:06:19:63:c0:a5:7a:a0:46:8c:37:
49:f4:b7:e5:9c:7f:58:13:2c:64:9e:96:c9:77:b1:
17:13:ab:76:9b:c1:a8:bf:5d:25:d2:36:9c:df:bd:
21:b7:eb:31:3c:4b:ac:18:fc:2b:c7:f9:42:c9:ab:
92:f8:d7:dc:93:be:c6:52:9a:d3:fa:08:92:bb:dd:
f6:73:50:fb:b8:36:f6:1a:93:56:00:d1:d5:a2:40:
15:06:f8:04:f4:6a:40:09:46:dd:5f:39:e3:38:c8:
f7:e5:3f:3a:2f:cf:e6:8a:9d:b6:7d:95:d0:69:52:
ad:a1:a2:f2:74:2c:38:d8:9c:a3:f5:10:29:23:8a:
0b:86:7d:48:b0:c9:b4:aa:3e:0f:2c:d5:4c:cf:c3:
93:35:4b:d3:98:4e:db:81:2e:0f:a8:9e:e3:7a:c1:
e4:1e:8c:db:65:ee:b8:e6:9e:bd:7f:4a:f9:78:36:
96:de:3b:53:9b:ad:f6:59:b0:c0:ed:db:1f:44:1d:
c9:43:d8:b7:22:21:1e:8e:7e:af:d4:98:04:3e:07:
88:c6:1f:1c:8f:1f:10:ac:0a:eb:eb:3f:66:c3:ef:
83:7e:44:07:bf:27:27:4e:35:ab:58:af:ac:fd:90:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:CC:57:52:55:A9:BF:65:A3:90:E6:69:76:EE:F1:67:B4:93:92
X509v3 Authority Key Identifier:
keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:96:dd:30:d5:ea:c8:ac:0f:b7:8a:9b:01:76:35:03:8d:
9f:75:67:6b:d1:74:59:0a:7c:4b:71:f0:0d:f7:81:6c:ec:52:
97:01:0f:5b:ad:1d:52:dc:07:85:54:91:69:ac:2f:18:85:ed:
ff:15:a5:c2:b8:a0:cc:f7:69:e0:cd:9f:4e:d2:f7:49:ac:89:
f5:c5:e9:24:41:8f:b5:72:bb:0e:1e:c7:0f:5a:e4:1a:ca:8e:
96:67:2f:62:79:04:7a:69:7c:1a:22:36:7f:00:8c:f6:10:7f:
46:51:27:c7:34:36:fb:2f:1b:39:74:23:6e:b8:c6:99:4d:ba:
1f:a8:ad:bb:17:30:af:18:d6:c5:28:56:7c:d1:4c:6e:58:f3:
cf:10:2a:a8:59:f6:bd:f9:af:ec:5d:30:b1:7c:62:91:c9:52:
d9:ba:bf:33:09:43:9f:42:9e:a4:09:f5:ed:7e:cf:bf:8d:30:
9a:71:4e:e2:b2:92:b7:b8:15:8f:25:31:4a:b3:8b:ef:77:a2:
2c:8a:29:d9:27:67:cc:a0:55:d9:56:0e:bb:f6:ce:85:da:5f:
68:ec:55:76:df:fe:a7:70:be:f3:28:8b:15:3e:f9:69:ab:01:
fe:d2:a8:30:05:55:e6:d7:db:a8:17:a6:c5:2b:3f:45:52:88:
53:5f:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:46:20 2026 by rpki-client