
$ rpki-client -vvvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier: pUi+v778XoS825JireF9QQ+KkjVOqOCc7GKmBmUvoKk=
Subject key identifier: A5:96:C2:44:E5:20:14:15:DE:A2:7A:60:1E:BC:06:71:8C:A5:97:92
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial: 091FDC3955807F4AEF341395A049DC85A3CD06CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number: 0247
Signing time: Sun 23 Aug 2026 19:48:02 +0000
Manifest this update: Sun 23 Aug 2026 19:43:02 +0000
Manifest next update: Mon 24 Aug 2026 22:26:02 +0000
Files and hashes: 1: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
2: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: MjabHZEnwzr0l3dlOw1D8WMBaWwEKprDkkdZLLvAlmQ=)
3: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 21:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1f:dc:39:55:80:7f:4a:ef:34:13:95:a0:49:dc:85:a3:cd:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Validity
Not Before: Aug 23 19:43:02 2026 GMT
Not After : Aug 24 22:26:02 2026 GMT
Subject: CN=A596C244E5201415DEA27A601EBC06718CA59792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:fb:4a:3f:70:f9:5b:7e:3d:8f:e5:d4:6f:
26:19:d1:d4:d9:88:80:78:5b:53:80:4a:14:6b:16:
1f:3d:9a:51:ec:1f:12:f6:c7:11:58:d3:08:b2:30:
45:96:99:c3:f6:15:b8:df:d3:db:17:b7:58:7e:40:
85:e9:50:9b:2a:2c:ef:e4:65:20:be:53:9f:db:57:
63:13:d1:db:e6:08:55:09:1c:ec:4f:da:57:c6:36:
4c:77:09:a5:78:0c:43:8f:82:93:06:20:6c:cb:72:
b2:d9:82:10:9c:99:13:ca:c5:b3:44:ec:df:d8:e7:
f5:66:b4:af:7e:e1:dc:44:66:89:7a:03:9f:68:a9:
24:1a:b4:c9:27:ad:ce:c3:ed:05:24:e7:90:08:5c:
90:d2:d4:3f:b4:28:98:38:9a:42:0e:ec:0b:97:91:
03:23:d4:c4:f0:1f:f8:f1:01:01:54:dc:f4:5d:91:
ab:e2:4b:ba:f5:3f:ad:4e:5b:09:74:98:1b:2c:00:
a8:e7:11:7a:78:2a:0d:4a:15:f3:e0:a8:0e:71:83:
14:aa:bf:43:2a:9f:0c:0b:51:53:b8:05:d2:a7:a5:
80:f3:a5:35:b6:ca:9c:d0:4e:f5:55:ed:76:45:68:
72:e6:db:d6:95:6f:fa:2a:cb:45:98:25:6e:28:6a:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:C2:44:E5:20:14:15:DE:A2:7A:60:1E:BC:06:71:8C:A5:97:92
X509v3 Authority Key Identifier:
keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:54:89:a6:d9:92:a3:17:fc:1f:e0:55:7d:a4:fa:34:10:
aa:1d:3a:98:3c:e2:23:70:08:64:b5:9b:9e:d1:b0:59:ef:c1:
ed:91:f2:a1:15:27:1d:9a:44:95:fc:51:bb:ff:37:d6:e6:23:
2a:94:bf:91:fb:29:54:65:14:84:28:98:34:ee:d3:a4:c0:8a:
69:76:1c:96:7d:af:f3:18:67:85:5a:0b:6b:14:13:14:81:83:
15:c6:8e:b9:d7:88:67:75:93:ad:47:03:ec:56:6a:0f:e2:fe:
0b:9a:16:0f:c1:e8:66:51:ce:a9:19:1b:0a:11:08:07:b5:90:
07:dd:e5:26:9c:15:21:e1:40:cc:bf:38:be:1d:b0:b6:69:20:
b3:91:0b:84:dd:13:e9:1a:bb:93:1c:76:87:c5:d6:70:a8:5c:
ca:72:0f:a1:4f:48:33:e9:8f:cb:5e:bd:cf:91:f7:e8:07:01:
40:06:73:df:16:39:75:34:53:a2:9f:ac:f5:e7:92:a8:32:b0:
39:12:ea:3f:30:16:4e:e8:5a:94:36:c0:40:f1:ff:60:57:68:
bb:cc:a0:d4:6c:34:b6:81:db:09:51:04:82:59:07:53:85:e2:
f1:de:e5:9a:b0:ea:dd:9a:53:57:99:d1:11:05:2b:0c:a0:23:
94:2c:ee:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCR/cOVWAf0rvNBOVoEnchaPNBs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGODgzOTVFOTk3OUVGRkMwMzM1MTMwN0Q4Q0QwRTU0
NTU0QkJEQjAeFw0yNjA4MjMxOTQzMDJaFw0yNjA4MjQyMjI2MDJaMDMxMTAvBgNV
BAMTKEE1OTZDMjQ0RTUyMDE0MTVERUEyN0E2MDFFQkMwNjcxOENBNTk3OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e/tKP3D5W349j+XUbyYZ0dTZ
iIB4W1OAShRrFh89mlHsHxL2xxFY0wiyMEWWmcP2Fbjf09sXt1h+QIXpUJsqLO/k
ZSC+U5/bV2MT0dvmCFUJHOxP2lfGNkx3CaV4DEOPgpMGIGzLcrLZghCcmRPKxbNE
7N/Y5/VmtK9+4dxEZol6A59oqSQatMknrc7D7QUk55AIXJDS1D+0KJg4mkIO7AuX
kQMj1MTwH/jxAQFU3PRdkaviS7r1P61OWwl0mBssAKjnEXp4Kg1KFfPgqA5xgxSq
v0MqnwwLUVO4BdKnpYDzpTW2ypzQTvVV7XZFaHLm29aVb/oqy0WYJW4oamoJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpZbCROUgFBXeonpgHrwGcYyll5IwHwYDVR0j
BBgwFoAUyviDlemXnv/AM1EwfYzQ5UVUu9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0
OTgvMC9DQUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjg4Mzk1RTk5NzlFRkZD
MDMzNTEzMDdEOENEMEU1NDU1NEJCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QldvUFUxSGhYdUVuUDVaNkQyS1lVMW56UG9LTmRzeVR2ZGpNY2hBNVZ0OTgvMC9D
QUY4ODM5NUU5OTc5RUZGQzAzMzUxMzA3RDhDRDBFNTQ1NTRCQkRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcj5UiabZkqMX/B/gVX2k+jQQqh06mDziI3AIZLWbntGwWe/B7ZHyoRUnHZpE
lfxRu/831uYjKpS/kfspVGUUhCiYNO7TpMCKaXYcln2v8xhnhVoLaxQTFIGDFcaO
udeIZ3WTrUcD7FZqD+L+C5oWD8HoZlHOqRkbChEIB7WQB93lJpwVIeFAzL84vh2w
tmkgs5ELhN0T6Rq7kxx2h8XWcKhcynIPoU9IM+mPy169z5H36AcBQAZz3xY5dTRT
op+s9eeSqDKwORLqPzAWTuhalDbAQPH/YFdou8yg1Gw0toHbCVEEglkHU4Xi8d7l
mrDq3ZpTV5nREQUrDKAjlCzuKA==
-----END CERTIFICATE-----
Generated at Sun Aug 23 22:06:08 2026 by rpki-client