
$ rpki-client -vvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json)
Hash identifier: iLgbPFFGQcjE0SJemuKe8H0IBACvshaREmiZXkrA3Tc=
Subject key identifier: BE:F4:41:B8:D0:2C:E6:AC:3D:3B:51:E9:C4:09:DC:72:C5:0C:CF:AD
Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Certificate issuer: /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Certificate serial: 4900874E0E8DEDE91269CCCD77C0CE2975A78C6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
Manifest number: 0B
Signing time: Sun 22 Feb 2026 22:21:00 +0000
Manifest this update: Sun 22 Feb 2026 22:16:00 +0000
Manifest next update: Tue 24 Feb 2026 00:52:00 +0000
Files and hashes: 1: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: 7ejarpEnfeu4HJPkEn9twsjczhvBwudIdAZKHMhGDr8=)
2: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=)
3: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 24 Feb 2026 00:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:00:87:4e:0e:8d:ed:e9:12:69:cc:cd:77:c0:ce:29:75:a7:8c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Validity
Not Before: Feb 22 22:16:00 2026 GMT
Not After : Feb 24 00:52:00 2026 GMT
Subject: CN=BEF441B8D02CE6AC3D3B51E9C409DC72C50CCFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:71:81:a9:f6:a6:d1:98:4a:e2:1a:40:a3:
ad:5b:fc:43:34:8d:eb:1c:57:be:76:ed:f3:79:a2:
33:31:be:ce:c7:e9:87:81:15:96:4e:68:53:11:6e:
92:05:04:92:94:80:bc:36:ed:41:46:db:b8:c7:41:
ed:a7:bc:05:89:5f:45:e6:24:14:4c:84:d1:82:3b:
cc:cd:66:3b:d1:03:47:c0:fb:f2:5b:37:53:f1:5f:
eb:38:a8:b4:cc:15:08:ec:50:50:1b:a3:6d:7d:c3:
37:eb:a4:23:6f:77:82:34:8f:44:7e:1f:d3:b8:43:
c0:4e:02:32:c6:92:cc:6a:a9:e6:3a:b0:b1:4b:6f:
1b:44:2d:24:47:7d:63:42:77:03:f7:63:e1:8b:a3:
8a:ae:4b:f8:7a:8a:7d:90:2f:da:8e:aa:89:0c:30:
da:f8:de:6e:b0:b9:8c:cf:7c:6c:6c:fc:26:56:34:
b3:2c:e5:a0:2e:d0:72:fd:64:ba:fa:65:e1:9b:a9:
76:f6:11:01:53:9c:40:6b:65:b5:7f:a8:84:1b:d3:
ec:9e:08:26:c6:1f:b1:ac:e6:7b:f9:4b:87:d6:2b:
d2:b7:30:06:3b:76:b6:8b:49:be:82:e5:1c:90:3b:
58:cb:0e:99:21:5f:55:f4:72:23:49:c5:a4:46:d9:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:41:B8:D0:2C:E6:AC:3D:3B:51:E9:C4:09:DC:72:C5:0C:CF:AD
X509v3 Authority Key Identifier:
keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:fe:e2:aa:8f:64:f3:83:4d:24:c7:bb:fb:2d:61:10:9b:
42:34:ec:2e:19:4d:e8:60:64:41:86:23:d6:d0:91:ad:2e:4d:
c6:71:ba:a6:a4:2f:3e:39:ba:99:a6:db:c5:f6:50:38:6e:e7:
30:41:60:31:25:20:32:a5:24:a1:da:d3:05:91:19:70:ae:e1:
c4:6e:95:68:d1:1c:48:1b:6b:3a:91:06:00:07:d2:a0:a0:96:
5b:2e:99:10:96:65:78:36:8d:73:7d:d1:9b:0c:14:fb:47:17:
98:ce:09:c9:cd:a3:e2:74:05:9e:82:5c:bc:5b:7f:5c:3b:bd:
48:e9:80:d2:07:ac:59:32:cb:d1:71:22:86:6d:2e:f5:49:90:
9a:85:b9:89:f5:00:10:5e:d5:48:4b:4d:70:f4:f9:99:0f:6d:
d2:6e:09:bd:91:e0:3b:9e:a7:e6:62:f2:d0:dc:9a:b3:b1:d5:
51:72:2e:22:21:69:de:0c:19:2a:dc:10:08:ee:0f:34:2f:d4:
e7:94:84:41:73:2f:8c:ff:13:da:a1:b5:60:92:e2:ee:1c:fd:
98:8e:e1:aa:5a:39:d2:8b:6d:a1:83:ca:c5:f8:ad:03:1f:af:
55:87:01:0b:f6:6e:b0:51:44:2f:d4:d9:af:f7:37:77:37:43:
41:3c:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:45:37 2026 by rpki-client