
$ rpki-client -vvvf rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
File: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft (raw, json)
Hash identifier: eTQTdORBGtAH6u9rDxsMi9ma9dLIveAYNDci0hAHR2c=
Subject key identifier: 2D:BD:3F:D9:EB:96:94:C2:C0:49:DA:6D:B1:AE:CB:F8:50:65:C1:0F
Authority key identifier: 3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
Certificate issuer: /CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Certificate serial: 235BC43911793372CA3ADFB7902BB95C2152CDF2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
Manifest number: FB
Signing time: Sat 22 Aug 2026 18:39:28 +0000
Manifest this update: Sat 22 Aug 2026 18:34:28 +0000
Manifest next update: Sun 23 Aug 2026 21:44:28 +0000
Files and hashes: 1: 3137372e36362e3134382e302f32322d3332203d3e203532383437.roa (hash: RmplN4gP0rfEH49EGPOjX6lPM+6EM+VZfi1Fjdb3I/8=)
2: 323830343a313038343a3a2f33322d313238203d3e203532383437.roa (hash: MohA+nzFZQ4H9VfNB5+Ii/NodtcpuqwWIRY2fOZl5r8=)
3: 3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl (hash: stgGt2IOZcAq1QKrgFzXJhyHMQ1YEX0XbDJUXkzrt88=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 23 Aug 2026 21:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5b:c4:39:11:79:33:72:ca:3a:df:b7:90:2b:b9:5c:21:52:cd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8
Validity
Not Before: Aug 22 18:34:28 2026 GMT
Not After : Aug 23 21:44:28 2026 GMT
Subject: CN=2DBD3FD9EB9694C2C049DA6DB1AECBF85065C10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:be:14:d8:da:c3:9d:41:60:b1:b3:87:e5:
01:fc:39:f4:40:32:a9:e8:cf:3e:0f:b2:1f:9a:bb:
56:4c:e6:b9:59:fb:dc:58:f8:75:8a:51:1d:b6:e6:
f7:6d:ad:47:dc:7e:74:a0:21:77:0f:5a:ef:78:3e:
8c:97:79:ba:50:2e:cf:7e:d0:3e:75:1e:e9:df:cf:
b7:78:80:97:8c:6e:8f:13:8c:d4:a6:14:41:9f:72:
2b:21:b3:7b:5d:b6:ff:f3:c2:9e:ed:0b:71:c5:3e:
ac:8b:2b:36:dd:f6:b6:e6:90:78:a5:26:8f:6f:7e:
7b:75:59:d4:86:f0:f0:85:6e:3d:53:04:e3:2e:ef:
a3:c2:5f:1b:42:ea:d5:38:2b:2e:4e:f1:13:f5:34:
06:75:58:a9:88:f5:40:6c:47:ce:77:be:6e:d9:1a:
e8:cd:10:c5:fc:a7:aa:8b:00:b5:fd:c3:81:f4:f5:
fd:00:fc:ce:34:b1:bd:3d:78:09:c9:b5:a4:c2:10:
85:8b:d7:16:6c:bd:b4:87:b1:aa:77:fe:f7:99:33:
ea:f7:b5:00:d9:8e:46:1b:d5:b5:49:9b:eb:59:e6:
cd:8e:cb:82:19:d3:41:b7:24:04:7b:31:27:62:ee:
3d:3e:39:7e:c2:47:b1:cb:7d:89:c2:bf:19:66:ed:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:3F:D9:EB:96:94:C2:C0:49:DA:6D:B1:AE:CB:F8:50:65:C1:0F
X509v3 Authority Key Identifier:
keyid:3A:FA:C4:1D:B1:2E:69:24:E2:22:CD:6C:84:07:E7:F6:04:E6:DE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgLao7NW3J186AUVTSVZozXmY6T85e3w6sasyuz1Had/0/3AFAC41DB12E6924E222CD6C8407E7F604E6DEC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:35:ee:3b:79:a1:ea:ec:17:0f:4e:c3:db:29:07:66:52:51:
18:c6:e5:de:9e:b2:04:5d:63:43:d9:e8:7a:6e:ac:ec:b4:a0:
68:5e:86:b7:81:0a:5c:7a:14:e7:c3:2a:ee:32:d7:e3:71:b1:
2b:0e:60:fc:eb:c1:58:e5:4d:05:d3:47:4b:da:1d:47:f2:9e:
03:8e:f2:60:4d:a8:4b:ca:f5:f6:e1:bd:08:88:98:9f:48:3c:
d1:c3:dd:b8:5e:e6:5d:66:1d:6d:09:0c:ba:a2:06:8c:bf:6a:
fa:b8:aa:85:32:47:0b:e2:15:96:fb:09:32:0b:8c:2e:94:23:
24:ec:90:67:0d:dc:35:4d:80:97:7d:16:14:66:99:d8:ec:ad:
a1:a5:4a:08:f9:56:2d:69:7b:05:bb:73:4e:9b:70:a0:72:82:
e3:ae:15:03:73:42:50:f4:47:45:c3:b1:a1:28:3b:53:87:56:
95:27:41:ed:da:d5:8d:b6:df:e9:2d:3a:28:40:ce:bf:2c:1b:
49:20:a3:b7:bc:5e:e0:66:08:8a:9e:16:e9:bc:af:25:b6:89:
35:8a:68:61:bd:22:28:6f:a2:be:9f:b0:65:e4:42:e6:22:f1:
4e:78:7e:9d:b1:5e:ed:8d:51:07:72:54:3d:bc:fa:35:49:fd:
1d:7a:df:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUI1vEORF5M3LKOt+3kCu5XCFSzfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGQUM0MURCMTJFNjkyNEUyMjJDRDZDODQwN0U3RjYw
NEU2REVDODAeFw0yNjA4MjIxODM0MjhaFw0yNjA4MjMyMTQ0MjhaMDMxMTAvBgNV
BAMTKDJEQkQzRkQ5RUI5Njk0QzJDMDQ5REE2REIxQUVDQkY4NTA2NUMxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGUr4U2NrDnUFgsbOH5QH8OfRA
Mqnozz4Psh+au1ZM5rlZ+9xY+HWKUR225vdtrUfcfnSgIXcPWu94PoyXebpQLs9+
0D51Hunfz7d4gJeMbo8TjNSmFEGfcishs3tdtv/zwp7tC3HFPqyLKzbd9rbmkHil
Jo9vfnt1WdSG8PCFbj1TBOMu76PCXxtC6tU4Ky5O8RP1NAZ1WKmI9UBsR853vm7Z
GujNEMX8p6qLALX9w4H09f0A/M40sb09eAnJtaTCEIWL1xZsvbSHsap3/veZM+r3
tQDZjkYb1bVJm+tZ5s2Oy4IZ00G3JAR7MSdi7j0+OX7CR7HLfYnCvxlm7XvjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULb0/2euWlMLASdptsa7L+FBlwQ8wHwYDVR0j
BBgwFoAUOvrEHbEuaSTiIs1shAfn9gTm3sgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFI
YWQvMC8zQUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkFDNDFEQjEyRTY5MjRF
MjIyQ0Q2Qzg0MDdFN0Y2MDRFNkRFQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hnTGFvN05XM0oxODZBVVZUU1Zab3pYbVk2VDg1ZTN3NnNhc3l1ejFIYWQvMC8z
QUZBQzQxREIxMkU2OTI0RTIyMkNENkM4NDA3RTdGNjA0RTZERUM4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlzXuO3mh6uwXD07D2ykHZlJRGMbl3p6yBF1jQ9noem6s7LSgaF6Gt4EKXHoU
58Mq7jLX43GxKw5g/OvBWOVNBdNHS9odR/KeA47yYE2oS8r19uG9CIiYn0g80cPd
uF7mXWYdbQkMuqIGjL9q+riqhTJHC+IVlvsJMguMLpQjJOyQZw3cNU2Al30WFGaZ
2OytoaVKCPlWLWl7BbtzTptwoHKC464VA3NCUPRHRcOxoSg7U4dWlSdB7drVjbbf
6S06KEDOvywbSSCjt7xe4GYIip4W6byvJbaJNYpoYb0iKG+ivp+wZeRC5iLxTnh+
nbFe7Y1RB3JUPbz6NUn9HXrfPg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 11:14:50 2026 by rpki-client