
$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
File: FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json)
Hash identifier: inuoe8xLunvmwyBjqENYa3r2YL6scu4DZNFN96bI64M=
Subject key identifier: 53:D9:47:2F:F3:EC:75:CF:F8:A9:AC:C7:1C:B2:9E:11:4E:D1:11:14
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial: 174CD2A6D19EEF6D3AACF78D570431E11A445D24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
Manifest number: 0285
Signing time: Thu 09 Apr 2026 00:03:47 +0000
Manifest this update: Wed 08 Apr 2026 23:58:47 +0000
Manifest next update: Fri 10 Apr 2026 00:26:47 +0000
Files and hashes: 1: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: kfg2dpneGGmCrUHXsBibXZqTKYQRGTWgwu5Dg9g6PyU=)
2: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: uQ2hTKKN6Qzw9x/PKbUfxmURwLfodfxJcvZkF9+RONE=)
3: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: dbJPXyrTCsLpCzcijXf9A1x/KHQUtPR++8OB+EdCqkQ=)
4: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: twQXtR0UE89TJHBMIWCfdk2/RGSlshnq7xHMnx+r9dU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl
rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:4c:d2:a6:d1:9e:ef:6d:3a:ac:f7:8d:57:04:31:e1:1a:44:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
Validity
Not Before: Apr 8 23:58:47 2026 GMT
Not After : Apr 10 00:26:47 2026 GMT
Subject: CN=53D9472FF3EC75CFF8A9ACC71CB29E114ED11114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:62:2c:c5:a5:82:34:f4:d0:07:de:44:9b:
6d:1d:01:5e:dc:20:64:49:4e:07:20:c7:d3:3f:aa:
2f:b1:f6:9f:69:cb:23:d1:6e:71:28:ff:33:e4:10:
16:10:d5:cc:3e:5a:d6:d1:8a:ea:65:ba:0e:d9:62:
d7:72:83:72:c9:0c:16:b3:a9:16:77:a3:f9:4d:0c:
e0:da:c6:c6:6a:d1:2e:8f:2e:fb:5e:13:61:46:29:
09:28:91:f5:21:e9:6e:49:ff:33:ea:5d:10:96:02:
a3:99:cb:d9:05:8a:1f:a4:be:9b:20:37:f7:93:68:
cc:1f:3f:d0:6b:fc:89:e2:9b:69:a0:fd:a1:ba:d9:
bd:f1:cf:b7:ed:6c:e9:40:7a:d3:42:92:67:a8:d4:
b1:ba:c7:dc:2f:24:cd:93:51:5c:0b:aa:49:e4:b9:
8a:6b:43:ff:fd:21:fd:d3:26:9f:0a:ab:a2:27:8e:
d8:6c:cc:c7:6c:9e:e6:f5:52:61:33:44:00:ee:8f:
6b:38:06:04:43:a7:74:58:5e:95:56:ec:83:21:cb:
d0:8a:d4:e4:4a:1d:54:66:74:f7:1c:b3:b2:13:bf:
09:ff:4d:aa:76:fb:92:bd:24:e9:02:ce:ed:50:57:
42:d5:22:99:59:3b:10:6a:18:36:3a:22:22:a9:e2:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:47:2F:F3:EC:75:CF:F8:A9:AC:C7:1C:B2:9E:11:4E:D1:11:14
X509v3 Authority Key Identifier:
keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:8a:82:53:86:70:76:d9:ab:d1:12:02:85:2e:42:31:14:
28:5b:20:75:cc:51:a7:ab:53:3e:df:52:eb:25:f9:41:19:c4:
4b:49:4a:cb:be:c5:3f:29:81:e6:b1:fa:4c:b2:2b:1e:dd:79:
b7:0c:b2:c2:73:cf:17:6d:f6:f0:ea:34:11:4e:4a:f3:f3:a1:
f4:81:c1:c0:d6:a6:66:d0:59:29:fb:0a:0a:29:48:1a:c6:fe:
92:6c:05:11:db:a3:31:47:c8:0b:55:34:b8:2f:90:35:bb:24:
74:fe:8a:a4:79:de:a3:a1:a4:cb:2b:00:fc:0c:a3:c2:79:e5:
e1:e0:00:1f:a4:d3:05:8f:16:7f:cc:3c:56:da:78:7d:e4:d4:
96:51:6f:22:60:a4:91:f4:fc:26:04:33:46:18:07:dc:a4:33:
aa:ed:bd:33:ae:48:a5:2e:dc:cd:07:f2:c4:63:1a:37:e0:5c:
ff:42:e5:7f:8b:02:b7:84:f4:e9:2c:73:bd:73:50:2e:f5:33:
78:e0:c7:5a:23:01:aa:99:c2:c3:33:43:2a:71:2c:5c:39:2b:
81:7d:40:3a:aa:ec:7b:73:75:00:e4:84:10:89:01:19:80:94:
23:05:92:4b:be:a2:16:8a:dd:50:4f:d0:5c:be:6c:f0:38:c3:
0e:09:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 11:11:43 2026 by rpki-client