
$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
File: FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json)
Hash identifier: TpYiS8Buj2LGOcyVlTH9n45xGESJtFYsG/q1fI3HbRc=
Subject key identifier: CA:21:6A:68:FE:EE:17:9D:3C:EC:33:C7:47:87:43:82:27:B1:3F:B3
Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB
Certificate serial: 1579FA4F51FA93F8594B8FB45F2229A8D74285A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
Manifest number: 02C1
Signing time: Sun 24 May 2026 10:27:57 +0000
Manifest this update: Sun 24 May 2026 10:22:57 +0000
Manifest next update: Mon 25 May 2026 12:39:57 +0000
Files and hashes: 1: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: dbJPXyrTCsLpCzcijXf9A1x/KHQUtPR++8OB+EdCqkQ=)
2: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: 5HULZSOaIySSP/dWXN2DQ2RkOnTRNgmUtN0Di8EcNQg=)
3: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: uQ2hTKKN6Qzw9x/PKbUfxmURwLfodfxJcvZkF9+RONE=)
4: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: kfg2dpneGGmCrUHXsBibXZqTKYQRGTWgwu5Dg9g6PyU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl
rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:79:fa:4f:51:fa:93:f8:59:4b:8f:b4:5f:22:29:a8:d7:42:85:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB
Validity
Not Before: May 24 10:22:57 2026 GMT
Not After : May 25 12:39:57 2026 GMT
Subject: CN=CA216A68FEEE179D3CEC33C74787438227B13FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:20:cd:17:1f:dc:22:13:02:f0:b2:e4:29:
ad:78:2e:9b:fc:c9:61:0f:04:37:06:a1:2d:a9:29:
82:2c:9c:46:97:75:4c:fd:77:f3:06:78:c7:ae:3c:
e8:b4:ec:c3:27:f6:25:0f:33:80:66:81:51:0f:bb:
03:d1:c5:9a:d5:b5:2a:c7:bc:a9:71:1e:39:a0:1e:
68:ed:c3:10:a6:9c:ca:3a:38:54:ac:bc:29:ca:f1:
43:ec:0a:7f:2f:2a:1b:f9:e0:46:23:d8:5a:59:a3:
77:46:f4:0f:cb:a4:6e:d2:1a:be:2b:33:1b:fd:56:
57:80:a6:54:07:f6:58:db:b4:b8:4f:71:27:c9:ba:
22:7f:8b:40:67:84:32:dd:30:06:8c:cd:68:7c:04:
16:b4:49:ed:d1:26:b2:5c:24:0e:1c:c5:bc:47:47:
e0:29:37:65:a0:5f:f7:09:d5:3c:46:51:d6:44:55:
c0:8f:eb:ab:e9:c6:d2:cd:69:e9:d1:65:fb:f0:e6:
f8:ed:c4:4c:14:60:e1:15:a4:83:74:c1:b4:57:9e:
2d:b9:34:91:6f:7d:76:d2:27:ca:f7:2f:06:77:a5:
c6:1e:24:93:a5:f4:56:e6:d0:00:06:4f:a0:2a:e8:
f3:17:f1:34:5f:ec:92:2f:03:0c:32:b5:b7:b9:81:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:6A:68:FE:EE:17:9D:3C:EC:33:C7:47:87:43:82:27:B1:3F:B3
X509v3 Authority Key Identifier:
keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ca:e1:14:8f:0d:8e:db:ff:89:18:eb:e7:b1:02:c5:b5:09:
f3:b3:67:68:81:c9:6e:0e:48:94:42:28:b3:ca:7b:9b:39:6a:
c4:00:fe:79:49:0d:dc:27:25:57:40:d3:4d:c9:b1:d4:c5:57:
52:95:06:2b:f8:4c:fc:26:f8:47:80:33:fd:eb:29:1c:11:ad:
d6:eb:da:4d:2a:fb:97:d2:fb:59:ee:64:d9:03:b9:ab:ce:da:
21:fa:33:d6:bb:8b:28:9a:d3:ed:93:de:5e:8f:1e:c6:9d:c5:
82:b7:93:2e:f5:7b:ef:e8:70:18:bb:73:09:9e:dc:00:cd:f7:
95:0e:15:37:c9:be:52:dc:47:f3:3e:70:f7:99:e4:5e:b9:e2:
b8:43:75:ce:b8:2f:63:89:19:79:79:b1:8a:39:47:76:36:9a:
15:f0:97:d2:98:29:d9:16:36:3c:d8:8c:d5:2e:cb:77:29:1d:
04:a7:cc:66:e1:a3:c3:d9:14:6e:8c:58:65:56:a0:bc:3f:50:
ad:e0:80:52:15:4b:e1:63:fd:34:2c:e3:40:0e:dc:81:eb:b8:
b9:e0:5b:47:49:74:75:3c:9f:d1:82:83:64:38:26:fa:25:65:
9c:7a:6f:25:2c:c0:79:9f:2e:ea:b3:32:34:99:93:6d:b1:0b:
90:93:e9:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFXn6T1H6k/hZS4+0XyIpqNdChagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2
OTMzMDJEQjAeFw0yNjA1MjQxMDIyNTdaFw0yNjA1MjUxMjM5NTdaMDMxMTAvBgNV
BAMTKENBMjE2QTY4RkVFRTE3OUQzQ0VDMzNDNzQ3ODc0MzgyMjdCMTNGQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnSDNFx/cIhMC8LLkKa14Lpv8
yWEPBDcGoS2pKYIsnEaXdUz9d/MGeMeuPOi07MMn9iUPM4BmgVEPuwPRxZrVtSrH
vKlxHjmgHmjtwxCmnMo6OFSsvCnK8UPsCn8vKhv54EYj2FpZo3dG9A/LpG7SGr4r
Mxv9VleAplQH9ljbtLhPcSfJuiJ/i0BnhDLdMAaMzWh8BBa0Se3RJrJcJA4cxbxH
R+ApN2WgX/cJ1TxGUdZEVcCP66vpxtLNaenRZfvw5vjtxEwUYOEVpIN0wbRXni25
NJFvfXbSJ8r3LwZ3pcYeJJOl9Fbm0AAGT6Aq6PMX8TRf7JIvAwwytbe5gdTVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUyiFqaP7uF5087DPHR4dDgiexP7MwHwYDVR0j
BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z
U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF
RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9ZU0UvMC9G
QUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk8rhFI8Njtv/iRjr57ECxbUJ87NnaIHJbg5IlEIos8p7mzlqxAD+eUkN3Ccl
V0DTTcmx1MVXUpUGK/hM/Cb4R4Az/espHBGt1uvaTSr7l9L7We5k2QO5q87aIfoz
1ruLKJrT7ZPeXo8exp3FgreTLvV77+hwGLtzCZ7cAM33lQ4VN8m+UtxH8z5w95nk
XrniuEN1zrgvY4kZeXmxijlHdjaaFfCX0pgp2RY2PNiM1S7LdykdBKfMZuGjw9kU
boxYZVagvD9QreCAUhVL4WP9NCzjQA7cgeu4ueBbR0l0dTyf0YKDZDgm+iVlnHpv
JSzAeZ8u6rMyNJmTbbELkJPpBw==
-----END CERTIFICATE-----
Generated at Sun May 24 12:51:20 2026 by rpki-client