
$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft
File: AF231F74DDE2311E23940DD27C9A363910CAB577.mft (raw, json)
Hash identifier: tZTJyMngiKbHf2Wfp9FcZJDlYvkYsM65fzZQmS1vk18=
Subject key identifier: 04:FE:B7:94:E8:E2:6C:BE:2A:F6:DD:74:CA:CC:56:D4:BA:44:AD:4A
Authority key identifier: AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77
Certificate issuer: /CN=AF231F74DDE2311E23940DD27C9A363910CAB577
Certificate serial: 7B0C8080C4349ECCBCD5DF4886CF6BAFD5DF10A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft
Manifest number: 4D
Signing time: Mon 02 Mar 2026 00:40:54 +0000
Manifest this update: Mon 02 Mar 2026 00:35:54 +0000
Manifest next update: Tue 03 Mar 2026 04:02:54 +0000
Files and hashes: 1: AF231F74DDE2311E23940DD27C9A363910CAB577.crl (hash: vn2Hc5NAtGhEYXfE7/If5VDAKHRe/ZzyiSQWrLTrT4Q=)
2: 3137302e3233332e35362e302f32322d3332203d3e20323635303837.roa (hash: EYyUElunll6ku9qCWDNirniijbr4tjX9Ij8ARgZeEgo=)
3: 323830343a333239383a3a2f33322d313238203d3e20323635303837.roa (hash: xOwOGSU7wTDhn3QFg+xaq3Te4NGx/6MLJ1r9YwedQNw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl
rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 04:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0c:80:80:c4:34:9e:cc:bc:d5:df:48:86:cf:6b:af:d5:df:10:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF231F74DDE2311E23940DD27C9A363910CAB577
Validity
Not Before: Mar 2 00:35:54 2026 GMT
Not After : Mar 3 04:02:54 2026 GMT
Subject: CN=04FEB794E8E26CBE2AF6DD74CACC56D4BA44AD4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:74:b5:30:26:42:fa:a6:14:c4:d8:a3:91:
17:f6:ca:ba:78:a8:24:9e:a3:ea:9f:bc:97:7b:62:
ea:17:8b:d7:29:f0:26:e6:75:ea:1c:05:7d:20:9a:
97:66:15:d9:c0:77:6b:d7:dd:e2:4a:6c:82:cc:7b:
b5:9f:a9:5f:55:d5:bc:ff:96:16:11:b0:61:a6:06:
a5:d4:bb:36:a8:b4:e9:0c:55:10:15:8c:2a:03:16:
59:2b:24:ff:a3:24:93:7a:b8:b8:cb:48:65:94:48:
f5:b2:11:0b:38:66:32:6a:64:d9:2d:8f:ad:75:e5:
89:64:32:84:ec:14:cb:b6:53:53:9f:28:09:d6:7c:
5e:34:23:0d:10:b2:a3:1c:d1:06:d5:6a:71:03:40:
25:da:9f:cd:c3:20:6b:e8:7d:07:e3:d3:f5:54:28:
32:b3:95:2f:da:56:87:d2:55:0d:2d:84:9e:04:c1:
24:ad:81:62:ea:d1:3b:5b:0c:34:04:d7:fc:88:02:
73:ef:88:36:2b:d0:f4:b9:7b:fe:43:47:13:85:ca:
26:25:6f:68:c4:45:a6:66:50:60:58:9d:0f:14:79:
6c:5e:4f:15:e6:d0:38:8e:ca:2e:ab:b9:99:4b:82:
d6:83:ab:c3:20:42:cb:13:d8:de:1b:ea:77:59:44:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:B7:94:E8:E2:6C:BE:2A:F6:DD:74:CA:CC:56:D4:BA:44:AD:4A
X509v3 Authority Key Identifier:
keyid:AF:23:1F:74:DD:E2:31:1E:23:94:0D:D2:7C:9A:36:39:10:CA:B5:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF231F74DDE2311E23940DD27C9A363910CAB577.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/0/AF231F74DDE2311E23940DD27C9A363910CAB577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:6d:92:81:6c:63:d0:e8:bf:f8:08:9f:15:4e:f2:d2:f6:
f2:a1:bc:67:39:a4:a7:9c:a7:af:10:ea:3a:42:83:4d:20:16:
e8:78:2f:57:aa:13:54:c5:0e:02:38:83:80:97:4a:3c:32:c8:
f8:2e:fe:e2:30:d7:73:f1:a1:28:68:a3:5a:df:80:e8:4e:33:
af:5f:99:67:b3:f3:80:e5:43:9a:0a:73:8d:4f:05:f4:07:4d:
c1:d0:96:2a:5c:cd:06:f8:3b:ce:f6:11:90:5b:12:b7:2a:52:
e2:f3:67:ca:e9:b9:d8:65:2b:db:dd:7a:b2:cf:91:6c:4a:df:
c8:50:4f:5e:70:e9:f5:a3:39:de:a1:1f:7b:0c:5c:68:61:85:
3c:3f:f2:75:a7:fa:3c:91:ab:f7:6f:38:9f:4c:4a:c4:3e:fa:
74:8f:2a:89:e9:fd:7d:3c:c6:65:24:fd:d9:9c:32:90:bd:e6:
3d:b2:4c:7a:0b:c7:55:75:0f:e8:d4:aa:7e:ba:79:05:5b:2a:
1f:11:24:c1:f3:14:93:f9:91:c3:7a:16:68:89:f3:3f:e1:97:
20:7e:53:ba:72:3b:1e:2d:70:83:75:b1:a4:d8:3d:7c:53:ac:
77:40:d1:70:12:2a:02:5e:41:b5:7e:91:aa:0f:e0:92:b4:b9:
89:f4:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:11 2026 by rpki-client