
$ rpki-client -vvvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft
File: AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft (raw, json)
Hash identifier: kdqra5NTO0wqQHLX+D7Hdr61bHDPwH91Cm7qDFxMKEk=
Subject key identifier: 60:FE:DE:61:3F:D1:DA:F7:B8:23:D3:AD:26:18:70:E0:CA:C4:0F:57
Authority key identifier: AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76
Certificate issuer: /CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476
Certificate serial: 22AACAF34DE5698AF205B77F9BC51C3BE9955028
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft
Manifest number: 49
Signing time: Mon 19 Oct 2026 16:43:05 +0000
Manifest this update: Mon 19 Oct 2026 16:38:05 +0000
Manifest next update: Tue 20 Oct 2026 18:40:05 +0000
Files and hashes: 1: 323830343a353431343a3a2f33322d3332203d3e20323638363237.roa (hash: STqqUnGiBFm6UDKY4KPE/SPywdnrp0ULCQ3TxfluNSs=)
2: 323830343a353431343a3a2f34302d3430203d3e20323638363237.roa (hash: 2hBd+nsjW/ZmOPNppnUKyFheuoeQO1PxooMqEhX3000=)
3: AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl (hash: cZ4t4UBakj8G7zl/uLJoWNUQ5z0DxhMRy61hJGBi0iw=)
4: 34352e3136342e3136342e302f32322d3234203d3e20323638363237.roa (hash: 7TlzajFNI1gpw00Cu4ZGCt83sTUes68v4NN6JycNfiQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl
rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 20 Oct 2026 18:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:aa:ca:f3:4d:e5:69:8a:f2:05:b7:7f:9b:c5:1c:3b:e9:95:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476
Validity
Not Before: Oct 19 16:38:05 2026 GMT
Not After : Oct 20 18:40:05 2026 GMT
Subject: CN=60FEDE613FD1DAF7B823D3AD261870E0CAC40F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ff:20:1b:48:aa:8b:89:bf:5b:a3:85:4f:2e:
1d:49:4f:74:81:c5:fb:83:22:ff:81:12:48:90:ba:
06:5a:1f:ec:db:eb:fa:6b:38:f5:4e:7f:cd:97:09:
70:8c:66:58:bd:2e:ca:7a:01:ca:7a:3b:a6:bd:60:
b7:da:7c:65:15:7e:73:42:81:59:c7:6e:69:24:76:
9b:a9:31:72:88:30:02:8b:78:b2:18:be:5a:66:00:
5d:83:6c:84:22:86:3c:30:1e:74:22:fd:f4:82:26:
07:6b:cf:59:19:5e:f1:1d:d3:69:a0:d6:e0:ab:ff:
75:53:ec:7e:33:5c:d8:20:c3:56:41:9d:bc:fa:1b:
ef:c7:ae:dc:32:13:06:ac:8c:96:1f:f9:36:85:9a:
24:1b:fe:37:13:cf:c2:bc:88:09:5b:bf:05:a9:a4:
52:bf:d4:75:18:05:e7:39:57:1e:22:ea:87:fa:7d:
c9:f7:30:b5:d1:34:ba:23:3f:26:20:52:8b:87:29:
cc:53:53:17:3c:93:5f:f2:aa:80:f1:88:fc:a7:aa:
4d:8e:51:b1:e4:9d:4d:0b:19:e9:06:f4:9f:b2:1f:
40:00:ab:56:82:66:15:28:92:95:c1:49:53:b5:07:
6c:9d:83:e4:7b:ca:eb:c5:40:94:5c:6a:3e:d0:6a:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:DE:61:3F:D1:DA:F7:B8:23:D3:AD:26:18:70:E0:CA:C4:0F:57
X509v3 Authority Key Identifier:
keyid:AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0a:93:3f:57:42:41:2d:25:0a:15:5d:9f:05:ae:44:91:f0:
6d:77:55:dd:ae:b2:9c:a4:c9:38:bf:5c:5b:10:08:be:43:f2:
f0:aa:ce:2a:c1:74:5c:c5:b8:58:50:2c:95:e1:e6:d0:f6:c8:
a2:b8:ed:a4:73:0a:55:0f:3f:06:35:ff:47:fc:dc:4b:03:af:
74:a1:9e:39:1b:96:09:b4:b4:26:73:9f:28:db:20:88:96:a3:
29:ea:f6:73:96:ef:1d:0f:8c:d1:ed:c9:62:3d:c4:df:fb:ef:
c7:b4:16:21:25:b4:54:a0:bc:40:89:1a:54:1d:b6:c1:52:a1:
71:82:ca:4b:fe:a0:8e:df:69:b1:40:37:ad:f0:d7:6a:ef:eb:
13:9b:4c:c2:8d:60:01:78:6c:01:b6:6f:c6:e2:69:0f:d3:f5:
64:8a:e3:3c:f9:da:ba:aa:5c:0d:bd:4a:08:de:16:b8:8a:51:
76:6d:fb:f2:29:1e:41:ee:62:c2:16:cb:d2:c3:f4:63:c3:e4:
15:fe:7b:8a:f5:f5:67:90:3f:db:00:e2:b4:55:bb:f9:13:2b:
b6:d8:5b:1a:30:0b:67:2f:23:8b:e3:12:9d:0e:bd:92:3b:67:
4f:58:25:59:8e:c4:b6:1b:c6:3d:93:ed:4c:b2:ea:34:5a:ad:
78:32:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:31:20 2026 by rpki-client