
$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
File: 5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft (raw, json)
Hash identifier: Sx/76WfKIVnG6xynmKZsWquuKDef/dYNlon77qlUP4o=
Subject key identifier: A6:D6:B3:02:BD:8D:81:78:EE:9B:57:8F:B3:3A:F4:9A:54:F3:18:5E
Authority key identifier: 5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17
Certificate issuer: /CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
Certificate serial: 4A70B8CCA82DC0711AC7831CD1A60661C13FF68C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
Manifest number: DE
Signing time: Sun 01 Mar 2026 21:24:42 +0000
Manifest this update: Sun 01 Mar 2026 21:19:42 +0000
Manifest next update: Tue 03 Mar 2026 01:09:42 +0000
Files and hashes: 1: 323830343a333439383a3a2f33322d3332203d3e20323635343637.roa (hash: 4D/uPrjckjTtR2ilbkEgeu65wdvem/4E5VO6ZsCNI7M=)
2: 3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa (hash: BXHo89BoVxO/eBBnuU+52MEL4crZqXVANRb5caMCVnc=)
3: 5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl (hash: Fujtf2O3qkIbwCMCq1kmKu6RR80ZkKRJ86WKWWOk0dw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl
rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 01:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:70:b8:cc:a8:2d:c0:71:1a:c7:83:1c:d1:a6:06:61:c1:3f:f6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
Validity
Not Before: Mar 1 21:19:42 2026 GMT
Not After : Mar 3 01:09:42 2026 GMT
Subject: CN=A6D6B302BD8D8178EE9B578FB33AF49A54F3185E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:06:fa:0c:25:6e:b0:2a:76:59:d0:f1:b8:
7b:d0:eb:da:40:64:f9:df:12:25:ca:1e:a2:48:52:
57:b4:1a:81:a4:02:35:09:b1:ac:dd:e4:d1:66:1a:
e9:8d:9b:65:57:72:f0:9f:10:06:ca:7a:bc:68:15:
02:2c:75:d1:d5:77:15:f0:dd:13:97:d7:df:84:9f:
21:d3:d5:34:f4:df:11:ad:74:57:f7:46:53:69:2c:
a1:db:6c:5b:5d:d5:b3:f0:1a:bb:95:9c:f2:94:38:
df:70:91:dc:25:aa:96:93:be:34:6d:9f:f8:9d:d2:
76:47:20:4e:c2:da:75:9e:7b:9f:88:e6:b8:10:2f:
1c:88:e6:25:e9:6b:8a:4b:08:83:bf:7f:58:e4:47:
4e:5e:5a:d5:3a:76:56:c3:96:29:6b:a5:36:14:fe:
ec:6d:82:40:51:48:84:d8:2a:cf:8a:9e:65:a8:a5:
17:b7:2b:c8:c6:7f:79:a7:53:09:60:82:cb:44:e2:
ba:91:89:98:28:fd:80:53:ea:71:93:8f:44:80:d4:
52:62:27:44:8e:87:00:21:07:3e:9b:0f:04:b1:4d:
c3:28:35:1c:11:b6:8a:a4:6b:57:be:cd:20:00:8e:
8c:7a:78:be:9d:cf:3e:dc:06:8e:1c:d6:44:de:d5:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:B3:02:BD:8D:81:78:EE:9B:57:8F:B3:3A:F4:9A:54:F3:18:5E
X509v3 Authority Key Identifier:
keyid:5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:12:4f:64:a4:49:fc:5e:3d:9b:9f:98:20:a7:b3:cd:9b:7f:
38:4e:e7:05:09:2a:71:6e:7c:32:5a:50:22:81:98:1c:37:9c:
7f:66:4a:16:62:df:a7:fd:3a:fc:25:73:47:0e:9c:d7:6e:ef:
fa:7a:0b:4b:36:da:52:f0:fd:c4:75:b0:0f:bb:e9:67:c8:a2:
4d:da:8c:11:fc:86:90:74:2a:f9:5f:05:a8:85:d2:ad:2a:bb:
29:8c:14:1f:85:e6:86:7d:01:1e:fd:cb:7c:19:2a:28:7a:6e:
32:c9:ad:71:8e:83:8d:6e:41:12:56:33:af:5f:d3:d6:05:82:
a3:3b:e0:0e:29:34:36:a9:23:11:da:61:a4:40:7f:b0:68:07:
f1:0d:15:11:5d:a1:e0:1a:76:25:ee:42:27:f8:ab:12:cf:55:
92:89:12:f6:85:e2:b8:7d:fe:93:d9:f8:25:98:bd:20:38:da:
2d:46:bd:a4:87:21:c3:56:fa:7e:0f:05:9f:85:19:d7:51:00:
54:3e:8b:f1:71:b5:f0:97:59:35:aa:46:fe:07:3f:f9:d7:1d:
4e:80:16:17:bb:cb:bd:05:4d:ac:53:84:77:5e:35:76:cd:d6:
43:90:17:46:9a:bf:d4:d3:b8:e7:64:bb:2f:c7:64:b4:e6:ef:
7f:00:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:16 2026 by rpki-client