
$ rpki-client -vvvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier: 1dZYu86VnZWrW0USAH4xFd5M+WN/8vhW+y1waqcaJ1A=
Subject key identifier: 96:B3:38:CD:CA:1E:5F:20:0F:75:66:CC:4E:2B:94:6F:53:5B:8B:DA
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial: 028F56D1BDEFB7D6EFE9B98A6866B8AB5BE26EF9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number: 02A4
Signing time: Sun 01 Nov 2026 07:27:31 +0000
Manifest this update: Sun 01 Nov 2026 07:22:31 +0000
Manifest next update: Mon 02 Nov 2026 09:30:31 +0000
Files and hashes: 1: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
2: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: 8Y6pID7VfW02BDe/Pv3dOWAFGXX7Xu2nSxhcPQ68JZw=)
3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 09:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8f:56:d1:bd:ef:b7:d6:ef:e9:b9:8a:68:66:b8:ab:5b:e2:6e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Validity
Not Before: Nov 1 07:22:31 2026 GMT
Not After : Nov 2 09:30:31 2026 GMT
Subject: CN=96B338CDCA1E5F200F7566CC4E2B946F535B8BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:8a:46:9f:1d:cd:80:1e:1c:6b:ff:63:a4:
c7:99:eb:63:f0:a2:47:9b:b5:63:0b:18:ad:e6:c6:
7d:d7:d4:45:55:de:58:da:06:38:2f:0d:20:5b:f8:
4e:a1:15:20:95:fb:99:27:d7:12:33:46:4c:aa:7b:
85:fe:88:0d:b4:1d:2d:98:89:9d:fc:04:14:10:81:
3c:92:4c:fd:99:0f:95:f8:d4:33:fa:8a:63:99:11:
07:ab:9e:30:f7:89:5b:74:4f:50:b3:e1:3a:ab:30:
ec:55:ff:8c:f1:58:77:a3:17:da:57:ab:83:0c:a2:
c3:c9:24:ec:03:66:1a:c8:85:76:a9:b2:fb:c1:2e:
90:50:00:d2:f4:0a:e4:49:2e:d9:22:8c:35:42:ff:
96:23:8f:36:d4:42:8a:70:1a:6f:cf:78:22:ad:20:
37:7e:f6:37:c0:59:13:eb:41:71:0d:34:7d:e2:82:
e3:1d:b4:c8:a3:a6:f6:f0:11:ca:73:26:ad:7b:d8:
ee:92:8d:bb:d5:27:3a:45:ca:3e:5b:0c:a9:60:5b:
57:5b:83:75:0b:e8:9b:eb:61:3d:1e:e6:25:73:10:
7b:53:d9:5b:14:5b:d8:85:5e:73:ee:9b:87:35:0b:
1a:ab:e6:dc:fc:75:69:cf:4f:e6:38:ce:64:6e:87:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B3:38:CD:CA:1E:5F:20:0F:75:66:CC:4E:2B:94:6F:53:5B:8B:DA
X509v3 Authority Key Identifier:
keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f7:a5:4d:38:a8:a4:3e:b6:66:89:bf:71:6d:ad:ba:0a:b5:
cd:13:53:6b:77:07:65:b5:69:dd:44:aa:5c:52:2d:6f:f1:24:
65:32:c6:bd:be:74:21:be:a9:34:17:33:2b:e4:69:ec:af:e0:
48:f5:7e:f3:dc:8f:1e:28:8a:27:35:fb:73:28:0d:df:23:7b:
32:fb:32:9f:2a:f3:d4:3a:7b:d9:c9:35:b9:6a:d2:6b:64:25:
e0:b5:ba:3d:85:d1:bf:46:59:05:f2:90:82:26:2d:de:48:6c:
4c:fc:0f:3d:e2:59:2e:3e:91:24:91:17:5e:03:3c:70:73:85:
f5:0c:10:4f:51:74:86:ee:df:95:f5:10:fe:43:84:81:eb:a0:
a8:ee:bc:4d:2f:27:e9:54:1e:c9:fb:6a:63:94:ad:db:88:24:
1f:1e:ac:f4:ee:21:80:22:97:4b:72:ba:11:8d:d3:35:a3:8f:
dd:6c:77:cd:c7:9f:85:98:e2:5c:5a:59:e1:2d:6d:c0:66:bb:
80:39:6f:07:d5:2d:d9:c7:8b:a4:35:cc:21:45:a7:eb:cd:df:
6a:75:c3:a3:c3:83:ad:22:4c:95:1c:7d:29:f1:b3:e9:1c:d7:
77:e6:21:eb:f1:a4:c8:53:1a:ea:33:2e:84:fb:55:91:89:f1:
43:8f:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:02:17 2026 by rpki-client