
$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier: UwnjMbBPVW8q6QC5uy0wjoFA7z8C/FX7K4bHTIupdIc=
Subject key identifier: 23:15:56:6A:5B:8B:93:7C:61:72:41:0C:AC:73:77:48:F3:24:99:30
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial: 34CCE86373624B7B57013512C8548F207E558D97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number: 015F
Signing time: Mon 02 Mar 2026 06:24:10 +0000
Manifest this update: Mon 02 Mar 2026 06:19:10 +0000
Manifest next update: Tue 03 Mar 2026 07:16:10 +0000
Files and hashes: 1: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
3: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: PDkVWHOcN4kLq1jMsJu+HDfpR1cFnaVtMqKyYzDvXMU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 07:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cc:e8:63:73:62:4b:7b:57:01:35:12:c8:54:8f:20:7e:55:8d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Validity
Not Before: Mar 2 06:19:10 2026 GMT
Not After : Mar 3 07:16:10 2026 GMT
Subject: CN=2315566A5B8B937C6172410CAC737748F3249930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:4e:6f:4f:c4:4a:06:29:e1:8f:0d:c5:3d:
64:29:d9:24:47:ea:38:bf:f4:76:f0:8d:01:bf:4c:
8f:16:43:94:af:df:03:1b:1b:34:e1:8a:31:e5:14:
61:f5:54:8d:d5:a4:2f:db:2b:f7:64:9e:fb:3a:8a:
09:64:2d:c4:3f:4f:4c:55:cf:60:d6:1c:94:7c:76:
7f:78:0c:22:54:48:75:3b:15:62:3d:ee:9a:29:85:
b1:35:fb:f7:71:76:51:c9:79:a3:2f:f2:f2:1c:60:
81:17:7b:cb:66:14:67:f4:ae:2e:72:9d:b9:79:48:
4f:f0:d9:42:94:92:3e:75:3e:f3:3a:79:76:ec:7b:
2b:fc:95:3f:82:f4:b5:e8:1e:7c:d0:44:74:e3:92:
52:5b:b4:ad:37:b5:da:65:eb:3d:41:4b:5c:24:7b:
b5:d3:f9:3e:e7:e5:d4:b1:c2:72:9d:89:f2:e8:fd:
0e:05:8b:40:aa:21:e3:30:f2:4d:8d:3d:ab:87:7e:
d7:ce:ec:53:a3:34:75:54:06:50:d0:59:8a:44:e3:
ec:22:a4:8e:49:80:80:7e:2b:d6:7d:cb:66:0e:bb:
13:6a:65:8b:f6:33:39:a6:7c:d6:5f:7a:30:cc:fb:
85:12:fc:38:2b:72:5b:16:f0:b4:71:ce:95:12:25:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:15:56:6A:5B:8B:93:7C:61:72:41:0C:AC:73:77:48:F3:24:99:30
X509v3 Authority Key Identifier:
keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:3b:70:bb:93:e8:a0:45:b7:c3:5d:2a:63:6d:22:c0:c7:
a7:8c:3e:0f:e3:9c:44:53:5d:7e:14:79:c8:17:62:06:da:6f:
06:49:33:d3:10:05:71:dd:c3:6e:d1:44:c2:88:e4:f8:e9:63:
93:4f:62:e9:08:61:85:12:a7:7c:cd:7c:57:cf:ab:30:1d:24:
60:9e:08:4b:ae:be:31:66:c5:d5:3a:ef:dc:07:53:f7:30:fd:
46:94:42:99:ed:a3:d2:1c:bb:10:78:23:73:6e:fb:1f:4c:50:
28:08:09:bc:2c:f3:3b:91:d5:11:32:47:37:28:9b:43:41:e2:
ba:12:2c:1c:f5:05:a9:60:0a:7f:10:a6:5f:0a:5f:b1:72:ce:
2c:91:65:58:b6:58:39:0c:3c:8b:73:54:61:b8:a1:09:f1:2b:
a1:6c:2c:35:04:32:5d:a6:94:dc:24:66:02:8d:22:7c:0e:89:
69:d3:8c:60:51:8d:36:1c:22:e3:e0:18:b4:2e:1a:82:e2:a0:
75:a4:59:38:32:f9:c3:bb:86:23:25:0d:64:74:b3:96:23:94:
5c:a6:c1:d1:05:34:5d:75:28:bf:0f:41:88:63:d1:55:f0:37:
21:45:52:6a:16:18:79:14:bc:f7:a8:78:f4:16:ab:ab:fe:e3:
c3:bf:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:07 2026 by rpki-client