
$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
File: CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft (raw, json)
Hash identifier: qmKIpS+dKgHTgFqUn+r9sJiPL8K80JfQ/eoGkaPu+9A=
Subject key identifier: 40:37:67:0B:77:F3:42:03:68:EB:7C:FB:CE:66:5C:37:64:2B:CB:E8
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Certificate issuer: /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial: 15AE880C5DA86D3296261173280D356DB5B000B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
Manifest number: 019D
Signing time: Fri 17 Apr 2026 17:03:43 +0000
Manifest this update: Fri 17 Apr 2026 16:58:43 +0000
Manifest next update: Sat 18 Apr 2026 18:46:43 +0000
Files and hashes: 1: CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl (hash: d56XeREjLaOOakm2TwI1ZRqRhkPBuE4u4W125YSACmc=)
2: 3230302e37332e3231362e302f32322d3332203d3e20323730343833.roa (hash: qPbY/Y5KTREkyqW2QiIL32k9wQU5JL6mlwrA4y4yItU=)
3: 323830343a366361383a3a2f33322d313238203d3e20323730343833.roa (hash: 6OBQoF3ZC6oqC9TdhCOjF/406cX3oVdeis5NNiOogbc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 18:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ae:88:0c:5d:a8:6d:32:96:26:11:73:28:0d:35:6d:b5:b0:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Validity
Not Before: Apr 17 16:58:43 2026 GMT
Not After : Apr 18 18:46:43 2026 GMT
Subject: CN=4037670B77F3420368EB7CFBCE665C37642BCBE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:85:52:d3:a0:34:0c:ed:59:4e:ac:ef:ef:
72:bf:f6:51:c5:d3:38:ff:4b:c0:54:71:34:50:37:
5e:30:b6:e5:6e:e2:75:9d:21:c9:17:cf:93:21:6d:
7d:bb:22:82:3f:30:e2:1c:9a:c8:39:f1:5c:d7:ed:
b4:f4:59:f3:08:a4:5e:ef:e7:32:f6:b4:29:f4:4d:
a6:2b:26:1c:44:55:1d:de:0f:0c:ac:6a:aa:f2:1e:
69:c9:ed:ce:db:90:ad:8e:22:a3:63:28:f5:d8:e6:
92:fc:ba:d8:d1:22:2b:b0:da:d4:ab:83:f1:25:a9:
2d:f4:45:f6:ae:02:27:ea:e1:1d:15:88:1c:a8:ef:
ae:59:a1:fe:b6:d7:26:9e:77:f3:20:e5:75:b6:cf:
32:53:5f:ee:f0:6b:aa:95:8c:f9:ad:61:fe:97:19:
35:9d:4a:30:38:89:39:40:bb:57:e9:37:d8:b9:58:
11:60:2f:ad:d3:12:f9:30:fe:f1:60:e5:45:f2:92:
88:52:19:d2:0f:3b:f3:8e:ad:04:99:5e:61:84:6d:
6c:dc:93:84:2b:36:67:33:4a:00:f5:5f:8d:d2:b7:
e2:d4:69:f2:a1:3e:86:a1:8f:9b:cd:21:c0:d9:28:
79:7b:dc:0d:ba:65:43:57:75:64:11:4e:8c:40:12:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:67:0B:77:F3:42:03:68:EB:7C:FB:CE:66:5C:37:64:2B:CB:E8
X509v3 Authority Key Identifier:
keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:66:ac:eb:0d:5e:da:0e:1c:77:28:54:c1:f5:73:55:f5:94:
8e:50:c1:d1:04:6b:2f:ea:67:e3:b6:f0:f3:e5:89:d4:bc:f2:
a1:6d:c1:5d:8f:93:66:61:f7:86:2b:d0:cb:dc:b6:ab:84:5a:
68:b1:66:13:b8:f4:d6:7d:c2:1c:2b:1b:a5:b1:e7:2d:0a:33:
b3:b7:c5:da:58:3e:9c:4b:a2:38:30:f4:46:e2:b2:3c:9b:09:
07:70:06:a6:f8:63:f9:57:1f:f5:28:7e:3b:c6:5f:17:4c:0e:
a7:b5:a2:97:23:ff:bc:f7:07:c8:fe:a5:49:b1:3c:14:64:9e:
70:83:f0:06:99:44:87:1d:48:37:5b:58:15:0d:da:55:f1:e8:
2f:a9:7e:66:64:7d:c8:3a:97:d3:ff:28:76:a8:99:08:86:3b:
e8:ab:cb:e5:45:dd:66:4f:0e:dd:e0:b0:55:7c:6d:c1:48:79:
36:a1:ec:01:c2:c7:14:8d:12:34:05:af:52:8e:1b:95:2f:b9:
f9:9e:be:b9:61:f8:b0:27:c3:04:23:ae:19:82:0b:7b:86:e7:
68:5c:8a:34:94:9a:87:55:07:a6:e6:2f:24:c0:48:65:8f:15:
5a:f8:f2:27:f0:cf:b0:1a:18:9b:c9:37:27:13:3e:fa:77:7c:
92:a3:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:53:47 2026 by rpki-client