
$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
File: 020AFECF727CE88A459FCBC17D694507CE9ADE22.mft (raw, json)
Hash identifier: I56uJ5IrRBX40WdePc9NNXjJkkIEV0SK+FvwH4cRNTk=
Subject key identifier: CC:9D:2D:0D:E1:B2:CF:6C:2D:16:E0:39:9F:E8:DD:A4:7F:11:9B:EC
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Certificate issuer: /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial: 1079763BCCECC465B785C8DA31539AE63D236C66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
Manifest number: 0289
Signing time: Fri 17 Apr 2026 13:33:54 +0000
Manifest this update: Fri 17 Apr 2026 13:28:54 +0000
Manifest next update: Sat 18 Apr 2026 15:36:54 +0000
Files and hashes: 1: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: JSrN2QrOp4mvWs4tfdMlhACA5kJW39lUGtJvvCvm+W0=)
2: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: VGZMBxywOT6eMn/obggfUBg48R1BMRQHc1qiRhOgaq4=)
3: 020AFECF727CE88A459FCBC17D694507CE9ADE22.crl (hash: sNeXt+s85KMDy4BZuy+xvZDTHyExh76vUi6hc0mu+vo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 15:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:79:76:3b:cc:ec:c4:65:b7:85:c8:da:31:53:9a:e6:3d:23:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Validity
Not Before: Apr 17 13:28:54 2026 GMT
Not After : Apr 18 15:36:54 2026 GMT
Subject: CN=CC9D2D0DE1B2CF6C2D16E0399FE8DDA47F119BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:dc:2c:5d:cd:15:d9:22:b6:76:73:90:e3:
25:a9:85:aa:ec:12:fb:16:41:f9:62:0d:97:eb:94:
b9:57:3a:ba:df:96:9b:04:e0:c8:68:18:56:fe:97:
94:37:67:c5:79:d7:4b:6f:1c:fd:35:de:19:ee:ad:
9b:aa:cd:b9:fc:b4:dc:02:58:66:9d:73:77:43:ae:
42:0b:23:9c:47:57:b4:a3:94:ea:7c:88:cb:a5:8b:
37:75:e4:f9:36:31:d7:1a:da:2d:a7:04:59:48:84:
82:41:9f:cd:fe:0b:39:da:af:fb:e5:2f:c7:4f:ac:
35:f2:03:16:88:e3:68:8f:33:e2:15:d8:8c:bc:64:
c6:ea:90:41:df:2d:22:1e:41:72:2c:ac:ef:11:c4:
ea:1d:eb:05:87:a9:52:c0:53:f2:35:29:26:ee:e0:
7d:cc:d9:c2:3e:ea:d2:09:4f:7c:a5:d3:5a:9a:86:
6a:63:b1:ce:7e:2c:05:bb:5e:03:0f:78:ef:c1:95:
d8:1a:d5:4c:e0:a9:53:e3:75:45:e5:9d:2a:d8:96:
16:57:58:1d:ba:3a:f1:06:71:39:cb:80:13:9c:71:
06:77:5a:b2:b6:1c:e1:f1:53:24:af:9c:db:dc:66:
5c:58:dd:6e:9b:28:ec:61:f6:cf:96:71:2e:13:f0:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:2D:0D:E1:B2:CF:6C:2D:16:E0:39:9F:E8:DD:A4:7F:11:9B:EC
X509v3 Authority Key Identifier:
keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5a:5e:ec:b6:af:9c:3c:34:bd:1b:3d:5b:9e:6d:af:95:4a:
d7:41:3d:d9:e6:e5:3f:18:e4:76:ab:a2:75:e3:80:87:ef:f3:
76:15:2b:f7:36:e6:de:4d:fc:71:ad:0d:5a:c3:8d:ff:52:89:
5f:69:70:c5:82:bd:6e:60:06:bf:0e:d4:c4:4d:d5:16:7b:71:
5f:cd:ad:bd:6e:08:94:a3:94:bb:19:ea:38:48:7c:5a:34:5c:
62:52:ef:16:ad:e0:e0:4f:eb:d5:66:18:f1:24:fb:1c:09:59:
72:77:b3:73:03:aa:1c:ed:c8:9e:a5:01:8b:69:f9:13:e6:64:
df:b6:08:08:af:f6:e5:53:ec:d9:12:5e:d8:9e:91:96:16:62:
bd:ea:44:a7:20:4a:a2:4c:15:3c:97:a3:37:61:eb:0e:e5:58:
f0:7c:d5:c3:0e:7a:ee:ee:ea:f1:fa:17:93:3b:4f:e5:8f:06:
f9:f0:2b:8f:35:c3:d7:e8:b0:ac:9f:c7:72:67:da:f4:d6:12:
33:95:2d:9f:0d:bf:49:34:3b:e0:7a:db:a6:de:4c:e4:f3:5d:
f9:39:3c:65:0a:f5:23:af:41:ce:ed:50:94:1d:7c:7c:54:fc:
f1:3d:13:4e:dc:81:c7:95:da:28:13:14:be:fe:61:f4:b4:9e:
88:69:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:19 2026 by rpki-client