
$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft
File: AFCF347C2BC075F096BD454BE695B3295D26490B.mft (raw, json)
Hash identifier: 99KF44zFIByqriiOHafsbh7Ao2gtm5VDH0vMP0dFzJ4=
Subject key identifier: 4D:82:47:CC:1E:4B:8D:6A:16:1D:92:D2:87:24:3C:30:9D:66:84:B8
Authority key identifier: AF:CF:34:7C:2B:C0:75:F0:96:BD:45:4B:E6:95:B3:29:5D:26:49:0B
Certificate issuer: /CN=AFCF347C2BC075F096BD454BE695B3295D26490B
Certificate serial: 60CCCC5BCB455CDF48772494AA0835DB0F7E8362
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCF347C2BC075F096BD454BE695B3295D26490B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft
Manifest number: 0D
Signing time: Tue 04 Nov 2025 22:40:29 +0000
Manifest this update: Tue 04 Nov 2025 22:35:29 +0000
Manifest next update: Wed 05 Nov 2025 23:03:29 +0000
Files and hashes: 1: 34352e3136332e3134382e302f32322d3332203d3e20323638353630.roa (hash: r8lr8GNDAk1GVlP419VdfS7t17B7E2hIsrCHwW3f/OA=)
2: 323830343a353330633a3a2f33322d313238203d3e20323638353630.roa (hash: jvS4o81q2KXHANuKmFeQbZrp+3iRXf+KD7u+AIwdIqE=)
3: AFCF347C2BC075F096BD454BE695B3295D26490B.crl (hash: H7cfTmNcXkUMG573zYRH7qzo3cpva13giP5We2fpZx8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.crl
rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCF347C2BC075F096BD454BE695B3295D26490B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:cc:cc:5b:cb:45:5c:df:48:77:24:94:aa:08:35:db:0f:7e:83:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCF347C2BC075F096BD454BE695B3295D26490B
Validity
Not Before: Nov 4 22:35:29 2025 GMT
Not After : Nov 5 23:03:29 2025 GMT
Subject: CN=4D8247CC1E4B8D6A161D92D287243C309D6684B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:10:b3:d8:88:13:e7:94:1c:ce:94:b5:49:
ba:30:f1:38:96:85:10:f8:e2:f1:03:d7:ca:f6:e0:
25:69:be:1a:ed:82:e5:5f:1f:23:5a:9f:60:97:a6:
4a:6a:81:ff:31:d2:29:b2:e5:7c:94:f7:f2:ff:5c:
16:f6:89:65:fc:97:7f:69:c7:af:a0:82:cc:59:db:
7d:f1:b5:94:1e:c4:c6:13:9e:a3:71:ad:40:b6:36:
18:43:b4:59:ce:39:ae:31:97:ee:72:2e:d3:4d:fe:
a0:76:dd:fd:7c:c7:7c:1a:a9:20:a3:80:51:32:e5:
06:b0:96:55:a9:83:f2:6a:c8:7d:b3:eb:06:39:61:
59:f8:1f:42:cc:95:26:2f:ff:73:c4:3c:04:4c:f0:
7d:69:94:7b:2a:d0:d3:98:6d:c9:a5:6e:e5:4a:25:
fe:31:36:b0:fb:e2:e3:a0:37:0b:c5:0b:38:f8:e2:
0a:5c:5e:04:63:13:e6:ce:d5:21:bd:52:e7:c5:ab:
46:12:b8:43:b6:2a:c2:ed:f2:aa:08:81:ca:7c:6b:
15:ea:51:74:87:25:5b:14:69:59:e1:ac:78:96:eb:
ba:f6:ea:ea:b8:d5:e7:ff:e1:cf:44:d8:31:c5:ed:
34:3f:93:2c:09:8f:95:c3:be:05:76:d4:84:09:16:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:47:CC:1E:4B:8D:6A:16:1D:92:D2:87:24:3C:30:9D:66:84:B8
X509v3 Authority Key Identifier:
keyid:AF:CF:34:7C:2B:C0:75:F0:96:BD:45:4B:E6:95:B3:29:5D:26:49:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCF347C2BC075F096BD454BE695B3295D26490B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:78:75:1f:9d:5d:6b:a5:e0:23:ce:96:ae:c7:79:1f:d4:a6:
07:dc:f0:82:3c:a7:7c:04:e4:8a:3b:e6:60:48:3b:7c:07:24:
5e:c4:bb:23:59:cb:d2:1d:33:b5:72:83:01:86:8d:d2:fc:fc:
3f:74:55:88:1c:64:a4:52:4f:44:2b:28:df:73:64:e7:dc:b2:
43:6d:00:1a:6e:82:0a:15:57:f9:92:fa:98:ae:3b:b0:62:a5:
1f:d8:68:46:fc:e7:27:8f:5e:7f:70:b6:f4:21:a0:a0:24:1c:
8f:7d:9c:71:03:c1:1b:33:14:78:a5:c5:d3:5e:1e:bb:b9:24:
fc:68:a7:66:94:f4:60:33:ed:c1:78:61:03:7e:cd:57:ea:63:
0c:f2:71:66:08:02:e2:f9:e0:97:7a:51:50:c2:a7:91:c5:5d:
c6:07:6c:e3:74:41:d9:c0:a1:35:98:93:60:0d:09:1d:a7:4b:
24:e0:b1:44:e2:54:2e:58:2f:f7:5d:7c:89:ea:38:7a:13:1e:
60:07:24:78:98:a0:50:5b:a0:9a:41:9f:f0:ea:87:b1:08:18:
c2:09:e3:9f:a4:64:ac:bf:a2:7e:48:c1:e3:0c:3c:ff:17:d4:
26:a8:00:42:d0:26:38:89:97:3d:06:ae:da:e9:fa:fa:bd:63:
1d:6e:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:36:56 2025 by rpki-client