
$ rpki-client -vvvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
File: A347F5D0945998093ADA03E9513EA096318126D4.mft (raw, json)
Hash identifier: 7PJsQ+rBauiZnGJbQSaiRPibol2tKfUBx1CZhESt6Ow=
Subject key identifier: 44:F9:D0:18:6C:11:1A:B6:A5:CE:0A:4F:34:76:91:DA:B8:FA:A5:01
Authority key identifier: A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4
Certificate issuer: /CN=A347F5D0945998093ADA03E9513EA096318126D4
Certificate serial: 7FF51C167F29E9B7C5A49BEBBD1940E5CE31DA65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
Manifest number: 02AA
Signing time: Sun 01 Nov 2026 11:29:48 +0000
Manifest this update: Sun 01 Nov 2026 11:24:48 +0000
Manifest next update: Mon 02 Nov 2026 11:58:48 +0000
Files and hashes: 1: 3138372e34392e3132382e302f32302d3332203d3e203238313435.roa (hash: /B5h8J5WH70tYWtuK0IA9qKNM671XPJcbpxjcw8HcD0=)
2: 323830343a64303a3a2f33322d313238203d3e203238313435.roa (hash: IU23CglAe2IfWNbX8YE6o8MlIrakcJNFYg6nvcZq+9g=)
3: A347F5D0945998093ADA03E9513EA096318126D4.crl (hash: IRwva4VpXGbnPD+FjIVMcrxFFfnCUa5CxpAQcmoY5C8=)
4: 3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa (hash: kTPr5opDH90biqNQRQmRsEKz6k3igd22M5z1/ezXxF8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl
rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f5:1c:16:7f:29:e9:b7:c5:a4:9b:eb:bd:19:40:e5:ce:31:da:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A347F5D0945998093ADA03E9513EA096318126D4
Validity
Not Before: Nov 1 11:24:48 2026 GMT
Not After : Nov 2 11:58:48 2026 GMT
Subject: CN=44F9D0186C111AB6A5CE0A4F347691DAB8FAA501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:26:a8:45:51:da:39:54:60:1e:7f:17:34:
6c:69:c3:76:ca:05:3b:0a:eb:bd:cc:f2:ac:e4:85:
9b:35:00:70:cc:46:f1:e2:b6:b6:3b:76:9b:0d:6b:
24:fe:93:a7:2d:dc:11:46:81:bd:1b:a5:f1:b6:f0:
35:bc:a0:93:8f:5a:75:17:f9:67:e5:a7:c1:cf:f5:
1b:29:87:fb:5a:4e:d4:a0:82:1a:bd:a3:a0:5e:4c:
3f:03:86:d7:7b:db:99:5a:e0:af:0a:ee:b9:3b:49:
5d:76:8c:53:29:b8:07:ff:cb:6c:a6:fb:93:4b:b8:
f4:07:3a:7f:7d:62:c6:7f:e3:c7:ff:6b:d8:7c:7c:
83:3c:56:e4:01:13:ff:98:a2:9d:c6:e2:60:7b:47:
aa:b6:a2:ae:74:84:a5:2c:3c:bd:72:2a:a0:cd:40:
bf:af:24:a6:6b:9d:04:f7:ab:cb:e7:ec:b4:d3:19:
7e:7e:73:6a:6c:f2:c4:ba:e9:93:4b:4e:8c:f5:56:
ac:6e:c4:98:80:b7:35:df:99:09:2d:57:f0:8f:d1:
6e:64:1d:b0:c8:64:d8:ad:db:30:d4:b9:93:b3:ff:
a7:ca:59:0b:a2:d8:dd:e0:1d:0b:19:1c:71:28:22:
ab:c5:48:ec:40:b0:4d:32:0f:80:63:2b:00:a2:bf:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:D0:18:6C:11:1A:B6:A5:CE:0A:4F:34:76:91:DA:B8:FA:A5:01
X509v3 Authority Key Identifier:
keyid:A3:47:F5:D0:94:59:98:09:3A:DA:03:E9:51:3E:A0:96:31:81:26:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A347F5D0945998093ADA03E9513EA096318126D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/A347F5D0945998093ADA03E9513EA096318126D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5a:d7:86:e4:c5:ee:1e:27:4f:28:eb:08:06:c4:d1:8d:77:
3b:4c:12:aa:bb:11:6b:01:71:e6:c3:c4:0c:1f:43:ef:9c:80:
ce:af:e0:6c:d9:67:89:21:9a:92:8e:0b:07:66:29:11:1d:a2:
9e:9c:e0:84:12:30:a0:77:2a:c3:e4:26:3a:f9:49:82:9a:67:
4d:18:53:ac:9e:5a:be:29:a6:74:81:65:0a:a8:26:d3:54:87:
e2:0b:ca:e4:6f:0d:ac:29:23:ca:32:aa:39:35:59:24:dc:89:
89:7d:18:86:96:a7:eb:19:a1:38:86:60:0d:bb:ac:50:d9:c6:
8f:2a:43:8a:80:f6:1e:76:d5:98:71:44:13:ff:46:d4:2e:54:
e5:28:5b:9b:e5:96:46:e0:bb:af:67:7b:89:3d:d5:f8:51:cb:
ef:af:29:f1:24:bf:b7:ae:7e:ab:c5:34:cb:10:05:00:14:86:
45:1d:ee:38:d7:ec:bb:35:2a:ad:35:af:14:b1:f6:e6:58:b3:
10:e7:12:f6:c9:dc:f3:ef:e7:c6:62:a2:a7:8a:fb:5e:2e:09:
12:b2:5c:95:1b:38:76:0c:e1:69:07:7f:d8:88:aa:db:1e:e4:
dc:9b:e1:26:ec:7c:ac:5c:02:fe:e7:e3:c2:aa:b5:a7:94:60:
28:6b:a4:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUf/UcFn8p6bfFpJvrvRlA5c4x2mUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0N0Y1RDA5NDU5OTgwOTNBREEwM0U5NTEzRUEwOTYz
MTgxMjZENDAeFw0yNjExMDExMTI0NDhaFw0yNjExMDIxMTU4NDhaMDMxMTAvBgNV
BAMTKDQ0RjlEMDE4NkMxMTFBQjZBNUNFMEE0RjM0NzY5MURBQjhGQUE1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEyaoRVHaOVRgHn8XNGxpw3bK
BTsK673M8qzkhZs1AHDMRvHitrY7dpsNayT+k6ct3BFGgb0bpfG28DW8oJOPWnUX
+Wflp8HP9Rsph/taTtSgghq9o6BeTD8Dhtd725la4K8K7rk7SV12jFMpuAf/y2ym
+5NLuPQHOn99YsZ/48f/a9h8fIM8VuQBE/+Yop3G4mB7R6q2oq50hKUsPL1yKqDN
QL+vJKZrnQT3q8vn7LTTGX5+c2ps8sS66ZNLToz1VqxuxJiAtzXfmQktV/CP0W5k
HbDIZNit2zDUuZOz/6fKWQui2N3gHQsZHHEoIqvFSOxAsE0yD4BjKwCiv+qlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQURPnQGGwRGralzgpPNHaR2rj6pQEwHwYDVR0j
BBgwFoAUo0f10JRZmAk62gPpUT6gljGBJtQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx
RVUvMC9BMzQ3RjVEMDk0NTk5ODA5M0FEQTAzRTk1MTNFQTA5NjMxODEyNkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNDdGNUQwOTQ1OTk4MDkz
QURBMDNFOTUxM0VBMDk2MzE4MTI2RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wxRVUvMC9B
MzQ3RjVEMDk0NTk5ODA5M0FEQTAzRTk1MTNFQTA5NjMxODEyNkQ0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc1rXhuTF7h4nTyjrCAbE0Y13O0wSqrsRawFx5sPEDB9D75yAzq/gbNlniSGa
ko4LB2YpER2inpzghBIwoHcqw+QmOvlJgppnTRhTrJ5avimmdIFlCqgm01SH4gvK
5G8NrCkjyjKqOTVZJNyJiX0Yhpan6xmhOIZgDbusUNnGjypDioD2HnbVmHFEE/9G
1C5U5Shbm+WWRuC7r2d7iT3V+FHL768p8SS/t65+q8U0yxAFABSGRR3uONfsuzUq
rTWvFLH25lizEOcS9snc8+/nxmKip4r7Xi4JErJclRs4dgzhaQd/2Iiq2x7k3Jvh
Jux8rFwC/ufjwqq1p5RgKGuktQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:11:52 2026 by rpki-client