
$ rpki-client -vvvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
File: AFA74B8940D555F399B41099771795949DA233E0.mft (raw, json)
Hash identifier: W33dod9TGdx4h2/ZTS2T/9RSjaYIhLFpiRT6PNxh+/c=
Subject key identifier: 34:6D:8A:BF:E4:11:83:8B:84:A6:1A:4D:10:D1:29:69:D6:76:60:3C
Authority key identifier: AF:A7:4B:89:40:D5:55:F3:99:B4:10:99:77:17:95:94:9D:A2:33:E0
Certificate issuer: /CN=AFA74B8940D555F399B41099771795949DA233E0
Certificate serial: 50A8E9EAFAD1EA24C840505CDA78E227D401747B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
Manifest number: 56
Signing time: Tue 20 Oct 2026 00:14:37 +0000
Manifest this update: Tue 20 Oct 2026 00:09:37 +0000
Manifest next update: Wed 21 Oct 2026 00:47:37 +0000
Files and hashes: 1: 3137372e39322e3132382e302f32312d3234203d3e20323633313038.roa (hash: rOQXkNqOxOsFwA5H/SxDz6/MPneGG0Cd7Z9sz5I5wT4=)
2: 323830343a313665633a3a2f33322d3438203d3e20323633313038.roa (hash: R/muZr5DmfLNNYdD+6yuxTjCheLLLH587vZflqyYdvY=)
3: AFA74B8940D555F399B41099771795949DA233E0.crl (hash: im3M3oaigeyEyFUoVMbyxWgJI4BKYbEjO8YU8MQKLBs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.crl
rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 21 Oct 2026 00:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a8:e9:ea:fa:d1:ea:24:c8:40:50:5c:da:78:e2:27:d4:01:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA74B8940D555F399B41099771795949DA233E0
Validity
Not Before: Oct 20 00:09:37 2026 GMT
Not After : Oct 21 00:47:37 2026 GMT
Subject: CN=346D8ABFE411838B84A61A4D10D12969D676603C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:e9:52:ad:8a:2b:cd:a9:6e:4a:ef:16:00:
bb:a9:09:2e:4d:a2:1b:39:0e:f2:c1:82:b3:0e:3d:
0d:09:fc:b8:31:27:9f:c7:5d:d1:aa:22:ab:b5:73:
da:fe:0c:9e:bb:06:24:f7:1f:8c:1a:ed:ae:95:21:
e9:0e:09:72:45:7e:da:87:f6:74:d1:e1:f0:36:e7:
e9:43:d1:5f:3b:db:f8:3b:ef:07:5b:b2:7e:f1:e2:
20:fa:79:2f:23:58:d2:f2:b2:53:f6:a7:e7:20:97:
55:ac:19:36:12:ea:45:ee:48:22:13:67:56:46:ab:
93:72:77:57:b1:25:ef:3c:6c:27:05:aa:c3:53:a6:
73:bb:03:1d:21:19:7c:30:ad:9a:5c:18:3f:56:60:
7c:e6:bc:89:c4:89:dd:07:7a:33:c9:17:50:f0:0e:
76:4a:46:0e:f1:42:ee:34:18:b5:e0:86:8b:95:8d:
56:7a:5a:5b:65:ee:63:8f:f9:32:57:39:93:46:81:
5e:a0:67:51:5d:04:7f:6d:05:3f:8a:db:03:f0:93:
18:3f:82:e1:ef:1c:8b:70:9e:d0:d1:55:66:c6:53:
78:a2:7d:23:3e:ff:1a:dd:ce:e8:b0:e7:1f:b1:9d:
7d:4d:b6:89:83:2d:1e:78:d2:4c:1c:43:52:dd:89:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:8A:BF:E4:11:83:8B:84:A6:1A:4D:10:D1:29:69:D6:76:60:3C
X509v3 Authority Key Identifier:
keyid:AF:A7:4B:89:40:D5:55:F3:99:B4:10:99:77:17:95:94:9D:A2:33:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:83:e5:e7:db:2c:03:d7:66:cc:88:4d:b8:9c:ac:35:dd:2d:
9d:b4:6b:c8:aa:0b:d3:6c:23:d0:f5:2e:fa:21:e3:95:d8:ca:
27:5d:5e:36:0c:c2:74:a7:8f:92:4a:8a:91:ae:b7:99:d0:cd:
52:16:5a:1f:72:32:61:a2:01:0c:1f:ff:71:15:5e:ad:e6:bc:
41:90:47:17:dd:bf:a2:5b:cb:06:47:0a:d8:d1:07:ce:f7:13:
46:35:4d:07:fd:ae:e4:48:f8:fe:b4:81:c2:d3:69:58:ac:9e:
6a:a1:76:59:a3:a3:01:a9:dc:d1:f9:f2:a3:7d:f5:82:a3:cc:
86:f8:a9:4b:a7:43:24:b8:e5:57:30:2a:c6:46:f0:62:fc:2b:
04:6f:4b:29:56:5a:77:ed:7f:85:18:06:16:85:f7:ce:75:e3:
9c:24:ae:61:6e:a6:0c:f4:9b:e7:0e:9b:60:3b:03:e8:cc:04:
07:7b:d9:00:db:1c:57:d9:b2:42:09:58:cb:44:b7:0f:fb:0b:
84:08:0e:36:da:c1:e0:0d:ff:34:8a:b7:0d:5f:2a:a5:b8:cc:
d7:6d:25:b7:5a:ff:c3:00:f6:72:39:95:ab:ae:2e:0e:2e:be:
91:44:c2:48:6e:ed:89:3b:94:bf:5d:08:7e:75:cc:f7:bc:08:
4b:2f:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:26:40 2026 by rpki-client