
$ rpki-client -vvf rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft
File: 1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft (raw, json)
Hash identifier: sKd3h+2YEo6VnWotMyMNFHyQfRRSDKFf1ZSxo+Xt4S4=
Subject key identifier: A3:52:D6:BF:83:5B:EC:75:BE:2C:5A:E3:67:64:04:F1:6C:43:DC:38
Authority key identifier: 1A:68:16:C5:4D:1F:DA:C4:3B:44:10:11:43:3C:C5:9E:3B:CB:36:48
Certificate issuer: /CN=1A6816C54D1FDAC43B441011433CC59E3BCB3648
Certificate serial: 19A02CDAAF40F711313F468350D2547508DECE94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
Subject info access: rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft
Manifest number: 0217
Signing time: Sat 01 Nov 2025 20:50:22 +0000
Manifest this update: Sat 01 Nov 2025 20:45:22 +0000
Manifest next update: Sun 02 Nov 2025 21:05:22 +0000
Files and hashes: 1: 1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl (hash: wveZAvWd24sIwpghJGR8Yzgd1VWuCzQjDVL6tsw7V+Y=)
2: 3139302e38392e36382e302f32322d3234203d3e203136393231.roa (hash: aCmNFHu7ksiBPs3NA2jkRR3B1X7zIvDdtuB0fEJQkWA=)
3: 323830343a366163343a3a2f33322d3438203d3e203136393231.roa (hash: wwcikqASDX4qnHm8bhRNER/B+c4Ye0D8AxPC4HxQiuE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl
rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 02 Nov 2025 21:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a0:2c:da:af:40:f7:11:31:3f:46:83:50:d2:54:75:08:de:ce:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A6816C54D1FDAC43B441011433CC59E3BCB3648
Validity
Not Before: Nov 1 20:45:22 2025 GMT
Not After : Nov 2 21:05:22 2025 GMT
Subject: CN=A352D6BF835BEC75BE2C5AE3676404F16C43DC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a5:c6:f4:3f:9d:f3:1e:f9:43:d2:e4:01:27:
a5:73:d9:77:55:c8:5c:db:65:0e:e1:61:81:b4:ac:
b3:26:59:84:a2:ae:54:45:b6:cf:7a:20:77:34:5c:
d0:8b:a5:9e:da:e2:50:c5:9a:34:e4:09:3b:fe:9c:
8a:a4:8b:d8:e4:66:f2:c8:79:a9:3a:37:bf:b0:98:
5a:82:77:da:43:f4:13:4d:52:ab:56:6e:13:7b:05:
a6:4e:fb:94:b4:ac:a6:6a:62:bd:44:f5:17:3e:b3:
23:dc:c2:5c:02:00:d3:ab:91:cd:a8:e2:17:58:9e:
ac:19:0e:7c:7f:e1:9f:26:b8:bc:4d:50:b6:27:96:
f4:8b:7b:71:fc:ef:7a:83:c8:67:19:7c:ec:53:ef:
79:d5:50:bf:35:6e:ec:6c:8c:4c:10:5a:9e:b0:81:
34:72:0c:fc:36:ec:ab:84:bc:50:e9:6e:c8:7f:41:
ca:2d:0c:db:78:0c:9d:6e:05:bb:7b:19:ab:5e:b1:
3f:34:bc:f3:c8:c4:79:8a:38:cb:45:07:cd:f5:20:
26:b2:ef:87:87:f4:60:f4:1d:0c:a7:50:a0:e8:1f:
45:98:12:ff:fb:66:69:0b:28:fe:51:53:b5:c0:71:
f3:0a:15:eb:c1:f1:29:e4:44:a0:ef:65:45:e9:15:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:D6:BF:83:5B:EC:75:BE:2C:5A:E3:67:64:04:F1:6C:43:DC:38
X509v3 Authority Key Identifier:
keyid:1A:68:16:C5:4D:1F:DA:C4:3B:44:10:11:43:3C:C5:9E:3B:CB:36:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A6816C54D1FDAC43B441011433CC59E3BCB3648.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/1A6816C54D1FDAC43B441011433CC59E3BCB3648.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c4:f2:7e:e5:c4:17:c3:58:23:77:80:a2:11:39:d2:13:3d:
71:d5:31:a3:8a:5d:11:29:e8:da:e3:7e:12:b1:06:a9:c7:87:
95:d0:c4:fc:10:18:f3:e6:a9:81:8e:f2:f4:9e:8e:c5:6c:30:
ca:22:cc:0b:fc:32:d6:44:c3:59:d5:89:d2:fb:a1:55:80:aa:
3d:ee:fc:c4:c3:f9:ad:95:d0:45:c1:0c:a2:c8:eb:01:c3:37:
47:cc:7e:c2:5e:e2:ba:41:64:db:f7:05:88:74:91:9b:c3:09:
cd:00:da:e3:3b:92:8b:02:34:27:b7:92:ec:f5:6b:ba:db:0f:
e9:6f:e8:de:6c:43:b9:00:cc:49:0b:89:de:35:bb:06:91:40:
f8:76:29:c2:8a:57:21:2e:fc:0b:bb:7a:25:fb:0c:d1:20:21:
d8:2e:fd:e3:df:47:9f:e0:a1:d5:86:7a:3b:4c:61:21:2d:d2:
7c:80:bf:3a:a6:b3:9a:8e:86:63:23:52:82:31:a2:ce:3a:4a:
37:12:4b:6b:c4:0c:2e:34:1a:e0:0d:65:5b:37:a4:22:25:b7:
55:f3:8c:32:fd:ee:09:66:df:79:67:7e:8c:51:3b:3c:28:a5:
c0:77:b0:dd:0a:51:42:a7:da:5c:1f:da:05:08:18:f9:13:e2:
81:7d:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 11:01:41 2025 by rpki-client