
$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
File: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft (raw, json)
Hash identifier: EKQuhuua0ZHKwc7qquuQs+S6KiCtJfDXVyuVulZchyU=
Subject key identifier: 58:02:9A:FD:AB:5F:E3:E9:D2:63:CC:B3:C8:B4:4B:D2:5B:02:0C:37
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Certificate issuer: /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial: 1AD481A2EBBBDD46FBDDB14FAF394833DC6AD8E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
Manifest number: 0109
Signing time: Sun 02 Nov 2025 20:36:32 +0000
Manifest this update: Sun 02 Nov 2025 20:31:32 +0000
Manifest next update: Mon 03 Nov 2025 20:37:32 +0000
Files and hashes: 1: 1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl (hash: smJO9iAacFmVNY2kSC/IKr1iY0wVEf7145Qkc+YjZFw=)
2: 3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (hash: L29rQu6A2D/GRscHMRxgKff1Mj4otpbS7jgvNTfbqrM=)
3: 3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (hash: mEuK5L8cqAFP2ipXml/u6wiIus3ycpeZ8oNcV0ag2qo=)
4: 3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (hash: VeR/O+9Gf+ayE3m4Vl1nJkDnw89kGLb98SbW5qArQ/c=)
5: 323830343a323935343a3a2f33322d3332203d3e20323634303039.roa (hash: ZirqTWq7d7/lwQgHJx1DD+FiioGP1qk31ScfgX+AtN4=)
6: 3136382e3232372e3133322e302f32322d3234203d3e20323634303039.roa (hash: hVKZtPo2uOTvKf5GK1oLTTBexTI84WAT9zQJ3UV58/E=)
7: 3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (hash: 1opYPtLVmJbgysJRSAW69AB3hcLNgtJAvVFzTTA/ISk=)
8: 3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (hash: afJLR8PlUzFskdzVHFBs/+9++T5DKH+kQFl0KIelOiE=)
9: 3134332e302e3134302e302f32342d3234203d3e20323634303039.roa (hash: ADREfT9MheCE1Wjv94Tw9CnUHlS1l0PQ8XXqstyqAiQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d4:81:a2:eb:bb:dd:46:fb:dd:b1:4f:af:39:48:33:dc:6a:d8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Validity
Not Before: Nov 2 20:31:32 2025 GMT
Not After : Nov 3 20:37:32 2025 GMT
Subject: CN=58029AFDAB5FE3E9D263CCB3C8B44BD25B020C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:77:a0:ca:39:4b:60:71:9f:9d:73:ab:58:
28:31:a4:bd:12:32:95:19:31:9d:7a:91:67:61:41:
11:98:44:e9:ff:6c:9a:f3:f8:ae:16:be:d8:12:b5:
c7:3f:76:fd:ed:d3:78:c3:96:4a:b3:bd:37:c7:72:
e0:4e:a5:90:09:17:88:ec:4d:12:bf:4a:41:9b:b9:
c6:23:df:78:e1:22:18:52:d4:97:9a:74:0f:04:0d:
d6:3c:d2:60:01:08:8f:c8:ee:44:84:af:f7:ef:96:
01:f3:17:b8:07:57:21:cb:88:d1:e5:18:e7:53:db:
2f:55:bd:2c:b4:7a:e8:94:41:df:4e:39:3a:47:f4:
4b:1c:b9:3a:b6:7c:7f:a4:29:73:e3:20:db:4a:83:
f9:5b:04:a4:7b:43:68:b3:a7:bd:86:18:86:5f:cd:
27:8f:ee:4d:ca:3f:08:aa:b4:21:54:b9:5d:b4:86:
cc:ec:dc:01:9b:14:af:4a:af:4a:90:13:ec:53:48:
74:be:66:d1:bf:31:0d:db:ef:e6:2d:62:19:77:14:
4b:d8:bd:9a:52:14:f8:9d:72:d3:d0:97:7e:bb:4d:
59:3b:50:75:2d:2f:16:bc:fd:42:9b:6d:9e:2f:ff:
33:07:93:fe:9b:ee:be:df:ed:97:96:8a:d7:18:ab:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:9A:FD:AB:5F:E3:E9:D2:63:CC:B3:C8:B4:4B:D2:5B:02:0C:37
X509v3 Authority Key Identifier:
keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:af:1c:8a:e3:ad:a0:fe:ca:1e:a3:17:65:7c:e6:8a:5d:a1:
d0:96:04:5f:46:b2:16:1e:8d:8b:08:c5:84:cc:26:de:d1:a5:
a2:31:a0:b9:72:a1:69:8b:09:9f:a0:82:cf:ef:58:00:11:99:
da:96:59:d7:0f:5c:12:65:7b:58:76:83:11:1e:d3:b6:a1:54:
20:11:0b:56:24:bc:08:bd:b2:39:6a:4e:af:26:01:db:2d:c9:
99:3c:ae:7f:27:23:36:f8:e6:1f:cc:a0:5a:29:73:75:4a:d2:
11:44:82:1d:c3:64:41:8c:5e:b5:16:a7:ad:89:92:30:7b:92:
39:17:1f:ab:f0:2f:d6:80:6b:8b:84:af:e5:39:c4:70:e3:c7:
b2:93:41:d7:5a:43:b2:4f:8f:0d:99:24:69:63:13:2f:1b:78:
2a:6f:b4:ec:de:dd:d2:74:4f:ea:9b:8d:98:0b:31:0a:b5:47:
b7:27:15:63:e6:7b:ff:9e:24:48:21:40:b8:79:3b:e3:24:22:
0f:08:9f:2d:ff:0c:9a:c0:00:a2:5a:d1:16:91:06:a3:49:1a:
d2:da:98:ea:31:49:2d:f0:28:76:32:08:1d:87:3a:d2:6b:fd:
ef:5b:8f:0c:b2:36:4d:a4:0a:eb:09:0c:bf:49:33:4f:65:1b:
fd:d4:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:09 2025 by rpki-client