
$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
File: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json)
Hash identifier: 6bmfVJfkeVzz5crkpXJk9CiHvV77Q/qnzSX6cCDX25s=
Subject key identifier: 4A:C4:FC:41:8C:45:55:8D:93:EA:A5:25:FA:AE:47:A7:D5:5E:D1:06
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Certificate issuer: /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial: 4C7757E8C1584AD9224D343CFA3F4E94539F18B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
Manifest number: 0191
Signing time: Thu 06 Nov 2025 03:28:02 +0000
Manifest this update: Thu 06 Nov 2025 03:23:02 +0000
Manifest next update: Fri 07 Nov 2025 07:04:02 +0000
Files and hashes: 1: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: 35WEcEG3QWk/zVJzYYzvfaiposzmcV1hcfKo2NLYw2E=)
2: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: GbA2kBjS683IcP7ucOemmYDbK74GZ3EovG0kf6ibTSA=)
3: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: dnueVLcMDgoZGxfW5fVwhKVaVsjCcpgjMDDR39mpiEg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 07 Nov 2025 07:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:77:57:e8:c1:58:4a:d9:22:4d:34:3c:fa:3f:4e:94:53:9f:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Validity
Not Before: Nov 6 03:23:02 2025 GMT
Not After : Nov 7 07:04:02 2025 GMT
Subject: CN=4AC4FC418C45558D93EAA525FAAE47A7D55ED106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:d7:39:4e:58:77:c4:45:75:d3:93:f0:cf:
f4:14:8e:34:92:35:91:f9:50:c0:18:e8:a2:b1:a5:
4d:3d:64:7f:e4:60:44:31:a9:72:c7:f2:21:b3:53:
05:37:1e:72:89:e2:7c:81:f8:93:ec:30:36:d4:38:
84:91:95:cf:32:27:5d:c2:42:0e:9b:7e:97:a5:58:
e3:0f:c3:4f:bd:3f:8e:dc:80:0a:29:8c:86:37:90:
2e:66:62:83:1b:21:f5:fc:21:a1:86:75:b6:84:ed:
1f:ea:4f:a6:3f:b1:dc:c7:e2:10:e6:82:56:58:e2:
89:d8:6b:3f:d4:fa:ba:fa:59:bd:9d:02:7f:5f:4f:
c2:9f:1d:39:86:5d:58:a9:c7:1b:5a:d1:be:40:b9:
8d:54:d1:9d:8e:64:d7:8a:33:37:85:ce:3c:18:d9:
28:7b:84:23:c4:a5:9b:af:62:ce:34:ba:ce:2a:05:
0a:8c:70:d6:01:21:7f:d9:50:59:e9:44:90:f0:30:
a3:f8:ef:88:25:cf:8d:94:74:d5:c4:a5:36:95:c9:
a4:28:e8:2c:8c:f3:d5:e9:60:98:1f:8f:9c:63:19:
d9:d1:22:89:d1:0f:33:0a:0d:f0:16:bd:18:94:3e:
d9:51:d0:15:3d:c9:68:18:2a:2e:60:96:88:05:b5:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:FC:41:8C:45:55:8D:93:EA:A5:25:FA:AE:47:A7:D5:5E:D1:06
X509v3 Authority Key Identifier:
keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:51:2f:e3:20:15:90:91:89:4e:74:bd:ac:f6:f5:48:47:b7:
25:b1:fc:e0:55:4b:d4:79:f7:df:86:ea:9d:8d:04:ec:36:b5:
26:01:8e:fb:49:87:5e:67:5d:86:1d:78:ad:26:50:52:30:3d:
8d:92:0e:05:35:a0:c1:32:33:48:78:20:d3:85:84:2f:1d:b9:
a7:26:06:c5:74:d9:c3:6a:2c:08:27:9e:80:77:3d:d9:b7:70:
fd:06:e6:e1:a0:33:53:c8:11:69:76:e5:85:40:8a:0f:f2:98:
69:6f:26:ea:fc:ce:bc:dc:d8:d2:bc:8c:13:1b:b1:63:1b:9f:
3e:7a:f2:2e:f2:a4:b2:03:c5:09:e0:96:21:23:8e:62:8f:f4:
7a:b9:33:d3:c2:0f:c5:91:75:fd:df:10:c6:86:13:e1:96:fd:
2c:60:41:f6:6e:82:64:fc:82:5d:e1:6e:28:f2:b0:c3:82:d4:
d8:2a:95:1a:03:85:f6:74:30:e4:f9:d0:b4:f5:88:ac:4c:91:
34:48:84:15:43:3f:3b:d9:b8:1c:d5:d3:26:e3:6a:c3:41:d9:
f8:87:47:d2:13:10:0c:79:00:87:d1:a6:38:f8:67:ae:52:d3:
9b:cd:7d:67:39:08:6e:d5:ba:f4:0e:5c:58:6b:7c:38:b4:a1:
d5:01:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:35:20 2025 by rpki-client