
$ rpki-client -vvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
File: D2986464325E8FD5DF10CBFA8DD303EF12449774.mft (raw, json)
Hash identifier: reVe3CYO511NGkDZr44rO3NOCaikRVSIF252zo5XuTw=
Subject key identifier: 5C:D4:90:B1:E0:C3:18:54:B1:C4:83:79:58:37:7D:D7:25:0F:04:7F
Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Certificate issuer: /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Certificate serial: 02D7A8C01B7DDF82843137FC7E828D7D0461CF7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
Manifest number: 0305
Signing time: Sun 02 Nov 2025 16:24:20 +0000
Manifest this update: Sun 02 Nov 2025 16:19:20 +0000
Manifest next update: Mon 03 Nov 2025 20:04:20 +0000
Files and hashes: 1: 323830343a343439343a3a2f33322d3438203d3e20323637363430.roa (hash: h4ltmqTQTgqgbL5osFBqlAp89sJTKhfTS18W1+8QvGw=)
2: D2986464325E8FD5DF10CBFA8DD303EF12449774.crl (hash: u1aDAGIxh/z8A7DIej80BdHKBc61MfqoN0BmM2I5RnQ=)
3: 34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (hash: 9rfSn4F2icHY0qkDkAbvjL4I+Ay9NbaG0pVo2oS6Vuk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d7:a8:c0:1b:7d:df:82:84:31:37:fc:7e:82:8d:7d:04:61:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Validity
Not Before: Nov 2 16:19:20 2025 GMT
Not After : Nov 3 20:04:20 2025 GMT
Subject: CN=5CD490B1E0C31854B1C4837958377DD7250F047F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:22:b1:65:d2:72:10:df:e7:eb:ef:dc:43:
7a:e9:6a:7e:e5:a2:8f:ee:7e:e2:49:a1:5e:c7:09:
d8:95:af:68:63:23:c3:2c:14:4b:cb:f1:e8:72:41:
6d:c4:ef:5d:1a:48:51:20:40:73:87:49:57:1d:95:
e4:0f:73:84:d0:b0:53:e5:a1:f1:30:4d:21:06:3d:
79:fa:b3:4f:51:9e:3a:5a:4e:15:4d:8a:50:45:9d:
52:d6:0d:98:e5:17:14:f3:e2:44:52:08:c8:a2:be:
30:3f:fc:10:82:5c:be:9b:56:f8:8c:85:30:24:86:
9c:f4:c3:8c:e0:8f:ef:4a:b0:82:76:70:5f:91:11:
20:0e:2f:48:9d:96:03:24:0d:81:9e:7d:8d:04:07:
48:a9:58:05:4d:87:7a:e2:3a:4d:1a:15:79:74:97:
7e:d6:ab:04:f9:79:9c:cb:8d:0e:86:18:05:f3:86:
65:cc:ed:59:84:4a:d4:57:1d:72:9b:86:ee:ba:ae:
c4:b7:6d:8a:5a:c2:af:35:92:13:47:ce:f6:ca:1e:
66:a0:29:7d:15:ba:ac:65:57:a1:80:15:d4:a8:04:
6e:12:8f:c1:ab:fc:f3:03:c2:29:8f:24:d4:ee:a0:
35:83:84:7a:9e:eb:b0:41:98:49:20:05:e1:92:94:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:90:B1:E0:C3:18:54:B1:C4:83:79:58:37:7D:D7:25:0F:04:7F
X509v3 Authority Key Identifier:
keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:f6:30:ff:58:c2:5a:29:dc:ac:be:cd:74:24:62:3a:41:
f3:cd:92:28:e0:67:59:82:7b:b8:67:3c:09:29:89:f8:b4:84:
e6:08:7a:58:36:79:0c:78:40:39:36:4d:3b:9d:14:6e:f5:cc:
99:c6:3b:98:a2:a6:37:1c:b2:71:19:4f:bd:80:4c:8a:ab:94:
64:90:86:7f:96:1d:12:63:9b:46:83:3a:7b:77:f8:8f:2d:6b:
ce:24:24:26:98:65:48:e4:39:60:90:fb:d7:b3:aa:9b:f7:d5:
72:67:36:a8:4f:96:44:dc:a5:62:92:6c:22:93:3f:cf:60:cb:
9a:9e:79:8c:cc:7f:14:6e:dd:d4:bb:f5:50:54:20:2b:97:43:
ef:3a:95:05:ae:11:a4:1e:fe:75:0b:55:f9:44:ad:3a:22:39:
28:3d:b9:45:6d:5c:8a:ce:17:3f:38:70:bd:70:37:21:dd:ce:
e7:79:f7:de:3e:8a:2f:be:2a:84:e6:fe:c2:b5:d0:89:54:b1:
dc:b4:99:1c:64:f4:b2:0b:6b:5b:f9:94:95:dd:66:34:a8:4b:
bb:c9:cf:10:d9:f0:f1:49:eb:7d:f5:30:ae:e1:36:a8:95:c5:
d3:59:b7:b0:72:32:06:8f:84:e9:b9:85:a0:6b:5c:47:4d:e1:
19:92:a1:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAteowBt934KEMTf8foKNfQRhz34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5ODY0NjQzMjVFOEZENURGMTBDQkZBOEREMzAzRUYx
MjQ0OTc3NDAeFw0yNTExMDIxNjE5MjBaFw0yNTExMDMyMDA0MjBaMDMxMTAvBgNV
BAMTKDVDRDQ5MEIxRTBDMzE4NTRCMUM0ODM3OTU4Mzc3REQ3MjUwRjA0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDiKxZdJyEN/n6+/cQ3rpan7l
oo/ufuJJoV7HCdiVr2hjI8MsFEvL8ehyQW3E710aSFEgQHOHSVcdleQPc4TQsFPl
ofEwTSEGPXn6s09RnjpaThVNilBFnVLWDZjlFxTz4kRSCMiivjA//BCCXL6bVviM
hTAkhpz0w4zgj+9KsIJ2cF+RESAOL0idlgMkDYGefY0EB0ipWAVNh3riOk0aFXl0
l37WqwT5eZzLjQ6GGAXzhmXM7VmEStRXHXKbhu66rsS3bYpawq81khNHzvbKHmag
KX0VuqxlV6GAFdSoBG4Sj8Gr/PMDwimPJNTuoDWDhHqe67BBmEkgBeGSlPqZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXNSQseDDGFSxxIN5WDd91yUPBH8wHwYDVR0j
BBgwFoAU0phkZDJej9XfEMv6jdMD7xJEl3QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1u
aHcvMS9EMjk4NjQ2NDMyNUU4RkQ1REYxMENCRkE4REQzMDNFRjEyNDQ5Nzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTg2NDY0MzI1RThGRDVE
RjEwQ0JGQThERDMwM0VGMTI0NDk3NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1uaHcvMS9E
Mjk4NjQ2NDMyNUU4RkQ1REYxMENCRkE4REQzMDNFRjEyNDQ5Nzc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATwP2MP9Ywlop3Ky+zXQkYjpB882SKOBnWYJ7uGc8CSmJ+LSE5gh6WDZ5DHhA
OTZNO50UbvXMmcY7mKKmNxyycRlPvYBMiquUZJCGf5YdEmObRoM6e3f4jy1rziQk
JphlSOQ5YJD717Oqm/fVcmc2qE+WRNylYpJsIpM/z2DLmp55jMx/FG7d1Lv1UFQg
K5dD7zqVBa4RpB7+dQtV+UStOiI5KD25RW1cis4XPzhwvXA3Id3O53n33j6KL74q
hOb+wrXQiVSx3LSZHGT0sgtrW/mUld1mNKhLu8nPENnw8UnrffUwruE2qJXF01m3
sHIyBo+E6bmFoGtcR03hGZKhyA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:14 2025 by rpki-client