
$ rpki-client -vvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
File: 3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft (raw, json)
Hash identifier: mra9bHKQj3ecz56m6t+0HwLO9QaG3MkhjqFDOISWYXI=
Subject key identifier: 0C:28:83:BF:03:07:38:9A:B8:BF:74:EC:76:14:A5:43:21:11:EF:80
Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
Certificate issuer: /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Certificate serial: 224B4A76C1E7F8E79902E8D53A2B2FE5F561EC32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
Manifest number: 52
Signing time: Sun 02 Nov 2025 18:15:48 +0000
Manifest this update: Sun 02 Nov 2025 18:10:48 +0000
Manifest next update: Mon 03 Nov 2025 21:36:48 +0000
Files and hashes: 1: 323830343a356336383a3a2f33322d313238203d3e20323638393037.roa (hash: ydeiKw+dDRQOyoxa0XqUWRDqo3xlSdNN3y9kxTu5DL0=)
2: 3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl (hash: GDtQeiDbQ0Jnw5+g55T0L4YNlR65j+oqdqzpNz1R7Ng=)
3: 34352e3137352e39362e302f32322d3332203d3e20323638393037.roa (hash: gWzg9YpbqycEBcqFyDV9C2c1ifzIdZhpIdaqvGl1vpE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 21:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4b:4a:76:c1:e7:f8:e7:99:02:e8:d5:3a:2b:2f:e5:f5:61:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Validity
Not Before: Nov 2 18:10:48 2025 GMT
Not After : Nov 3 21:36:48 2025 GMT
Subject: CN=0C2883BF0307389AB8BF74EC7614A5432111EF80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:35:3c:94:95:ef:f9:ce:bc:82:72:6c:06:
b8:88:f3:fb:07:8e:ee:71:ad:f8:03:05:46:99:03:
e4:f7:c0:9b:f1:b2:0a:92:90:56:d3:04:f3:b1:8b:
24:bf:57:9f:2f:67:59:ad:18:0a:2c:ba:b3:e6:8d:
95:1b:5c:30:42:3c:01:52:7b:22:d1:9a:54:62:be:
0c:be:22:7b:d9:84:03:a0:9c:14:66:6e:26:c5:82:
f1:5f:53:57:16:aa:fb:b7:e9:32:ab:67:cb:85:3e:
0e:25:64:b3:41:9f:b8:bd:00:4c:93:3b:51:b6:33:
8d:1b:11:ae:c5:45:3e:8b:a9:85:f8:dd:05:fc:de:
e0:82:db:23:e9:05:62:51:65:e4:db:45:9b:c1:b6:
3f:cc:05:8f:56:58:c2:30:59:37:0a:22:e9:b7:6f:
f1:1d:33:58:d5:33:a1:3f:3d:17:5d:93:29:97:0e:
9a:76:46:6d:82:95:47:4b:93:cb:71:9a:5b:97:bb:
d7:5b:26:7c:c7:89:80:76:93:d8:7d:6d:31:c0:14:
e8:91:7d:d4:fe:8a:5a:13:22:a9:ce:c7:35:d1:0d:
9d:02:85:db:9d:02:2a:93:24:a6:8a:3b:6c:4a:04:
3d:10:29:42:63:1d:17:f8:f5:7b:2c:a1:3d:96:fe:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:83:BF:03:07:38:9A:B8:BF:74:EC:76:14:A5:43:21:11:EF:80
X509v3 Authority Key Identifier:
keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0c:72:93:7b:9e:ba:d5:f8:ec:db:e9:66:fa:33:f4:fd:75:
97:f1:43:ab:b9:17:56:b4:cc:51:84:a5:96:9d:c1:cc:59:ba:
66:4b:de:8b:c9:78:01:f3:e9:4a:f8:54:36:8d:d1:e7:70:c1:
c5:7e:b0:5f:9a:4a:ad:90:e8:c6:4c:b7:f9:02:11:00:b3:05:
2d:40:5e:8c:1d:36:a9:04:37:e7:4d:9d:3c:ce:e7:3d:99:e8:
ef:99:6f:aa:e6:70:d6:d5:b7:5e:74:2f:3e:98:0d:17:dc:24:
ef:6a:1f:4a:44:32:2d:c1:50:88:15:15:0c:d9:27:9d:f6:2a:
95:d0:f3:f1:74:8f:4a:a5:b4:d1:8c:e7:a5:01:fc:62:d1:5c:
12:94:4e:17:76:eb:44:9b:93:94:94:92:79:73:89:c7:52:5e:
e6:6b:8c:4b:e2:b6:d7:14:f9:6c:9e:b8:bd:95:62:22:49:12:
22:41:43:31:2a:e6:e7:5d:39:b2:5d:ef:f8:0d:1b:b9:f2:78:
8c:40:78:dd:71:5d:ba:54:36:f8:99:41:f6:10:c0:a0:bc:4e:
f9:1b:26:4c:23:68:1b:2c:c2:15:a4:96:2b:b3:44:ff:1d:63:
5d:5f:63:31:00:cf:5c:9b:88:e0:37:e4:70:fe:52:a8:7b:18:
15:aa:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:21:34 2025 by rpki-client