
$ rpki-client -vvf rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft
File: E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft (raw, json)
Hash identifier: 1yFWFpACjufS4x1ZCm2YsKGR81G757E+LMtm8kIvAVU=
Subject key identifier: E8:E1:9E:38:16:C0:67:94:5E:F4:82:24:B9:82:63:B6:E3:A7:7A:65
Authority key identifier: E4:30:52:9E:E7:A7:2E:95:EA:5A:AB:01:20:C5:31:BD:4C:DC:79:DF
Certificate issuer: /CN=E430529EE7A72E95EA5AAB0120C531BD4CDC79DF
Certificate serial: 22006F5F0655C76BF6371070C2C6C9893DA208D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft
Manifest number: 1D
Signing time: Sun 02 Nov 2025 22:37:30 +0000
Manifest this update: Sun 02 Nov 2025 22:32:30 +0000
Manifest next update: Tue 04 Nov 2025 01:37:30 +0000
Files and hashes: 1: 323830343a363135343a3a2f33322d3438203d3e20323639323238.roa (hash: vyGmFXTs4h1lq4SeIeMGMc79Jv6HDKCiHSONkYlFNsA=)
2: E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl (hash: jkNmKi2qyoTIodbrPmIKCqC3065qqTuSPzqtNZfE+1o=)
3: 34352e3138312e3136302e302f32322d3234203d3e20323639323238.roa (hash: wMAbLAAkVjYEG8pq8BGQvh2TICdZ5MG3Ms6inA5Ev/M=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl
rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 01:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:00:6f:5f:06:55:c7:6b:f6:37:10:70:c2:c6:c9:89:3d:a2:08:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E430529EE7A72E95EA5AAB0120C531BD4CDC79DF
Validity
Not Before: Nov 2 22:32:30 2025 GMT
Not After : Nov 4 01:37:30 2025 GMT
Subject: CN=E8E19E3816C067945EF48224B98263B6E3A77A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:22:01:cb:99:a0:fc:8c:e0:56:e5:fd:ea:
fc:30:74:84:b3:5c:7a:84:50:f4:22:8f:53:7c:10:
8f:e9:8a:07:9c:c2:54:16:5b:44:bb:77:f9:6f:ef:
0b:4b:6e:9b:41:e0:c5:f3:26:4d:fe:50:63:c5:49:
54:ae:ed:ac:8e:74:ad:53:5d:58:b4:e7:61:03:ac:
58:d5:df:3a:a6:bf:61:86:3a:65:49:25:42:4a:dc:
73:9e:33:ae:e1:7a:3f:5e:ce:fc:9f:43:8c:6f:4f:
30:6a:20:ad:18:a2:43:ee:4d:74:80:40:7a:49:83:
9c:5e:e2:6e:fb:b5:06:8b:17:06:93:38:08:6f:7b:
ad:7d:6a:2c:1d:78:65:6c:68:44:71:3f:ab:02:a1:
fe:b3:d0:ac:e3:1d:de:a6:87:57:ac:79:0b:b3:14:
07:91:b0:fb:70:09:39:ee:65:6a:d0:ac:85:04:02:
58:69:a9:2b:c9:de:38:6c:b4:82:29:23:86:4f:bc:
7a:6a:ab:3a:ba:88:26:9e:4e:7a:4c:c7:1c:fe:ab:
00:7f:07:43:01:65:14:d7:de:af:b6:cf:76:f1:fd:
4f:f4:a7:0d:4a:ce:ec:62:99:ca:ee:aa:4f:c0:5d:
a6:8b:cc:6e:44:0b:63:01:5c:51:ee:59:e5:3c:92:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:9E:38:16:C0:67:94:5E:F4:82:24:B9:82:63:B6:E3:A7:7A:65
X509v3 Authority Key Identifier:
keyid:E4:30:52:9E:E7:A7:2E:95:EA:5A:AB:01:20:C5:31:BD:4C:DC:79:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9c:df:da:6b:30:b6:33:37:88:54:ba:94:ed:c9:f7:db:bc:
d0:80:16:6f:32:30:87:41:f6:7a:bf:c1:b3:f0:11:41:b8:25:
17:66:43:4f:59:5b:b0:7d:58:2f:dd:4a:bc:75:f8:09:ae:64:
4d:01:7d:d9:b6:cc:cb:4d:ec:6b:64:49:af:65:e2:65:9d:cb:
3e:7b:25:d2:0f:65:b2:d4:e2:70:17:a8:4f:ca:38:89:65:f6:
c1:f4:d2:39:a0:30:ea:80:50:af:05:0c:99:cc:b3:d0:aa:1f:
c8:e6:21:1e:f3:25:65:ee:5c:57:10:03:d7:eb:5d:2a:61:b1:
15:27:92:8b:1d:a8:d4:51:26:43:df:70:6a:b7:3b:c8:3b:6f:
0c:3b:94:b3:e5:18:ea:63:02:33:76:14:ec:26:2b:64:21:f0:
aa:23:e0:1c:0e:ad:38:bb:9b:75:46:fa:0a:ea:86:4e:c7:db:
5a:09:44:e1:77:dc:42:4a:b9:3a:06:7a:65:4a:6b:bc:89:0d:
35:84:81:ab:c0:7a:90:a8:fd:1c:2d:50:b2:ea:86:e9:bc:5f:
17:f1:dc:ad:b2:b2:f0:9c:d3:3a:1a:ef:00:ed:ce:58:d7:05:
19:72:72:54:47:5f:83:b0:b4:7a:2d:92:a7:45:8b:88:0d:b6:
72:38:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:15:39 2025 by rpki-client