
$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
File: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft (raw, json)
Hash identifier: KsTWJCwIxEdTFgIm9Hs0Dy9ke5/k5YcxeF5Qc3WD3+k=
Subject key identifier: 83:13:E7:2A:CE:91:21:E2:50:B0:60:C2:70:DC:C2:50:BF:F0:28:1F
Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C
Certificate issuer: /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
Certificate serial: 77035A52175A89B2BAAFF96F5C4976D7B0F3E5BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
Manifest number: 02C2
Signing time: Wed 17 Sep 2025 19:12:04 +0000
Manifest this update: Wed 17 Sep 2025 19:07:04 +0000
Manifest next update: Thu 18 Sep 2025 20:25:04 +0000
Files and hashes: 1: 3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (hash: /1UosB7p/H0IpPArGzy1kLCzKmsTI1n2rZyqgUtb7C8=)
2: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl (hash: IO9gDOkhO7rHg8Pdfb3SH03hh6DslstYJg/cMuPpvaQ=)
3: 323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (hash: vEbluKO9WO7Wr/ZFti8PZzzfOsObTPM3B1b8gS1XEcE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl
rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 18 Sep 2025 20:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:03:5a:52:17:5a:89:b2:ba:af:f9:6f:5c:49:76:d7:b0:f3:e5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C
Validity
Not Before: Sep 17 19:07:04 2025 GMT
Not After : Sep 18 20:25:04 2025 GMT
Subject: CN=8313E72ACE9121E250B060C270DCC250BFF0281F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:58:bf:6b:83:5d:0a:7d:20:ac:23:74:79:
5b:56:25:ae:7c:0b:2a:0f:92:df:cc:57:29:b7:3a:
2d:31:5f:29:e6:bf:cf:18:c8:e4:87:de:7c:72:b2:
0a:11:3f:5c:63:46:db:5c:f9:27:8a:7c:19:61:64:
8b:d7:3d:7b:39:e5:f3:96:9d:dc:1b:19:6f:e3:4e:
d5:d8:5f:d7:cd:f2:ad:b9:cb:53:ec:a9:ce:6a:58:
7e:ba:6b:12:9e:b1:44:6f:cb:8d:79:39:62:02:9a:
9c:61:94:18:1f:cc:e7:78:8a:54:81:fe:80:1a:f6:
75:25:73:e9:f7:fd:7b:66:5d:58:b3:8b:ef:d6:81:
3e:30:e8:de:70:8b:f4:67:af:aa:0b:c9:da:b7:02:
3d:ed:03:5e:6d:f9:75:5a:05:ec:41:e5:dd:47:77:
94:0e:c8:b4:11:9a:a0:d0:29:77:7d:3d:61:11:bc:
7c:03:d6:94:97:d3:6f:63:d3:f4:06:af:47:45:c0:
f4:64:f5:27:8b:61:5c:a2:5e:f8:94:de:ce:1c:40:
a0:4e:52:b5:65:c6:07:3a:0f:ef:bd:d3:d9:69:7a:
0f:63:38:2d:14:e3:04:40:90:02:9c:10:d3:b2:16:
a4:2e:b5:d6:69:47:21:ad:21:9b:93:89:0b:9f:97:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:13:E7:2A:CE:91:21:E2:50:B0:60:C2:70:DC:C2:50:BF:F0:28:1F
X509v3 Authority Key Identifier:
keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:75:4a:03:e1:46:8a:ae:a6:73:55:2b:92:52:26:27:07:
3d:f8:94:ae:94:57:47:e6:ca:96:27:5a:e4:13:e0:1a:79:99:
09:5f:0f:fa:64:0c:c8:16:1e:c1:16:b9:ce:0c:60:a0:2b:5e:
d5:ef:91:fc:c4:ee:4b:27:4a:38:86:1a:db:7b:f3:02:22:5e:
d6:ce:7d:88:4f:4b:c2:c4:8a:66:d6:fa:5e:45:69:d9:67:26:
e4:13:1e:3e:78:db:a2:ef:85:57:d2:2d:83:34:29:cf:48:dd:
1b:75:29:4c:56:de:f0:c5:eb:03:c4:21:10:05:12:e4:f8:1c:
53:66:d6:a5:96:b1:6a:d6:ba:43:34:e1:93:7a:03:50:84:d5:
1f:2a:6c:48:22:f3:24:56:10:0c:cf:38:6f:f2:f6:ff:e8:b3:
4a:27:b5:0f:52:ee:d7:54:83:98:28:26:d9:e7:5d:b4:d6:c4:
a9:4d:36:0d:04:4a:23:40:24:ec:ed:1e:62:56:4d:10:25:6a:
23:86:6e:c4:a7:5c:8b:d8:a5:7f:0a:1a:78:93:c9:41:1b:41:
18:2d:96:71:af:94:31:66:29:e5:61:42:19:c1:4a:ac:f9:bc:
81:cb:63:5e:36:14:7f:d3:2d:cf:91:27:bc:f6:dc:06:b7:01:
b5:1c:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:44:13 2025 by rpki-client