
$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
File: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json)
Hash identifier: H6QL6IoWpYpKgGOVNCMLeYUn8hFCUQDdifR+Z/Y/FyE=
Subject key identifier: CE:F0:73:E7:E4:F7:8F:F9:36:9B:B8:C3:65:C1:E9:20:8F:9F:AC:4F
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Certificate issuer: /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial: 776E56BC5615BDB32C026B2D6DD236AEC728563C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
Manifest number: 0301
Signing time: Mon 03 Nov 2025 18:16:31 +0000
Manifest this update: Mon 03 Nov 2025 18:11:31 +0000
Manifest next update: Tue 04 Nov 2025 20:47:31 +0000
Files and hashes: 1: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=)
2: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: 5ZN1muaZE+9PsMxSVQ+PoppA5Wp65C1bBeChn3ZgnJs=)
3: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 20:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6e:56:bc:56:15:bd:b3:2c:02:6b:2d:6d:d2:36:ae:c7:28:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Validity
Not Before: Nov 3 18:11:31 2025 GMT
Not After : Nov 4 20:47:31 2025 GMT
Subject: CN=CEF073E7E4F78FF9369BB8C365C1E9208F9FAC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:65:1e:90:25:da:80:da:86:b8:69:de:5f:
ee:34:dc:2e:43:df:44:81:5e:5f:cb:cf:2d:02:aa:
42:09:68:18:70:d9:2f:b7:01:bb:84:6e:9a:09:41:
e9:68:41:f3:3f:09:4a:c5:c8:32:8b:c9:9d:bd:58:
76:38:54:80:29:f0:cf:9d:05:c3:a5:7c:c6:28:8e:
72:eb:c4:a7:43:a2:77:82:9a:92:a7:ad:a6:87:9c:
c0:ec:4e:c6:18:b6:e4:0e:ab:eb:13:25:3a:b1:80:
93:3a:df:fb:77:29:86:d5:c9:ef:ea:33:93:77:0d:
3b:82:a5:44:49:2a:b2:70:aa:15:c0:1a:b7:12:29:
93:49:b7:ba:9b:8a:34:30:f0:3e:a7:23:db:f7:1a:
10:52:02:10:10:87:f8:72:83:83:44:bd:8f:1e:7a:
3e:ae:bc:4d:68:cd:b0:0c:e5:df:4e:82:42:4f:f0:
a5:7a:24:c8:26:fe:fa:43:08:4d:74:81:8d:d2:83:
dd:98:55:e4:63:c2:5b:94:a0:62:00:95:55:e1:53:
ab:7b:bd:a2:9a:f0:97:e5:84:ca:f3:39:88:64:ad:
50:a0:ca:38:76:56:58:56:56:7e:c7:34:59:9c:7d:
d4:01:c2:f9:9b:a0:cb:46:ff:c9:f4:8b:0f:61:fa:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:73:E7:E4:F7:8F:F9:36:9B:B8:C3:65:C1:E9:20:8F:9F:AC:4F
X509v3 Authority Key Identifier:
keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:5e:50:11:26:7d:35:e4:ca:0c:14:c7:43:e2:c8:e5:53:
ca:b0:8a:3c:d9:00:ce:c2:47:a5:a4:0b:e6:52:6f:10:9f:18:
49:bf:92:50:be:43:65:85:3f:ea:14:3e:cd:64:10:6d:ac:3b:
03:cb:a3:e9:04:99:9c:b6:30:0e:d9:5e:b4:cf:22:38:07:1c:
1b:37:e4:b1:72:20:d4:ff:76:65:4d:35:dd:1f:1d:af:46:03:
60:10:ea:c9:3d:df:f7:fa:25:99:cf:ff:4a:c6:30:0c:87:80:
48:37:d5:49:31:32:9e:66:6b:16:d2:1f:f9:9b:08:ce:c8:58:
7c:d1:fb:99:c9:dc:78:04:f2:fa:cc:a0:ff:86:b6:c3:e0:96:
14:f2:74:e7:87:7b:91:ba:d2:61:18:5b:16:ec:6e:eb:3e:8f:
93:e3:21:a5:6c:1a:b3:eb:2b:a8:ee:55:27:03:48:c9:0f:73:
00:ad:40:0e:fe:b1:7a:18:1a:50:74:71:6e:ae:a7:22:31:3a:
93:8e:41:01:ac:6e:79:36:e0:76:0c:70:38:1d:66:3a:cc:1a:
3e:04:55:be:b1:80:7a:7c:76:f9:49:1f:b9:61:c5:64:03:d4:
9a:4d:e5:09:a5:bc:d7:4e:95:0b:82:d3:8f:56:2d:e5:4c:a8:
3a:06:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:34:51 2025 by rpki-client