
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
File: 899188992E550CB7173DD65733F04F79CCF47641.mft (raw, json)
Hash identifier: 8g0QMUvxrKgJZ+sgKlu5IWEewnenKn8VBRKJaCNFp4g=
Subject key identifier: 0A:DF:61:CF:0E:89:0A:4E:CD:80:8A:76:17:DA:37:F6:5C:B8:1F:10
Authority key identifier: 89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41
Certificate issuer: /CN=899188992E550CB7173DD65733F04F79CCF47641
Certificate serial: 1FF4CF7FE388B96C708A56F40FAF7F81D3BE7236
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
Manifest number: 1C
Signing time: Sun 02 Nov 2025 18:17:21 +0000
Manifest this update: Sun 02 Nov 2025 18:12:21 +0000
Manifest next update: Mon 03 Nov 2025 19:41:21 +0000
Files and hashes: 1: 323830343a363830633a3a2f33322d3332203d3e20323639363637.roa (hash: Mt495mOB/W8EQUoPfWN24rBZVkC9Fo50TmuLtNcaFHg=)
2: 323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa (hash: ayjMIjkTBUXq+eb0j87CZNi5kJx7JC8kYWUS3R6Fyqc=)
3: 323830343a363830633a3a2f33332d3333203d3e20323639363637.roa (hash: Ispl40Jf6ahYR0kWqggfL9ezMi/bsP/4WZs3YsyiTmg=)
4: 34352e3139312e36302e302f32322d3234203d3e20323639363637.roa (hash: P04VezsFeKBIgv3uWvB0meOX9OEy/hRAmOAJGShnbxI=)
5: 899188992E550CB7173DD65733F04F79CCF47641.crl (hash: /xEtwUChxpZY1QNj5bKZCvaUNJcS/Y3dkP5NhJEg004=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl
rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 19:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f4:cf:7f:e3:88:b9:6c:70:8a:56:f4:0f:af:7f:81:d3:be:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=899188992E550CB7173DD65733F04F79CCF47641
Validity
Not Before: Nov 2 18:12:21 2025 GMT
Not After : Nov 3 19:41:21 2025 GMT
Subject: CN=0ADF61CF0E890A4ECD808A7617DA37F65CB81F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:3d:de:98:c0:a1:70:87:80:b9:55:18:db:
e6:63:1f:ae:c1:e7:72:da:5c:9b:86:d1:0e:4c:d8:
89:1a:05:03:b9:34:07:f9:f1:99:81:fd:29:48:7b:
b6:c3:9d:be:15:e9:94:82:71:dc:ad:48:a8:04:ba:
f8:be:18:62:b8:f2:94:82:67:93:57:07:f8:0b:26:
28:36:b6:c9:c3:b4:cd:f4:3b:5b:ad:24:0a:27:67:
88:3b:41:c0:77:5a:20:61:26:84:fa:41:3b:8b:2d:
1e:03:98:e8:03:fd:0b:29:85:b5:95:50:a3:ff:46:
d6:42:fa:4a:b5:26:c7:bc:4a:14:94:8d:1e:1a:83:
1e:72:62:0d:4c:26:ad:26:d4:4b:9c:28:51:bc:ee:
b6:d4:28:36:ca:a0:61:4c:bf:5f:e8:6f:be:57:71:
21:23:66:35:08:f3:95:7e:8b:d2:23:1f:04:a2:0b:
68:91:d7:46:cd:e2:e5:00:e8:ee:9b:84:31:21:d4:
1f:2b:1e:38:b1:a6:55:ab:7f:83:82:ef:00:d4:96:
68:8f:bb:fd:46:d7:de:8b:6a:60:ba:67:dc:c1:e9:
d2:68:75:d9:a8:89:f6:90:38:50:37:3f:39:f0:d4:
fc:1b:f8:07:1f:25:97:04:cd:7e:ee:8a:c9:85:4b:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DF:61:CF:0E:89:0A:4E:CD:80:8A:76:17:DA:37:F6:5C:B8:1F:10
X509v3 Authority Key Identifier:
keyid:89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:03:e9:9c:35:91:04:ea:b5:7c:28:af:7e:a9:54:4b:b7:
c0:1e:5e:99:e0:da:81:90:9a:6e:bd:79:9a:b4:38:b2:88:30:
a0:07:a2:7e:37:10:79:e8:1b:3b:62:55:02:26:a5:9e:4d:e4:
df:65:d6:39:29:4c:3d:f6:11:7a:7e:5c:d9:e2:5d:13:d9:50:
e2:75:73:a7:6a:3c:8b:71:72:89:f7:b3:7c:28:24:42:7b:8a:
22:36:20:63:67:46:4f:f7:ee:b2:0d:a6:18:e0:05:0b:5d:35:
45:ae:d7:c6:05:e8:36:69:2c:49:62:d3:6a:4e:70:c6:47:f2:
6c:da:b8:e7:53:0a:7c:84:43:15:f8:22:b4:fa:34:3e:6c:67:
77:29:ad:e2:67:11:1d:67:b1:f0:aa:5a:01:7f:41:34:df:8e:
8f:38:a2:ee:2c:aa:b9:e0:6f:78:15:e0:de:f5:8f:f2:5c:55:
b0:cc:c7:af:32:98:d3:90:c3:34:f7:ac:52:22:95:f2:10:76:
32:4e:26:16:27:31:a3:cf:87:61:42:ed:d9:ae:db:02:71:83:
47:60:77:fd:4f:c3:ff:8e:67:13:ed:43:02:71:cc:aa:93:1d:
a9:11:68:87:ad:17:d6:b2:7c:9c:1b:25:47:8a:05:e3:b5:c7:
c5:20:32:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:11:54 2025 by rpki-client