
$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
File: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json)
Hash identifier: Ipu6viALqkyioy4XI4/jWMx7Q4RRvPV4ytQph5N3N8Q=
Subject key identifier: 68:71:BA:AE:A3:0E:E5:87:09:95:97:04:54:A2:23:A2:CC:D7:C4:0F
Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
Certificate issuer: /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Certificate serial: 2DE10F0C1A4DB5B72A68182A2873DBC553C8C565
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
Manifest number: 0192
Signing time: Mon 03 Nov 2025 03:41:46 +0000
Manifest this update: Mon 03 Nov 2025 03:36:46 +0000
Manifest next update: Tue 04 Nov 2025 03:54:46 +0000
Files and hashes: 1: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: mHONVwFSZafTrb2bs4XTqeqR/1IxRdzcYgif/PNK+5w=)
2: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: adeQrk3GHwoD07zzNg8h8DoI+T/hg8cMNdSF33h18Mw=)
3: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: vDJPl+UO39mjQDLHL7r+9kd3GD/cc0NbUkz4SqdhPjE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 03:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e1:0f:0c:1a:4d:b5:b7:2a:68:18:2a:28:73:db:c5:53:c8:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D
Validity
Not Before: Nov 3 03:36:46 2025 GMT
Not After : Nov 4 03:54:46 2025 GMT
Subject: CN=6871BAAEA30EE5870995970454A223A2CCD7C40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:bd:a9:eb:10:94:79:c9:f3:19:a0:82:7b:
52:e6:da:6c:c5:31:c1:85:f0:19:0f:3c:82:e3:e7:
5e:ee:6f:8c:f3:b7:aa:53:3d:7e:b4:d6:d1:de:7f:
a1:fc:3b:88:b9:c4:54:9d:b3:0d:4f:62:47:de:13:
fb:d6:99:84:0b:40:f9:97:c3:33:5c:7e:96:ba:e2:
3f:09:30:90:a5:6e:16:5d:73:f0:e7:91:71:be:8b:
ab:2e:69:d7:bb:20:74:f5:4d:73:2e:37:01:4d:aa:
1d:4c:e8:26:d5:31:45:a7:d5:ea:1e:86:11:87:cf:
05:94:f8:03:33:a0:49:27:3b:c0:98:3e:11:bc:8e:
2b:1c:a2:d3:fa:31:39:ff:97:0f:40:a8:d7:65:ba:
93:d4:af:bb:d3:01:f5:53:47:41:74:af:55:d6:3c:
da:fe:ec:f1:1f:00:ae:3e:09:45:5c:6a:f1:21:e1:
93:ae:9d:93:ec:47:a3:70:43:18:42:a7:a9:0e:85:
e2:b2:3b:98:af:9d:34:b1:a1:75:67:86:91:47:91:
6c:92:52:d0:43:bb:c8:32:bd:61:a1:88:83:73:ed:
ab:96:be:97:a3:12:b5:4f:bb:47:cc:48:f8:8c:27:
ab:bd:77:ae:9c:26:77:2f:0c:f6:67:cd:12:40:3d:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:BA:AE:A3:0E:E5:87:09:95:97:04:54:A2:23:A2:CC:D7:C4:0F
X509v3 Authority Key Identifier:
keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:44:7b:47:5d:f2:51:c6:c4:18:53:c9:25:7e:9a:c9:b2:cc:
33:31:3b:77:62:ba:4b:ba:6b:7f:57:cc:44:2a:ec:b8:b9:30:
48:4b:39:c6:4b:24:e1:0a:ad:a9:63:46:b6:57:a1:c4:2f:15:
01:8d:68:c8:3f:e9:09:27:76:89:78:af:fc:11:3e:78:73:b5:
94:bf:8b:ea:56:51:f6:b6:ad:02:af:47:3e:eb:06:ec:7c:2a:
fc:70:b7:46:6d:79:3f:5a:30:9c:af:0c:17:db:a0:6c:a0:87:
42:84:b2:e8:38:f5:4c:74:22:d4:8b:f4:24:8e:77:75:10:25:
77:0c:72:7e:ea:b9:7b:5d:90:47:cb:f6:77:93:00:70:66:44:
3b:60:e1:ba:0f:df:e8:9a:2f:9e:d1:fe:18:bb:c1:a6:5d:52:
c6:6e:5d:05:ac:9f:75:40:0e:a4:94:5b:16:bf:c8:52:02:c1:
84:6a:1a:d9:25:56:63:30:ef:a2:9b:c0:02:48:22:5a:6e:0c:
bf:09:93:94:2f:b5:aa:6c:6c:fe:ef:e7:24:6f:fb:f8:ba:01:
fa:9f:47:63:2c:51:04:9b:2a:34:51:56:83:e3:26:70:ce:07:
d0:b4:41:c2:a8:a3:fb:5d:dd:fe:8e:d0:93:8b:33:b4:1d:29:
d5:d8:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:36 2025 by rpki-client