
$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
File: FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft (raw, json)
Hash identifier: yoPTZK7C3IhM9OCiV3wS9LcEsPEh75R9FLPX8j+4/fo=
Subject key identifier: 0B:9E:F7:12:E6:B8:B4:D1:F2:76:EE:FF:ED:59:E9:7E:7D:52:6C:7E
Authority key identifier: FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5
Certificate issuer: /CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5
Certificate serial: 3F7682BC5C700CFBDBCB57B95C9AB225ACAE82FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
Manifest number: C8
Signing time: Mon 03 Nov 2025 14:57:10 +0000
Manifest this update: Mon 03 Nov 2025 14:52:10 +0000
Manifest next update: Tue 04 Nov 2025 18:38:10 +0000
Files and hashes: 1: 3230302e37312e37362e302f32322d3332203d3e203631353939.roa (hash: CaVVHJo0LSZdJMM6ZFVMcgNJs76Zbb9uuX/EB8OanUw=)
2: 323830343a336361303a3a2f33322d313238203d3e203631353939.roa (hash: Az1HRYxCLtmiNCgqQqg333qg8goKl+ij8ML1bdBt9PQ=)
3: FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl (hash: 2MUNJdhe6LG14AfClzO4a7wT7nLzBxV5B4ZQpn+m7Oo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl
rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 18:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:76:82:bc:5c:70:0c:fb:db:cb:57:b9:5c:9a:b2:25:ac:ae:82:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5
Validity
Not Before: Nov 3 14:52:10 2025 GMT
Not After : Nov 4 18:38:10 2025 GMT
Subject: CN=0B9EF712E6B8B4D1F276EEFFED59E97E7D526C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:11:50:5a:49:f1:d4:66:7a:05:b2:f6:3e:
75:02:fe:d3:1a:08:ef:a8:cc:00:f7:10:e5:ba:ac:
78:a3:7f:f5:f1:01:33:ec:6f:81:00:69:c2:b5:0d:
48:f7:95:2e:a1:6e:2f:53:48:b3:26:59:28:39:a5:
67:8e:41:22:3d:c3:69:1c:2c:a4:a1:a0:6e:49:10:
37:a5:27:cd:6b:d3:81:46:63:4e:8e:67:62:e4:fb:
68:2b:27:c6:b0:cc:21:52:ea:f6:f7:98:86:5c:02:
f2:7f:55:bc:19:dc:9d:e7:cf:f6:da:57:52:30:c6:
42:f0:8f:66:90:53:17:0c:4c:90:37:0e:04:b9:55:
84:01:37:70:ff:a2:25:bd:b2:4d:da:69:c8:a1:6b:
32:a1:93:c5:63:83:48:fa:3c:60:32:1f:a7:c5:15:
f0:d7:0f:f1:bd:45:ff:84:ce:ce:b0:2f:9f:1b:37:
2a:1c:ce:0e:43:95:b0:ae:2a:2e:fc:b7:ab:fa:c4:
f6:65:d1:7b:4c:f1:bc:94:2f:86:c7:94:bd:06:77:
02:b4:44:82:da:c5:bc:ef:51:d0:bd:bb:bd:ac:c8:
fb:3c:00:d3:50:ec:f0:5d:1b:3b:79:58:7d:18:72:
12:e8:7b:dd:5f:a3:97:da:3a:57:74:99:ec:e3:28:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:F7:12:E6:B8:B4:D1:F2:76:EE:FF:ED:59:E9:7E:7D:52:6C:7E
X509v3 Authority Key Identifier:
keyid:FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:40:2f:95:c6:6b:37:9f:81:15:38:f7:65:41:1f:98:9a:80:
dc:39:4d:fe:1b:e9:ae:91:d7:8a:ba:1e:56:40:d3:dd:bf:b7:
27:e6:b2:89:52:7f:44:58:75:aa:03:bf:48:fb:ab:b7:4c:e7:
af:a7:83:bd:84:f3:43:07:74:b1:4a:2e:96:6c:a8:53:bb:7c:
8e:5f:47:6e:8f:cf:60:40:b9:0f:18:14:41:f0:4a:52:88:90:
ad:ac:94:08:1a:95:8e:74:90:07:8a:67:3d:02:82:59:36:94:
2a:09:f7:6d:8d:4b:a3:87:3e:03:7b:1b:52:a8:c8:a8:f4:32:
23:57:53:ae:f8:49:2b:35:dd:cf:ad:73:81:53:99:ce:6b:80:
7b:68:4e:06:cf:76:69:12:41:d7:e7:a4:fa:a5:67:d8:aa:9b:
46:84:f4:aa:cd:17:21:07:26:f4:5b:df:06:37:38:7b:b6:d8:
e1:15:78:ab:81:17:f5:17:57:01:92:41:40:ad:84:f5:b0:ee:
6c:3e:a9:4a:0a:57:ab:bf:68:1f:8e:32:a4:8c:ad:ca:22:11:
4c:e6:f4:3c:76:1a:91:f8:cd:74:71:c8:a8:01:35:83:f0:0d:
1f:da:01:e1:4d:76:9c:19:d2:dc:d0:ce:16:af:e8:4b:d7:a5:
a3:f3:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:39:57 2025 by rpki-client