
$ rpki-client -vvf rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
File: 497BAE4A3C3F168148480552DC251C198E80E35D.mft (raw, json)
Hash identifier: /o26zKMo+15ArP3T9/yukSxHK7L4eXDRBKy0AZ3FecU=
Subject key identifier: 1A:49:5C:79:64:7A:2C:B7:70:8A:96:5D:B4:ED:49:AB:7A:93:CD:46
Authority key identifier: 49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D
Certificate issuer: /CN=497BAE4A3C3F168148480552DC251C198E80E35D
Certificate serial: 6D0C9287E6D498A976C21975FDD9866075A632D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
Manifest number: 16
Signing time: Mon 03 Nov 2025 08:44:01 +0000
Manifest this update: Mon 03 Nov 2025 08:39:01 +0000
Manifest next update: Tue 04 Nov 2025 09:46:01 +0000
Files and hashes: 1: 497BAE4A3C3F168148480552DC251C198E80E35D.crl (hash: 0FncnSgBlIJM5rH9vc6ml0qRhqbfyOhiD/n+nZYjeJw=)
2: 34352e3138302e35322e302f32322d3234203d3e20323639313137.roa (hash: 9hJwoN0GWb/tKd7eKwbHJ1+J3QD5zi8hpvZGNfEoDL8=)
3: 323830343a356662303a3a2f33322d3438203d3e20323639313137.roa (hash: Na3YvVpkHFVuytUIqDmGLgFlIgoEZir0oJ0kqyLE3S0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.crl
rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 09:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0c:92:87:e6:d4:98:a9:76:c2:19:75:fd:d9:86:60:75:a6:32:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497BAE4A3C3F168148480552DC251C198E80E35D
Validity
Not Before: Nov 3 08:39:01 2025 GMT
Not After : Nov 4 09:46:01 2025 GMT
Subject: CN=1A495C79647A2CB7708A965DB4ED49AB7A93CD46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:f5:8a:5f:b6:ec:eb:3c:6d:0c:7c:e6:ba:
74:2d:24:63:c4:88:71:15:0b:69:e1:e7:66:2b:31:
3f:79:f0:af:38:f4:10:af:2f:8d:08:f3:35:30:d5:
0d:71:9e:36:17:70:4f:d2:48:e9:b9:cb:8b:25:02:
63:ea:52:e6:06:a6:54:3a:52:b2:55:21:b0:57:49:
1a:bd:65:1f:c1:52:52:d3:71:db:18:40:ef:73:50:
2f:ad:f1:be:e2:0f:80:a6:d6:44:b6:ee:66:84:15:
21:9f:10:3f:a2:21:d0:14:26:ca:ee:fe:1c:98:63:
82:a2:d4:96:29:57:a3:f6:c2:2d:02:f5:09:52:f4:
33:b8:0d:38:b7:f9:86:3a:ee:6b:c7:81:99:75:00:
3f:95:e7:cc:89:6c:a7:58:00:21:6c:da:30:2f:d1:
9f:b2:90:a9:c2:22:f5:02:af:68:a6:f4:b1:44:f8:
d9:f6:b0:36:e6:7d:b2:d6:02:b7:75:9f:f3:ec:45:
57:d0:c2:95:df:c5:2e:bb:ce:be:26:4d:87:d8:6a:
88:68:93:b5:8f:72:2d:b0:29:85:6a:f3:04:60:4a:
e7:06:3f:4c:a6:f3:12:e2:3e:f7:df:83:eb:a1:ef:
ae:c4:b7:7a:b3:c0:c5:d6:68:f2:75:6e:fe:69:b1:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:5C:79:64:7A:2C:B7:70:8A:96:5D:B4:ED:49:AB:7A:93:CD:46
X509v3 Authority Key Identifier:
keyid:49:7B:AE:4A:3C:3F:16:81:48:48:05:52:DC:25:1C:19:8E:80:E3:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497BAE4A3C3F168148480552DC251C198E80E35D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4e6AkJHihJS9cmHupSeQyZzZav9ie1qTJ7Lg8CmLNuyP/0/497BAE4A3C3F168148480552DC251C198E80E35D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:66:8e:f4:d4:f2:ed:4c:19:2b:19:b0:40:00:f5:fd:6c:
e3:27:3f:9e:0a:a0:bc:62:a3:c9:b3:b3:0f:cb:6b:d4:5c:42:
5b:37:1d:8c:71:56:16:57:dd:ff:0d:e1:0b:9d:de:fc:8b:d9:
9c:6b:43:b8:7b:dc:0b:b7:cc:2f:b7:17:00:a9:39:d0:f1:97:
e7:77:d1:e8:6d:c2:cd:07:0e:7b:85:0e:78:d9:ea:14:26:60:
c8:07:94:f9:d5:e6:c4:97:0b:ed:32:95:a1:2f:bb:80:f0:8f:
73:6b:b2:a3:58:82:9b:eb:e4:55:84:dd:42:c6:69:bc:51:61:
64:22:d0:9b:e0:97:d1:53:4e:3c:b0:c2:1d:0f:52:d1:e5:1a:
d4:ba:f9:37:0a:dc:c5:d9:37:8a:11:91:ca:8d:98:05:78:d3:
7e:5e:c0:6a:d7:18:85:7b:dc:fa:85:01:c6:ac:ae:b3:73:77:
a0:49:6e:44:55:8f:5f:ef:05:bb:47:28:af:ec:60:fb:be:c4:
0a:98:63:56:0c:10:2f:59:33:12:cf:d1:a3:2b:fa:bf:86:04:
74:03:9f:b8:84:d7:da:a1:4d:e1:41:77:22:10:ce:f5:f1:06:
0b:40:82:de:75:bc:69:de:74:75:03:72:aa:7e:8c:98:15:3c:
aa:c3:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:52:57 2025 by rpki-client