
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier: 17uHJg0AlEwaWGEdCZhvBO2b5MCRjh12VAQhM0hfsbw=
Subject key identifier: EF:B8:77:5C:EF:6E:98:54:EA:5F:E8:6D:F0:20:D4:30:E7:B0:E7:B3
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 5A7459D55B5520C1107F178C41F5BB9B1485822A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number: 0303
Signing time: Mon 03 Nov 2025 14:02:53 +0000
Manifest this update: Mon 03 Nov 2025 13:57:53 +0000
Manifest next update: Tue 04 Nov 2025 15:53:53 +0000
Files and hashes: 1: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: wvSQ3FzRtNsoqUuQqSbAWn9vyrM8Eyg9LcMHHfCs1LA=)
2: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=)
3: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: 8eAkq4HT64a5baT56OgFx1DH72F9mwfih602zhR2CH0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 15:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:74:59:d5:5b:55:20:c1:10:7f:17:8c:41:f5:bb:9b:14:85:82:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Nov 3 13:57:53 2025 GMT
Not After : Nov 4 15:53:53 2025 GMT
Subject: CN=EFB8775CEF6E9854EA5FE86DF020D430E7B0E7B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:67:22:b4:f2:16:7d:72:fe:0f:50:69:8f:
22:33:56:5d:a6:28:83:35:38:8d:ab:45:6a:f0:3e:
49:58:c8:bd:41:15:e4:6a:80:b1:63:0c:96:b6:fb:
0f:9f:3b:a1:cd:38:2a:df:9e:74:f7:b5:1e:52:20:
a6:51:52:21:dd:d4:ed:79:6c:d8:de:70:3b:4b:f1:
9e:b1:61:f4:71:6d:85:3f:e1:fa:ca:24:50:c1:e0:
ce:b9:bb:30:94:36:6e:7e:bd:eb:61:0b:e4:df:86:
30:d8:19:08:cb:33:9b:a7:38:58:2d:cd:c4:0a:3f:
21:51:03:66:2d:70:e0:10:d1:b8:80:fd:85:92:20:
3d:4a:24:83:4f:c7:48:93:67:29:c1:6b:fb:5d:90:
cd:e5:37:1c:d4:36:28:bf:b9:de:06:c4:29:e8:f2:
c8:2c:d8:ca:2c:fb:a4:e5:92:8e:08:96:bf:3b:7e:
6e:7f:e6:60:2d:25:5e:44:89:fd:6b:47:8e:e1:6c:
14:e4:f5:8a:cf:de:57:76:e4:98:9f:9e:56:f9:f4:
55:58:6f:20:2f:8a:89:8d:45:ae:45:59:f1:92:e4:
e4:6d:ae:bc:65:5a:09:86:2d:46:bf:46:17:0d:1e:
12:07:16:ea:ff:19:70:e5:e0:57:3f:be:aa:75:71:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B8:77:5C:EF:6E:98:54:EA:5F:E8:6D:F0:20:D4:30:E7:B0:E7:B3
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c0:c0:7e:e9:42:49:79:2d:ac:24:99:2a:40:71:d6:12:9d:
4f:d6:88:e0:38:b1:60:5f:48:80:1b:d5:75:2b:69:72:39:14:
fe:25:38:ff:04:60:15:5b:4d:c2:da:53:cf:2b:8c:3f:41:bf:
72:f3:ab:f8:91:88:d4:42:57:13:52:ad:bc:7a:ca:ba:34:c8:
2d:e8:c6:9a:58:eb:3f:36:b3:e8:54:3c:8e:3b:d9:7e:84:14:
f5:39:f2:47:7c:9f:d3:54:60:e5:6b:2b:95:17:da:d4:95:92:
1f:07:31:df:e7:e4:c5:05:8d:da:35:a1:3f:e6:90:f3:9d:65:
67:1a:50:c9:ac:9a:34:6e:c3:35:69:43:d9:b8:b4:f9:bc:3d:
51:14:d4:cf:6f:5e:fa:4f:bd:ce:64:88:61:f1:1e:53:81:a5:
b7:17:81:8e:c0:44:6b:ee:36:4e:56:60:8a:4a:44:5c:90:1f:
f0:d5:98:5d:f3:ca:40:74:37:95:e1:98:1f:c0:17:aa:e2:4d:
67:ef:ce:75:46:85:b2:ca:a5:2d:6e:d1:28:8f:06:c1:be:9e:
88:d1:0f:ab:60:6e:2f:bb:a4:f8:a8:7b:79:f0:b7:4a:dd:5c:
f9:fc:05:b0:83:08:74:bf:d7:ba:e9:f3:2e:6e:76:62:e0:63:
0a:b2:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:40:08 2025 by rpki-client