
$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json)
Hash identifier: cppKOc0/EHUM0Cq6c/Hpfd7Mh+iRkJk7SghAsnQT5jY=
Subject key identifier: C9:5D:49:F6:61:A2:C6:20:6A:52:03:03:B8:A4:5B:C2:53:A3:45:F1
Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8
Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
Certificate serial: 545D581EFB0075E58D40E81EC2BD2D238ABD158D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
Manifest number: 4D
Signing time: Mon 03 Nov 2025 05:44:53 +0000
Manifest this update: Mon 03 Nov 2025 05:39:53 +0000
Manifest next update: Tue 04 Nov 2025 09:37:53 +0000
Files and hashes: 1: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=)
2: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: CfRqxQBtaPtbtz/oLaaLf9wOT67kLDG77OUK8OC2PPQ=)
3: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: cJEyc9GyTP/W9tTA5SfKcOBqQXJyoAW8IVefVuwCDF0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl
rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 09:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5d:58:1e:fb:00:75:e5:8d:40:e8:1e:c2:bd:2d:23:8a:bd:15:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
Validity
Not Before: Nov 3 05:39:53 2025 GMT
Not After : Nov 4 09:37:53 2025 GMT
Subject: CN=C95D49F661A2C6206A520303B8A45BC253A345F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:9e:6f:04:32:29:e8:d7:85:34:cc:34:1d:
cd:52:ce:30:06:86:1f:8d:ae:cd:5e:97:70:c0:16:
97:a4:d0:4a:a5:97:bd:fb:62:b4:b1:42:7d:55:0e:
ff:07:84:dc:56:55:36:51:e4:03:cd:4f:b2:93:19:
ed:f6:f8:d0:a4:b6:5f:c1:81:32:cc:6c:7c:4a:11:
74:56:32:8c:a3:ba:1e:23:6f:84:bf:d7:67:1b:3b:
7a:6f:f0:19:05:08:09:b3:79:33:75:31:c6:c8:6b:
b1:0d:59:ee:02:f1:7f:c7:2d:54:e0:f1:a8:c5:13:
44:96:1d:5b:3e:39:ce:9d:b7:20:4c:aa:5c:e3:74:
c9:f0:90:f1:c0:08:3d:b7:39:2f:7a:12:9a:7f:a2:
dc:2c:9b:e3:18:20:d2:8e:a4:18:01:3a:74:70:40:
ec:cc:3e:4a:2d:e0:f8:ae:4a:c0:b6:44:29:96:85:
9e:1f:a3:42:a0:67:b9:8d:17:c1:25:96:fe:70:d5:
e5:e3:b8:2f:b7:ad:d9:a8:24:1e:c3:cd:b2:4b:dd:
38:b5:b9:eb:a5:0d:b7:ce:17:eb:8c:0b:5f:8c:97:
4f:77:62:f2:f4:b0:74:e2:6a:3b:45:6c:b2:d7:df:
f8:e8:81:f9:b8:e2:fc:da:90:55:fb:5d:9f:47:51:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:49:F6:61:A2:C6:20:6A:52:03:03:B8:A4:5B:C2:53:A3:45:F1
X509v3 Authority Key Identifier:
keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3b:c2:c3:f1:8e:c1:00:c7:2c:0f:1e:af:ef:11:56:ed:e3:
cd:7b:fe:b0:5c:c1:91:1a:be:53:3a:10:a8:ef:70:59:21:75:
3b:47:20:6f:07:90:2e:67:24:62:69:f9:ec:14:67:4e:9c:b5:
4b:d3:14:c0:8b:6a:2d:2b:c7:53:fd:53:53:7b:c7:0e:03:27:
5b:ed:f5:b9:06:33:92:6e:8a:70:f0:30:cf:37:c0:f1:3c:91:
94:01:93:07:c4:95:99:13:a8:41:2e:0b:c2:66:1f:c8:84:22:
e3:2c:d7:ec:9b:e0:8c:01:b9:b4:34:05:9a:59:e4:de:15:91:
03:24:fd:23:9c:51:b1:c1:ae:64:bc:e9:80:6e:53:ba:42:c6:
d4:76:b9:4f:ea:3b:52:53:fa:14:f1:73:c0:c1:db:78:e2:82:
2e:ab:df:66:c7:c9:34:37:d7:e8:9a:f0:82:e7:b2:c0:1d:61:
26:6f:79:50:8c:01:22:cf:d7:f2:5d:df:ba:f0:5e:dd:f6:2f:
69:2a:a4:61:61:9e:8f:0d:df:89:38:5c:a7:a7:92:a8:f7:5a:
6c:71:b6:93:46:a2:2e:87:83:e1:cf:d3:2f:a8:33:22:e3:31:
2b:1b:29:67:68:72:cd:e9:18:5a:7b:1f:b3:40:c3:ef:15:83:
1e:14:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:36 2025 by rpki-client