
$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
File: CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json)
Hash identifier: hcpcUncVJFKv2HbYIqZvOY1jlmyVfrylf8H9LojnDYg=
Subject key identifier: 53:E2:A3:21:74:49:DC:28:88:3C:87:C8:98:14:8B:C5:B9:08:E2:BE
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Certificate issuer: /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial: 23EDFC7A3127934EDDF77CD73B99C72E084F5168
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
Manifest number: 01B3
Signing time: Mon 03 Nov 2025 00:56:24 +0000
Manifest this update: Mon 03 Nov 2025 00:51:24 +0000
Manifest next update: Tue 04 Nov 2025 03:59:24 +0000
Files and hashes: 1: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=)
2: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: tH6JdMQVMKYi0UYUmLmGEViq4f8H/NXYU4sDeHhQ3H8=)
3: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: NKXUigyoNgvGw8sUtLKz4YtdCSr4kmNU60Zrw78lgfY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 03:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ed:fc:7a:31:27:93:4e:dd:f7:7c:d7:3b:99:c7:2e:08:4f:51:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Validity
Not Before: Nov 3 00:51:24 2025 GMT
Not After : Nov 4 03:59:24 2025 GMT
Subject: CN=53E2A3217449DC28883C87C898148BC5B908E2BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:19:79:25:44:85:b3:19:d8:c1:b2:02:c4:
7f:7a:70:70:52:6d:38:56:3a:4c:94:91:b8:7d:41:
0c:12:f5:8d:9b:87:8b:49:13:e7:bc:75:c1:d0:9f:
51:92:87:94:62:68:47:4f:b7:3a:6d:f8:34:9c:96:
df:c7:ea:66:36:fb:6c:7e:cb:e9:5a:61:9a:1f:6c:
f5:cd:cb:6a:b7:a2:eb:cd:25:da:fd:96:7e:a6:e9:
75:65:fc:a5:8b:fb:e7:2b:ce:5f:2a:f4:94:df:0a:
6c:5e:64:8e:5c:a4:ba:b1:aa:66:19:36:a9:fe:1c:
ba:9a:15:f6:56:7d:ba:f6:00:18:ca:2c:e9:16:4e:
32:c3:19:60:ff:c8:2f:2d:3a:8b:19:81:df:8a:55:
03:80:e4:81:ed:32:c0:1a:7a:13:ea:3c:b2:76:4e:
6b:86:ed:26:d5:be:06:fa:25:f7:66:cd:dd:76:22:
50:29:48:ac:88:39:91:42:d3:26:46:04:09:49:63:
49:52:f7:9a:ac:37:b1:90:bc:15:d6:dd:42:95:37:
55:7b:4f:9c:56:3c:4e:4e:e2:7d:f8:b0:2d:ef:33:
04:f5:84:2b:cf:67:1e:d3:12:27:c6:91:20:1a:30:
6a:6f:c3:d1:21:65:1d:51:c6:e8:b2:6a:fb:cf:40:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:A3:21:74:49:DC:28:88:3C:87:C8:98:14:8B:C5:B9:08:E2:BE
X509v3 Authority Key Identifier:
keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:63:86:9b:ea:bc:e4:af:7e:60:9d:d7:d6:99:6b:bc:4c:18:
b3:51:3b:67:8b:cf:a6:32:c4:02:75:c5:4c:83:f2:ca:38:80:
12:4f:c7:5d:8a:94:7d:92:b5:f2:a5:7e:ec:ce:8d:9e:ff:c2:
66:c6:f1:86:85:0a:6f:6b:87:f1:30:f0:64:79:14:7b:ca:71:
d7:27:82:2a:9f:d4:44:40:14:d7:e0:9e:fc:52:ce:39:7d:1a:
43:c6:5a:2f:ef:ea:aa:d3:fc:a3:64:21:6b:b3:e3:7f:bf:cd:
ed:b8:69:a7:53:74:aa:2a:3a:a9:4e:bc:58:10:90:96:9d:3b:
1b:9c:d3:56:12:26:d5:76:59:09:31:bb:79:00:3e:67:b3:0b:
ba:08:9d:e1:32:27:01:be:fe:34:36:28:7e:25:6f:c5:6b:fc:
d7:b2:5a:b3:a8:ee:59:57:c8:44:b2:7a:86:7d:43:d8:5f:52:
3f:b2:bc:05:20:11:b5:22:6d:75:34:eb:2c:a0:03:d6:01:6a:
b3:31:76:86:63:22:9a:2e:58:85:61:00:c0:16:9a:08:02:46:
25:08:5e:47:b4:0d:55:a4:9a:dd:77:05:75:0b:88:65:90:b1:
b5:a4:dc:55:93:52:1f:dd:22:fe:9d:27:56:09:70:26:6f:cb:
55:7c:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:57 2025 by rpki-client