
$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
File: 66335F04863CA1159D16D18E655231764F6FB821.mft (raw, json)
Hash identifier: Vom7raNuyns8vvQFNoGNHQEqNs6ws0zgno+P8+IHGaM=
Subject key identifier: 70:22:5B:E7:6C:C1:AB:9C:0B:1C:1A:ED:F6:EC:18:D2:22:0D:DB:29
Authority key identifier: 66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
Certificate issuer: /CN=66335F04863CA1159D16D18E655231764F6FB821
Certificate serial: 0E5B9B79F6992BBAF628940DEF43C21784FF9883
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
Manifest number: 0303
Signing time: Mon 03 Nov 2025 11:57:09 +0000
Manifest this update: Mon 03 Nov 2025 11:52:09 +0000
Manifest next update: Tue 04 Nov 2025 15:48:09 +0000
Files and hashes: 1: 66335F04863CA1159D16D18E655231764F6FB821.crl (hash: FB2OAMLa1KBOQo9p07eeYSzvRtw1rXPfZVPQm3kCkHQ=)
2: 323830343a6566343a3a2f33322d3438203d3e203238363432.roa (hash: JzjGQK1M4rtVwprTOjmnKYKUuAzDPuYVn8oR4j2kpmA=)
3: 3230312e37362e302e302f32302d3234203d3e203238363432.roa (hash: pCqSftwOk08b00LRMKmI5zfL8Teo7trQmQpUcYowpAk=)
4: 3136382e3232382e3138302e302f32322d3234203d3e203238363432.roa (hash: Jy39sA4HsaYhDh6y327yqdbHmULPvcMkyktzNWwPFFo=)
5: 3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (hash: p2QY/V40D+eIZtIiB9Mj08/mwuLWPUOkeaollMWU7z0=)
6: 3137392e3130382e3136302e302f32302d3234203d3e203238363432.roa (hash: j3+0C1NJ7Br17r/BvrZWggscC9kgoQgX0ncAFit9f5Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl
rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 15:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5b:9b:79:f6:99:2b:ba:f6:28:94:0d:ef:43:c2:17:84:ff:98:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66335F04863CA1159D16D18E655231764F6FB821
Validity
Not Before: Nov 3 11:52:09 2025 GMT
Not After : Nov 4 15:48:09 2025 GMT
Subject: CN=70225BE76CC1AB9C0B1C1AEDF6EC18D2220DDB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:a5:07:cb:3f:7c:ff:5e:25:46:d5:01:c5:
4b:37:44:f8:79:dd:77:43:03:f9:06:9c:15:39:90:
52:43:82:96:2c:3c:06:bc:e0:4b:d3:18:96:07:8d:
61:71:26:3a:39:a8:07:2a:0b:d8:b8:c2:58:79:52:
bd:f6:1b:db:76:7e:54:1d:99:7b:13:9e:f1:8f:3f:
17:78:76:5b:0a:30:50:6f:36:d7:37:e4:71:97:d0:
87:73:13:63:d8:d4:a7:5a:d9:d8:55:6f:fc:6f:20:
d3:3d:ca:79:50:3d:cb:99:f2:23:79:61:5d:42:b6:
b9:5f:82:a7:a8:cb:f5:d6:9c:25:ab:5c:44:d1:ac:
d6:45:e2:78:59:fa:eb:04:3a:47:55:f6:89:11:3c:
e4:06:1e:03:eb:b1:b2:79:30:d6:da:df:b6:93:79:
00:ec:dd:21:6b:10:c6:ef:5d:cb:f4:cd:2f:55:0a:
57:8f:b5:f8:6e:d3:1a:1e:74:4e:17:01:7a:22:b2:
d5:b3:a5:ad:34:b3:38:25:02:67:f7:a3:61:7f:58:
5d:3e:d2:8e:c0:73:d6:25:fa:89:b7:8d:14:ec:1d:
e1:4f:d4:70:6d:2a:6e:99:38:8d:1a:f2:4d:29:33:
8d:f1:aa:5a:3f:df:07:55:22:3d:ae:f6:59:7c:14:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:22:5B:E7:6C:C1:AB:9C:0B:1C:1A:ED:F6:EC:18:D2:22:0D:DB:29
X509v3 Authority Key Identifier:
keyid:66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:6f:d0:7e:40:26:37:28:f2:ad:29:38:f9:fb:e2:0c:af:
e7:18:67:2d:cd:ae:58:94:fa:dd:25:e3:7f:49:0e:3c:80:0f:
ea:eb:dd:3d:97:c4:55:48:e2:22:e3:73:4b:fa:c7:46:f5:b5:
11:a4:46:a1:a5:38:0f:c5:00:03:fb:5c:0d:a7:83:19:88:5f:
08:97:09:0c:1a:02:41:0f:0f:e2:b4:c7:7a:4c:65:76:5b:6c:
a0:f0:e2:be:1c:20:ad:f0:35:bb:88:ed:40:5f:ef:27:d6:fa:
c1:2d:3c:17:4f:df:c6:0e:1e:71:65:8d:df:e0:1b:10:27:58:
33:28:49:9a:9a:8f:6d:94:dc:5f:ce:be:be:80:e5:4e:ef:61:
b3:82:a0:a8:4f:80:1d:3f:a6:b4:29:21:da:61:5a:1d:88:d4:
1c:2a:34:35:5b:11:e2:90:2d:40:98:e0:ac:d0:74:e3:dd:e3:
e3:ee:10:65:b6:19:69:e2:23:f8:a2:8d:92:db:1e:4b:d9:ba:
f3:a2:6f:3e:cf:30:7d:b6:9b:cd:2e:2d:7e:6f:4e:68:8b:8a:
8e:a3:45:63:be:25:5e:cd:93:88:bd:15:cb:cb:81:b1:3b:7c:
1b:f2:3b:5a:ae:0f:02:8e:9a:bc:44:b3:e5:1f:ae:65:76:32:
fa:f6:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:16:31 2025 by rpki-client