
$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
File: 4E865237E426925D454145603E8DE8C3ABC12D0F.mft (raw, json)
Hash identifier: PHU5EezTBGxoQzjlD5AaqN4Yx8vs+AMMUP/JgscrUAg=
Subject key identifier: 23:33:02:45:F3:E6:3F:84:6B:68:6B:AA:CF:E6:DA:F3:B1:51:65:0D
Authority key identifier: 4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F
Certificate issuer: /CN=4E865237E426925D454145603E8DE8C3ABC12D0F
Certificate serial: 0BBE3D69BE2D0DFEBDE1C1BC2E2B02B918D7D7C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
Manifest number: 02FC
Signing time: Sun 02 Nov 2025 20:20:49 +0000
Manifest this update: Sun 02 Nov 2025 20:15:49 +0000
Manifest next update: Mon 03 Nov 2025 22:52:49 +0000
Files and hashes: 1: 4E865237E426925D454145603E8DE8C3ABC12D0F.crl (hash: mhsL/rbwIzYuhCJ+0xskbUjnl9DXR2PfdI15h0b42W0=)
2: 34352e3138342e3134302e302f32322d3234203d3e20323639333430.roa (hash: OpU0/tEQBI+4vThuFy3ZyGUvrgYx1ggjKv8RdD5tmtM=)
3: 323830343a363332303a3a2f33322d3336203d3e20323639333430.roa (hash: 1zv4Gfvoo8oW8O9l/92CrciW8YXFwb8aKjX8u8vuL4s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl
rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 22:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:be:3d:69:be:2d:0d:fe:bd:e1:c1:bc:2e:2b:02:b9:18:d7:d7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E865237E426925D454145603E8DE8C3ABC12D0F
Validity
Not Before: Nov 2 20:15:49 2025 GMT
Not After : Nov 3 22:52:49 2025 GMT
Subject: CN=23330245F3E63F846B686BAACFE6DAF3B151650D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:6a:a9:58:f9:34:d1:8a:13:a9:b6:6c:76:
61:c6:15:89:74:d8:b8:87:57:6d:ed:91:f0:46:ba:
51:ee:0b:27:26:bd:25:53:4e:b9:22:da:ef:4c:9a:
80:de:c5:69:92:28:fa:1e:98:c4:6b:20:93:a2:49:
e5:8b:f0:f3:64:4f:3a:28:45:25:59:97:81:83:d4:
4c:0c:68:d0:e9:ed:cf:b0:de:dd:b8:d9:aa:42:2e:
dc:e6:26:21:ff:ab:a0:70:63:4f:a9:d1:d4:e5:28:
cc:66:74:97:2c:32:a5:63:58:29:cd:7e:90:5a:66:
db:d3:a4:95:98:09:70:65:ef:20:b7:a3:b3:33:80:
8a:71:b4:73:29:f2:d5:19:ee:37:a3:74:b2:0e:ee:
c0:fe:ee:1b:e5:79:12:63:46:97:ee:32:43:78:1a:
52:16:90:d1:17:09:dd:bb:e7:2c:0d:53:87:1a:8c:
a4:4c:75:61:02:66:e0:6e:23:c7:b0:17:04:47:51:
d8:bc:22:75:ba:9c:d6:b1:a8:77:74:0e:ac:d3:49:
50:5c:aa:c0:57:b9:18:af:6c:50:b4:da:55:50:18:
96:6e:2a:06:77:42:4a:50:a2:e3:b7:66:47:55:ba:
1c:80:ea:f4:61:02:76:47:a4:80:5d:f7:4e:47:f1:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:02:45:F3:E6:3F:84:6B:68:6B:AA:CF:E6:DA:F3:B1:51:65:0D
X509v3 Authority Key Identifier:
keyid:4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:10:36:05:0e:dc:74:54:11:4a:98:9f:8f:1c:43:5a:07:f0:
7c:da:96:3e:85:96:05:67:fd:f6:b1:5b:27:c1:25:53:25:3a:
63:7e:4c:31:47:de:15:ab:1c:f6:44:81:52:7e:1e:3d:ab:ee:
95:4c:bb:50:9a:16:15:f2:fe:b7:29:af:6a:78:45:98:a0:d9:
36:f0:92:fa:b0:b9:b7:f3:77:97:46:e4:30:14:82:ab:32:fd:
8e:b3:d0:22:30:60:01:0b:13:f1:4a:db:c5:24:0b:70:fc:2c:
8d:df:f5:db:5a:34:56:c1:8b:e9:8f:9b:3a:7f:ad:4e:da:fb:
e4:43:23:87:3e:96:4b:b8:d5:26:61:da:2a:8c:8d:5d:15:9b:
ae:e7:db:64:21:a0:4b:fc:62:63:49:d1:40:a4:ac:87:1e:4d:
54:d4:09:2a:b8:0f:9f:3b:00:5e:11:90:b3:fe:04:62:49:2f:
1e:c7:9f:2f:01:07:9b:b7:66:39:05:07:44:70:83:b9:5f:22:
29:59:33:5f:9b:4a:92:9d:56:25:4c:ab:8e:c9:ce:42:d8:a9:
46:89:89:e5:47:92:19:a4:20:4c:94:a3:90:83:75:c4:70:2e:
65:b4:d3:4e:a2:3f:f2:10:70:48:72:b4:1b:b0:62:a2:b3:bb:
2a:25:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:35:13 2025 by rpki-client