
$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
File: B20E3C8281FB009A48EDFE56131C930D739F11C4.mft (raw, json)
Hash identifier: FTH848ZItrNYrxCGHx/p4cERRWGP0qaKbJZipYZv+0c=
Subject key identifier: F4:37:42:EA:70:E6:FC:6B:35:72:F8:23:13:39:07:89:E3:42:AD:AE
Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Certificate issuer: /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Certificate serial: 38B6C74A3C758BFE46679F7DC9F9EE6D5A4A8727
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
Manifest number: 02CA
Signing time: Sun 02 Nov 2025 17:51:46 +0000
Manifest this update: Sun 02 Nov 2025 17:46:46 +0000
Manifest next update: Mon 03 Nov 2025 20:22:46 +0000
Files and hashes: 1: 323830343a323861343a3a2f33322d3334203d3e20323633393732.roa (hash: ahxK+WMTsV39KQhAViLFQ4numR+SobUNh2vqNKZYm0M=)
2: 3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (hash: gdg4CkiWZlxLCSS9uiJZl16iA1AfnTQyxIxntLHmqDo=)
3: B20E3C8281FB009A48EDFE56131C930D739F11C4.crl (hash: fqrsqsQg7z4YvFrWhTL6MtzRC8UeQfaTgmBteI2QOU0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b6:c7:4a:3c:75:8b:fe:46:67:9f:7d:c9:f9:ee:6d:5a:4a:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Validity
Not Before: Nov 2 17:46:46 2025 GMT
Not After : Nov 3 20:22:46 2025 GMT
Subject: CN=F43742EA70E6FC6B3572F82313390789E342ADAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:87:22:14:b8:05:d8:0f:55:ab:c0:fd:d6:
58:8f:53:bd:49:05:ea:75:2f:7b:b0:0e:a6:85:a9:
cc:3f:15:fd:3b:94:77:e6:e2:5d:67:c4:08:f4:19:
b0:0b:9f:db:9d:5e:84:a0:31:e7:09:da:89:cf:9b:
2b:02:a7:6c:e6:0b:45:39:01:11:5c:36:fc:3c:5c:
ef:3b:0e:09:32:8c:4c:5c:47:a8:3e:35:4c:1e:eb:
5c:31:15:1d:ca:51:e0:ab:43:ff:6d:ce:02:f5:11:
fc:7d:31:00:33:f0:37:4a:06:0f:63:4f:9b:04:be:
a2:6a:de:4d:8b:50:75:b8:9b:10:cb:29:78:59:0e:
87:7d:97:72:0a:fb:de:9f:6c:4b:c5:08:02:0f:27:
39:5b:cf:9b:86:2c:2d:38:42:6b:df:9e:93:a4:3f:
01:16:85:fd:1a:0f:b7:65:51:0e:dc:b0:ea:21:68:
f0:d7:3f:c6:08:a5:da:dd:e7:2c:b6:cf:f8:e5:48:
fe:36:21:33:40:90:9e:8e:79:9b:16:ba:49:58:19:
d3:c0:83:c8:76:18:ad:39:95:55:0d:92:1a:68:67:
54:87:91:47:53:7c:93:5b:3e:96:42:34:a9:e1:ea:
89:30:9b:ad:af:83:13:d2:c7:e3:6d:9a:23:41:23:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:37:42:EA:70:E6:FC:6B:35:72:F8:23:13:39:07:89:E3:42:AD:AE
X509v3 Authority Key Identifier:
keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:89:e0:6f:93:65:5c:d7:c3:ff:50:f9:54:2d:c8:79:9d:
dc:30:45:f6:5e:c8:b0:b5:74:ac:47:49:23:8e:e3:ea:c5:d9:
ad:0e:fa:76:d5:d8:2c:16:f4:44:04:f7:09:52:54:10:8f:63:
cb:76:a4:d6:59:94:96:f3:89:95:4c:8e:62:71:ab:a9:0f:b6:
ff:4d:df:84:03:a5:3f:5b:87:2a:2a:bf:da:88:cd:51:b9:d2:
36:f5:ea:ea:11:52:27:e1:1b:83:b7:40:88:1d:d5:10:d4:a4:
3d:78:44:ce:ff:f6:80:0c:26:b6:2f:df:45:e6:91:ba:48:0c:
78:85:4f:ad:99:f3:ad:40:72:c3:86:10:a9:30:80:57:4f:b7:
a5:7c:bd:e7:40:e9:51:7f:ce:60:5a:8d:21:12:71:8d:59:f5:
71:bf:0b:29:2e:c3:18:f2:05:fe:54:3f:70:88:46:26:1e:6d:
b7:15:d4:30:0d:16:df:26:df:38:1f:4f:36:1b:28:83:ec:00:
46:bb:d9:86:09:26:2a:43:b4:b4:5c:b1:03:85:5e:64:2a:22:
61:0f:1b:98:0e:0c:fc:ac:4f:74:92:62:4c:7e:c1:f1:47:52:
bf:8d:11:37:f5:d8:1d:b4:e3:07:d7:bd:c0:dc:57:b0:59:14:
df:c0:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:09 2025 by rpki-client