
$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
File: CC96ED49391396FC76164F871315FEAD2DEE5F35.mft (raw, json)
Hash identifier: 9OhuoY4p3T1HCm7r0rUlAoD3ClVXTHNV0xkorWB99rQ=
Subject key identifier: BC:22:A3:F1:3F:94:E7:04:55:B4:BA:8D:5D:E0:B8:F6:0B:C1:1C:38
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Certificate issuer: /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial: 69E776F0BF8F7E45758313BC9F00AFE58AD29368
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
Manifest number: 0238
Signing time: Mon 03 Nov 2025 02:33:01 +0000
Manifest this update: Mon 03 Nov 2025 02:28:01 +0000
Manifest next update: Tue 04 Nov 2025 03:51:01 +0000
Files and hashes: 1: 34352e3232362e36302e302f32322d3332203d3e20323636393635.roa (hash: uzLW3hrIA1gUVBQstRIq+LR5yk5lj83i174TAUSTYLc=)
2: 323830343a343630633a3a2f33322d313238203d3e20323636393635.roa (hash: gMzRLLMvGVZxcM7m0CplSwzD+qyWm8PqZzC07LmqXr8=)
3: CC96ED49391396FC76164F871315FEAD2DEE5F35.crl (hash: aP49NZQkQU8To6eMM1p7x2w0Je8I53udfcO2opez76g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 03:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e7:76:f0:bf:8f:7e:45:75:83:13:bc:9f:00:af:e5:8a:d2:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Validity
Not Before: Nov 3 02:28:01 2025 GMT
Not After : Nov 4 03:51:01 2025 GMT
Subject: CN=BC22A3F13F94E70455B4BA8D5DE0B8F60BC11C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:01:53:30:03:6c:84:8f:be:15:ed:1f:91:
24:6f:f3:81:38:ab:03:fc:c9:04:03:9a:f2:8c:77:
9f:b7:94:38:12:05:71:03:73:21:fc:cd:cc:b5:a9:
60:6f:4b:9a:5e:34:b8:45:00:e5:4c:5f:f5:bb:b4:
1c:67:8d:a2:98:45:83:68:10:c9:b6:ed:0f:fc:a6:
f2:1d:12:ff:d6:be:eb:7c:05:57:41:73:91:ee:f4:
fe:86:21:0e:85:88:97:07:69:65:10:dc:3b:04:5e:
9a:3e:ab:d8:0d:54:05:95:2d:de:27:19:9a:de:e1:
86:02:b7:5c:18:da:87:3c:82:e5:ad:29:0b:cc:6b:
86:87:19:1c:b8:34:cb:89:e5:25:46:ba:4c:c1:d2:
7b:47:49:1f:7b:20:e6:b4:04:b3:7e:d5:12:6a:60:
46:3c:34:76:0f:7b:be:4f:df:02:d7:b1:61:07:57:
85:c1:f0:06:2c:54:ce:da:d7:3c:b5:35:b6:6c:33:
49:03:5a:bb:7d:56:6a:3d:f0:97:f4:99:7a:1c:56:
a4:1a:96:14:2e:68:e6:9b:d9:6d:aa:ea:49:c3:5c:
e9:70:87:27:c1:0b:f1:7a:c4:38:f5:d8:79:5c:45:
99:68:da:e6:ed:a4:b4:ce:36:12:e6:b2:e0:de:0c:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:A3:F1:3F:94:E7:04:55:B4:BA:8D:5D:E0:B8:F6:0B:C1:1C:38
X509v3 Authority Key Identifier:
keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9c:2a:b9:fa:7a:a1:e9:67:f9:58:e4:72:62:47:fd:58:de:
69:b9:af:fe:aa:3e:17:66:fd:f9:7d:fa:c1:92:16:a3:f4:12:
69:68:52:9d:fc:16:fb:54:b5:c9:10:19:21:31:fd:b6:e7:d2:
aa:b4:39:cb:1f:33:b3:c5:57:15:38:b0:50:f6:49:e8:88:2a:
6e:a5:b9:56:14:99:9c:87:4a:7d:bb:eb:58:91:39:f9:68:9a:
01:9d:13:7f:41:aa:ea:7b:4b:f5:1c:18:9f:95:31:38:6f:6b:
9a:d0:90:14:cc:84:04:74:67:fc:54:fe:7f:85:94:c5:e0:95:
fe:4f:14:ca:1b:d9:0b:97:14:67:fa:7a:bf:6c:3b:35:4d:fc:
cc:7d:fc:a7:96:6d:f7:8c:93:ab:6a:93:d9:8a:73:f4:45:03:
de:a5:92:5f:97:60:57:18:a5:4b:3f:ad:6d:3a:ef:f7:a5:73:
41:0f:d3:31:86:8d:c6:c1:fb:ee:66:4f:66:93:37:1f:c1:6a:
d9:15:c5:a0:22:c6:dd:46:4d:f7:e3:b5:59:33:9a:b2:22:8c:
9e:65:4c:9a:2b:4d:aa:fa:a2:d8:32:e8:06:02:bb:60:e1:23:
52:83:e4:df:a1:5a:d9:18:47:dd:17:c6:82:2b:e1:ea:4e:eb:
e4:22:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:20:01 2025 by rpki-client