
$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
File: E453E20A56024AF3442573067B74ACA8B5BA9A21.mft (raw, json)
Hash identifier: 9Jl+joFZIGTm6pL/CaWz22YKSpJ4TZo21PKr7XYJZts=
Subject key identifier: F4:94:CE:DD:93:18:2C:5A:C7:BA:1A:C3:59:4B:D3:0D:D8:1E:CC:F0
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Certificate issuer: /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial: 45CE5AB7EEC411D8E39E565546DBBDC52CB49283
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
Manifest number: 39
Signing time: Mon 03 Nov 2025 03:55:12 +0000
Manifest this update: Mon 03 Nov 2025 03:50:12 +0000
Manifest next update: Tue 04 Nov 2025 06:45:12 +0000
Files and hashes: 1: 323830343a313030343a3a2f33322d313238203d3e20323633363134.roa (hash: gP1+tV8PZpmWvFZx2ZokAC1/6/KG+6AUmXgUNlcQVn0=)
2: 3137372e32332e3130382e302f32322d3332203d3e20323633363134.roa (hash: gzVKTUf9hfHyUdfncEBsJl+/LKWAmpK7lpMlqxyiQdo=)
3: E453E20A56024AF3442573067B74ACA8B5BA9A21.crl (hash: 2gvT4dvYh9CjJDeSeLWMCaLCB58EHeVv1YcdVKzQmwk=)
4: 3136382e3233322e3232302e302f32322d3332203d3e20323633363134.roa (hash: SSpL4BGoMz2k8jMxASGNw8sxc3SoRqRXzUJjtI/QT14=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 06:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ce:5a:b7:ee:c4:11:d8:e3:9e:56:55:46:db:bd:c5:2c:b4:92:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Validity
Not Before: Nov 3 03:50:12 2025 GMT
Not After : Nov 4 06:45:12 2025 GMT
Subject: CN=F494CEDD93182C5AC7BA1AC3594BD30DD81ECCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:eb:71:45:99:3d:c0:51:d3:ef:da:d2:f8:
44:3a:4a:df:be:7f:66:b2:bc:7c:97:57:7e:1e:bc:
bf:76:48:ff:f8:d1:fd:2b:0a:bd:bb:a4:ef:86:d1:
84:93:21:0b:7e:21:f3:2e:44:70:8b:2e:c5:b4:56:
3e:6e:d8:2e:dc:3f:b6:7e:20:47:60:67:c6:5c:e0:
32:4a:8b:fa:1c:74:de:1c:b8:6c:47:c0:5a:00:b4:
7d:2f:fa:54:f6:4e:c8:19:06:b4:31:c9:c9:21:c4:
15:3b:75:4d:ba:ef:7b:6b:4e:18:44:a0:47:2d:36:
38:f7:de:57:b4:74:ce:ab:36:db:ed:f7:85:c6:24:
8c:d1:f8:59:54:c7:9e:c9:b8:33:77:52:58:57:57:
5a:56:32:de:1f:81:d7:ea:ef:fb:d3:7a:af:32:4e:
02:49:ff:a1:00:b7:04:10:01:b8:f5:f2:73:5e:61:
40:be:26:00:d3:06:48:25:79:06:7a:a6:86:17:a8:
42:ea:68:39:2d:f6:3d:00:c0:f1:c6:6f:f7:f9:08:
29:0d:c1:95:df:9d:8e:0b:0d:62:65:a3:5e:3f:42:
9d:b7:a8:d6:39:83:16:fb:10:ef:9f:45:2b:52:be:
9a:21:6c:92:5d:d7:ad:d8:64:cf:ee:bc:58:8d:58:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:CE:DD:93:18:2C:5A:C7:BA:1A:C3:59:4B:D3:0D:D8:1E:CC:F0
X509v3 Authority Key Identifier:
keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:64:1d:4e:fa:45:1b:6c:ee:aa:8c:aa:e9:b5:eb:4f:4e:f1:
3c:03:d2:e5:2c:78:73:74:cc:93:a9:fc:fd:25:09:48:72:94:
f9:38:d4:aa:f4:ee:65:77:53:bc:d5:22:b9:3d:04:ad:d1:72:
f4:27:c0:07:8d:a6:e3:4a:cc:f3:18:91:64:17:97:7a:f1:46:
16:66:1b:03:1f:f6:ea:74:d2:bc:70:51:09:e8:59:8b:32:df:
d7:95:ec:bb:f1:96:fd:e6:d5:c6:d0:e1:80:78:be:72:42:04:
cb:33:00:b9:23:fa:b5:66:a9:22:2e:76:08:15:b9:7b:cb:4c:
72:3b:7c:d3:7e:68:cb:1b:ae:28:b5:23:51:c9:af:b4:ae:bc:
00:4e:62:bc:fa:cb:e2:dc:f4:76:bd:9f:47:88:c5:56:a0:68:
00:a5:6f:49:28:33:d7:1d:86:90:cc:a5:9c:d5:6e:e4:18:5d:
66:28:e9:b8:f6:8c:c3:50:b4:ee:03:30:55:7c:ed:33:32:53:
fb:6e:4b:29:50:53:1c:4e:e6:62:da:f6:d8:ae:d7:da:e9:05:
e5:46:c7:60:51:3b:9a:0e:35:c1:62:01:eb:01:f7:5a:75:aa:
51:4d:b8:9c:da:ff:7c:20:10:d2:fc:f4:12:bd:f3:0d:c7:4c:
25:6c:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:15:40 2025 by rpki-client