
$ rpki-client -vvf rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
File: B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft (raw, json)
Hash identifier: Lg6KdKFlkdMsVJwNwSxjmNppKiJs1f05YIdspgY39sg=
Subject key identifier: 39:DE:7D:AD:50:CF:E1:A7:DA:44:90:35:C5:45:C9:A6:64:E4:F6:F2
Authority key identifier: B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
Certificate issuer: /CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Certificate serial: 41168AA6B20C85A007B3F2FC965D77DCADF5B3E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject info access: rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
Manifest number: 01CC
Signing time: Sun 02 Nov 2025 21:36:18 +0000
Manifest this update: Sun 02 Nov 2025 21:31:18 +0000
Manifest next update: Tue 04 Nov 2025 22:33:18 +0000
Files and hashes: 1: 3137372e31312e31362e302f32322d3234203d3e20323632383639.roa (hash: oPrAn3y9DxuXQ+3LNSKa8EZkbj36H86+krWpcqpxn/4=)
2: 323830343a316332633a313030303a3a2f33362d3336203d3e20323632383639.roa (hash: 7Hlhlg729x9/zHifS8j6zn/RklVH6x286EbXZW4Oe3E=)
3: B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl (hash: uS7EuOTNNneNtwdPUodGWqAJluFg5WVD6gdqmMKDUmM=)
4: 323830343a316332633a3a2f33322d3334203d3e20323632383639.roa (hash: FQhFgIN3oyDj/oqYwVfJYSReEJ0lVxFMka7YObMYVRg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:16:8a:a6:b2:0c:85:a0:07:b3:f2:fc:96:5d:77:dc:ad:f5:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Validity
Not Before: Nov 2 21:31:18 2025 GMT
Not After : Nov 4 22:33:18 2025 GMT
Subject: CN=39DE7DAD50CFE1A7DA449035C545C9A664E4F6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:7e:88:a9:c2:ba:fa:33:85:ce:b5:e3:12:
5a:81:11:ad:2e:33:a1:7a:75:f5:ac:8c:6b:3e:50:
1d:a2:ce:59:93:21:14:2b:e2:78:d4:b9:1e:df:bd:
e4:f0:33:ca:05:0e:0a:b9:e0:a7:17:55:1e:8a:62:
aa:90:b0:11:56:75:99:5c:31:8b:ea:03:e0:ae:38:
e2:c1:5e:6b:a8:ae:e5:48:4a:7c:08:42:07:a0:3d:
c2:f2:c7:de:4a:41:9c:31:af:8f:8a:1e:d6:37:4c:
df:39:91:e0:b1:3e:8f:8b:25:f0:c7:c7:da:7e:50:
4b:5b:13:bc:08:f0:e4:cd:f7:7f:79:b0:14:9f:ba:
e1:fe:ab:ff:b4:3f:f9:60:bf:71:89:86:a1:34:eb:
25:56:e3:bc:8b:4a:fc:68:20:00:8b:7f:26:1b:d9:
c8:c6:33:a9:dc:f5:16:a5:f0:2a:96:8c:0e:07:11:
cf:a8:d7:3c:52:2d:5f:cd:1b:e5:ef:df:f1:72:a7:
52:04:6c:1a:74:53:86:36:7b:d3:cb:5c:ed:b0:46:
56:df:1b:9d:0d:46:a8:73:ca:0a:4e:7f:f0:fc:0b:
b2:95:f4:83:69:ea:3a:fb:f7:d3:71:8f:7f:d1:f2:
b4:f3:f1:3f:85:23:db:c5:7d:c1:fa:41:68:46:f3:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:7D:AD:50:CF:E1:A7:DA:44:90:35:C5:45:C9:A6:64:E4:F6:F2
X509v3 Authority Key Identifier:
keyid:B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:61:8a:0d:75:99:3d:0d:d3:b5:a9:3a:9f:3b:a6:ca:66:8d:
5e:14:6c:8a:6a:e8:bb:bb:a9:84:8f:e4:5a:dd:0f:f0:40:41:
e6:d7:00:35:e1:b3:8b:df:9b:2d:f6:2c:55:9d:fe:d6:27:35:
84:98:55:22:3b:f0:f4:3a:5f:f5:db:4b:c9:fe:39:34:2a:7e:
6e:b8:bf:32:8d:91:c0:00:7e:16:03:3c:de:2e:c6:7c:49:5e:
dd:d6:3b:a5:07:6c:ca:c4:8f:ef:55:77:91:9b:9e:ca:ba:2f:
bd:a9:2b:eb:f8:fa:b9:d2:16:cd:f0:c0:91:e4:78:54:01:9e:
2b:0e:66:24:e8:7f:ca:5d:77:38:16:12:e0:80:47:ac:3d:7a:
0b:00:42:bf:73:73:51:9d:28:c4:cc:48:03:98:46:2e:6a:9a:
aa:cf:4f:5d:73:91:86:12:8e:e1:49:b3:fd:c1:50:08:e2:2c:
78:61:e4:43:ed:43:a2:a1:7d:25:b8:a1:7d:d3:eb:45:f7:7c:
86:3a:0e:ed:06:b7:28:b6:83:00:3f:81:a4:73:06:39:27:b8:
71:62:1d:3e:83:9f:1b:19:56:3a:95:a8:ad:86:78:b5:e9:16:
a4:68:43:f8:e7:d6:5e:6a:3b:0f:e4:f8:15:c4:c0:50:96:1e:
15:39:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:05 2025 by rpki-client