
$ rpki-client -vvf rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
File: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft (raw, json)
Hash identifier: 2dUMs3OtDQz4zzY2gaAKQC4SdVHM4v8Nu9Frdh+zDqc=
Subject key identifier: DA:92:C5:3E:E6:CD:5D:BE:C8:35:D6:7E:FC:3F:21:60:0B:75:63:15
Authority key identifier: 25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Certificate issuer: /CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Certificate serial: 61BE4C436C87061548E89F4F976C9E5E993998E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
Manifest number: 0305
Signing time: Thu 06 Nov 2025 04:21:03 +0000
Manifest this update: Thu 06 Nov 2025 04:16:03 +0000
Manifest next update: Fri 07 Nov 2025 04:38:03 +0000
Files and hashes: 1: 25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl (hash: mZmVqkwnw0lPbmMOVA9sQGDE74Ks53Yxix6aAg/cji0=)
2: 323830343a336566383a3a2f33322d3430203d3e20323636363332.roa (hash: hVK/GH5J5gESoNpOj4BeuJw0gt9hYssVFQjGwQ3BqNw=)
3: 3132382e3230312e3134382e302f32322d3234203d3e20323636363332.roa (hash: stP92oJ4IE5MiAZ9P5AQoFIryaIIHVovcUqJt+GD6Mc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 07 Nov 2025 04:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:be:4c:43:6c:87:06:15:48:e8:9f:4f:97:6c:9e:5e:99:39:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
Validity
Not Before: Nov 6 04:16:03 2025 GMT
Not After : Nov 7 04:38:03 2025 GMT
Subject: CN=DA92C53EE6CD5DBEC835D67EFC3F21600B756315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:81:29:43:c6:f3:71:57:0c:89:97:e2:44:
d9:6e:8b:8c:45:f8:83:f9:b7:87:de:66:d5:ec:07:
f4:68:a2:2e:ee:23:df:a1:8f:a2:b8:07:d8:b6:4c:
f9:9c:39:40:a2:d5:d7:80:f3:9b:7f:0e:0f:6a:96:
98:b5:8e:4d:41:33:1f:19:5b:2d:3b:8a:91:10:15:
d5:29:0d:7b:b2:3f:9b:da:c1:1c:06:d1:d6:18:fb:
e7:6f:37:6e:6c:62:e3:18:fc:11:2c:9e:63:f7:31:
f5:4d:a0:6c:27:58:9c:4c:ed:0b:c8:f1:45:93:e8:
b7:1f:b1:24:3b:4a:27:a4:76:68:70:9b:31:dc:9f:
1b:10:10:c2:55:9b:5a:e5:f5:45:5d:ad:b4:11:2e:
16:28:87:22:f4:fb:b3:43:c8:c3:2d:a2:a2:d7:41:
27:77:6c:52:a6:1b:62:70:24:bb:41:be:a1:49:5e:
e4:b5:32:76:73:88:d8:09:70:6d:21:eb:7a:3f:98:
a2:d4:41:1a:2b:be:e9:78:ea:d2:a8:c2:ff:89:27:
76:c8:30:f4:3c:a6:ce:1e:8d:36:00:0a:33:04:b7:
be:1c:f1:a6:3b:1c:6e:a9:90:1c:52:20:8f:77:e6:
40:de:c0:46:91:9a:06:bb:a3:79:d4:83:0f:51:00:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:C5:3E:E6:CD:5D:BE:C8:35:D6:7E:FC:3F:21:60:0B:75:63:15
X509v3 Authority Key Identifier:
keyid:25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:20:d2:60:4b:aa:2a:a7:b7:b5:27:0e:b3:44:4b:c0:13:
af:10:25:8c:a9:de:94:22:14:49:ab:2a:a3:d4:c5:ff:d8:41:
4a:96:a6:3c:4d:0d:2e:90:16:28:e5:95:c9:31:af:93:0b:2a:
98:e8:4c:3a:2e:c1:ac:74:19:dc:df:c5:5c:e8:6e:68:93:d1:
1d:d6:99:9c:2e:f0:e6:58:be:7d:e3:fb:32:3e:3f:70:22:00:
d6:97:94:5b:33:d7:f9:04:f0:74:0b:fb:c4:44:e3:6e:90:c3:
21:f7:b8:12:d4:a1:ef:9b:77:31:d1:91:d2:36:d3:e9:72:fb:
da:a9:83:f4:53:03:ab:b8:28:b7:34:f2:00:5a:eb:ac:18:c2:
56:bb:03:fd:04:a4:49:3d:f2:27:99:7a:ab:99:82:0a:c1:f5:
ec:6d:ff:0f:00:95:83:04:98:a3:c2:13:70:02:bf:9e:9f:23:
1a:46:5f:8d:52:9e:d6:35:e1:0a:64:84:9d:38:f7:01:25:71:
6c:50:1e:34:6b:f8:1d:75:95:ec:f4:15:d2:22:3c:36:aa:68:
1d:f2:b8:e4:9b:79:b4:0f:5e:bb:3c:e8:5e:d5:6e:4c:ad:1d:
72:68:b7:86:63:ca:48:2b:2a:e0:8a:a8:99:9b:07:81:61:88:
95:36:e2:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYb5MQ2yHBhVI6J9Pl2yeXpk5mOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU2Nzg5OTdENjY2QkY5MjgxRkZFQUI3OEI2RDI4QTFG
QTUxRkY3ODAeFw0yNTExMDYwNDE2MDNaFw0yNTExMDcwNDM4MDNaMDMxMTAvBgNV
BAMTKERBOTJDNTNFRTZDRDVEQkVDODM1RDY3RUZDM0YyMTYwMEI3NTYzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgIEpQ8bzcVcMiZfiRNlui4xF
+IP5t4feZtXsB/Rooi7uI9+hj6K4B9i2TPmcOUCi1deA85t/Dg9qlpi1jk1BMx8Z
Wy07ipEQFdUpDXuyP5vawRwG0dYY++dvN25sYuMY/BEsnmP3MfVNoGwnWJxM7QvI
8UWT6LcfsSQ7SiekdmhwmzHcnxsQEMJVm1rl9UVdrbQRLhYohyL0+7NDyMMtoqLX
QSd3bFKmG2JwJLtBvqFJXuS1MnZziNgJcG0h63o/mKLUQRorvul46tKowv+JJ3bI
MPQ8ps4ejTYACjMEt74c8aY7HG6pkBxSII935kDewEaRmga7o3nUgw9RAFYdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2pLFPubNXb7INdZ+/D8hYAt1YxUwHwYDVR0j
BBgwFoAUJWeJl9Zmv5KB/+q3i20oofpR/3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJE
SzcvMS8yNTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1Njc4OTk3RDY2NkJGOTI4
MUZGRUFCNzhCNkQyOEExRkE1MUZGNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0pvbjJzMVkxQWtWQ3N0TUhOR1lqYnR5Q2VmdEFRS1JlUXBvM3FGcmJESzcvMS8y
NTY3ODk5N0Q2NjZCRjkyODFGRkVBQjc4QjZEMjhBMUZBNTFGRjc4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFTYg0mBLqiqnt7UnDrNES8ATrxAljKnelCIUSasqo9TF/9hBSpamPE0NLpAW
KOWVyTGvkwsqmOhMOi7BrHQZ3N/FXOhuaJPRHdaZnC7w5li+feP7Mj4/cCIA1peU
WzPX+QTwdAv7xETjbpDDIfe4EtSh75t3MdGR0jbT6XL72qmD9FMDq7gotzTyAFrr
rBjCVrsD/QSkST3yJ5l6q5mCCsH17G3/DwCVgwSYo8ITcAK/np8jGkZfjVKe1jXh
CmSEnTj3ASVxbFAeNGv4HXWV7PQV0iI8NqpoHfK45Jt5tA9euzzoXtVuTK0dcmi3
hmPKSCsq4IqomZsHgWGIlTbicQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:39:50 2025 by rpki-client