
$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json)
Hash identifier: 4sVhMAmM2H2VZ0KNom7+BF1SJwR6oJABYuyDy/6iUks=
Subject key identifier: 39:B6:FF:62:7E:72:BC:12:D0:EC:26:23:98:04:C1:9A:88:8A:31:BC
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial: 65EE7E1A3F9E4B9D5292CC9EE1EE4444101DE410
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
Manifest number: 026D
Signing time: Sun 02 Nov 2025 21:24:29 +0000
Manifest this update: Sun 02 Nov 2025 21:19:29 +0000
Manifest next update: Tue 04 Nov 2025 00:54:29 +0000
Files and hashes: 1: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: 0nfaEfHwdQI5BdLajmRxzlZpzr/zR2hc07bBmvu/aWc=)
2: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: FoVRGGEMnYlNizgn5vNIk6l80xo6phRoD7PVFTnuSpQ=)
3: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: RUhPVJbcOr4gT219vmEfw5IpzZ4PVK7OTvfZxHJfvHY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 00:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ee:7e:1a:3f:9e:4b:9d:52:92:cc:9e:e1:ee:44:44:10:1d:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Validity
Not Before: Nov 2 21:19:29 2025 GMT
Not After : Nov 4 00:54:29 2025 GMT
Subject: CN=39B6FF627E72BC12D0EC26239804C19A888A31BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:59:8e:13:db:8d:da:2d:95:6d:1e:0f:9e:
66:58:3e:1e:16:8f:65:bf:c7:f6:da:8a:30:36:20:
70:44:d8:5e:94:ee:5e:28:27:76:d5:55:8e:67:68:
fa:30:ee:f2:68:f3:b8:f6:a2:8b:04:64:26:df:7b:
8c:06:8b:04:d3:08:00:c2:ed:3c:32:b6:e3:6c:40:
19:a2:45:8d:b5:c4:4f:5a:1c:57:7b:d2:7c:5b:80:
0d:7e:93:bc:80:63:da:ff:5f:fc:aa:5d:0a:e5:ca:
4d:53:11:78:7b:56:7d:db:e5:b5:5d:4b:1d:7f:b9:
a0:1a:e6:24:70:87:35:77:ab:75:80:81:5c:7b:ab:
3d:fd:d3:46:6c:69:f9:f8:65:9e:70:37:28:19:5d:
fd:e7:70:5d:c3:8f:35:e6:c9:de:19:5c:0f:d4:f5:
0b:11:27:a0:06:6f:b5:bf:1d:1a:0e:62:d1:68:7e:
df:71:7b:9c:99:31:35:85:86:60:47:30:1d:06:b6:
04:1e:ca:eb:0a:be:ba:1b:7d:14:88:1f:19:40:43:
2b:22:34:6d:2b:17:c2:e6:dc:20:50:b3:dd:ec:b3:
f7:a6:ef:75:ea:01:75:5a:7e:4f:ff:7f:1e:80:84:
e7:f1:09:c2:11:7b:b3:35:83:36:e7:4e:9b:ba:9a:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:FF:62:7E:72:BC:12:D0:EC:26:23:98:04:C1:9A:88:8A:31:BC
X509v3 Authority Key Identifier:
keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:fd:2f:a6:d2:ec:96:b0:22:9a:79:34:83:af:0d:1d:e1:
af:c0:4c:44:b4:93:9f:ec:74:ab:7e:70:8d:5a:f6:98:ac:13:
21:a8:f8:e8:e7:ae:7a:17:ba:af:84:5b:53:76:0c:7a:a0:6f:
bc:7f:88:45:f1:31:da:c7:ef:4b:bb:47:70:02:0b:03:2e:e6:
15:53:b3:b0:77:fa:4a:47:f4:68:99:40:f2:7b:3d:1c:97:53:
00:73:51:ac:e4:ca:dc:63:ff:5d:f5:81:f2:b2:ba:2e:b3:b7:
8c:0c:3b:ae:f6:4c:a2:60:bf:5d:79:67:10:c1:77:79:2d:32:
6c:f6:4d:9f:ed:6d:10:db:a8:71:ec:68:a9:1b:c8:40:4b:7d:
c0:14:07:76:f5:5d:9b:35:5a:cd:dc:f4:d4:34:85:6b:7a:74:
98:f6:90:67:70:bf:0e:de:51:85:c8:83:e9:07:c4:00:0e:8d:
a2:a2:48:55:97:1a:34:c5:84:bf:88:6e:1d:c9:f5:34:72:69:
73:d0:79:a8:d8:73:31:d3:5b:e7:8f:c0:92:72:83:ae:4c:2d:
63:6b:67:12:1b:28:7c:09:13:80:34:8d:ed:54:b5:2c:75:79:
fd:ef:76:f6:65:99:62:3d:35:6b:e6:97:b6:1d:a6:81:8d:23:
c8:b2:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:09 2025 by rpki-client