
$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
File: 620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft (raw, json)
Hash identifier: j6QmKN+jgjRhOlJtoy3PMNRhDUebXJEpxii/YxqTfek=
Subject key identifier: 18:C6:2F:D8:57:FD:87:F0:8E:7A:F4:07:AC:86:27:AF:35:90:E4:FA
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Certificate issuer: /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial: 2A17E6D70774D0C76FAC9E2F231FBD7DA3E7F405
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
Manifest number: 0302
Signing time: Wed 05 Nov 2025 20:41:50 +0000
Manifest this update: Wed 05 Nov 2025 20:36:50 +0000
Manifest next update: Thu 06 Nov 2025 23:39:50 +0000
Files and hashes: 1: 323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (hash: yeyv1frSPYBG6BvaPn4CI2nT+sQRdSMMArQPEapcBm0=)
2: 620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl (hash: grzlZnPjLjUR406nHHkmR7BLDAzIaXWCQSlZVZu6HG8=)
3: 34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (hash: vmUqtdLNe6sx3wOlzgRDPBjYrf5oAD5yUM/mEpGrWK0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 23:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:17:e6:d7:07:74:d0:c7:6f:ac:9e:2f:23:1f:bd:7d:a3:e7:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Validity
Not Before: Nov 5 20:36:50 2025 GMT
Not After : Nov 6 23:39:50 2025 GMT
Subject: CN=18C62FD857FD87F08E7AF407AC8627AF3590E4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:99:f3:c2:32:af:13:04:44:7b:bc:b0:84:
4c:74:03:02:ea:8b:f0:92:e9:d5:d0:7a:73:1b:82:
9c:22:8c:49:8e:ec:d9:d7:6b:31:54:3b:5a:78:ef:
63:39:90:3a:e9:05:f2:b3:17:b1:82:aa:11:b2:63:
2e:cb:74:9b:a8:11:af:21:ce:42:0c:c9:80:af:3c:
14:74:15:82:c8:a9:1b:cf:85:ce:c3:32:ae:53:b5:
62:ab:d3:fb:01:94:12:28:81:1b:79:2a:dd:2e:3e:
0a:91:7e:d5:f3:72:c8:c3:3d:a7:4a:4d:cb:78:6c:
4e:9b:82:d2:d7:da:3e:4b:23:30:7f:c6:82:06:80:
96:03:e4:0e:b8:eb:b1:65:7b:37:bc:25:29:a0:1d:
39:ce:8f:f1:c4:df:63:5c:dc:9b:4e:82:fa:99:64:
49:fa:36:ca:0b:f8:ce:d2:c3:95:ea:79:75:08:d8:
a9:bd:26:dd:5d:94:e9:bf:57:2a:e2:53:75:50:e9:
7b:74:04:c0:4f:f8:00:19:78:e2:1b:76:96:1b:56:
b0:db:a3:46:3f:55:77:cd:30:98:d9:01:ae:c6:99:
26:2d:ce:1a:93:e1:7b:a0:b8:d7:57:44:bd:4d:07:
fa:25:b6:5b:93:8c:4a:11:f8:c0:ba:c8:67:3d:5d:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C6:2F:D8:57:FD:87:F0:8E:7A:F4:07:AC:86:27:AF:35:90:E4:FA
X509v3 Authority Key Identifier:
keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:64:51:d2:60:4a:b2:86:48:04:37:79:c6:4a:d3:92:7f:7c:
4d:2a:a9:07:5f:2b:ae:bf:6f:82:9a:68:17:7f:f7:ab:22:3d:
be:20:62:d2:17:a1:50:38:f6:48:24:6f:23:dc:7b:a7:f8:a2:
11:06:8f:7b:c4:05:87:b9:30:47:fb:91:c1:35:4d:66:f2:42:
9b:67:08:0e:f7:83:5d:fc:c7:fb:f9:12:d6:cb:af:bb:dd:c5:
7b:10:e5:ab:a9:93:28:1f:55:a8:53:6b:1e:98:0e:35:ff:c2:
d2:18:d9:f7:7a:97:f8:2d:92:f7:3c:4f:06:0a:5d:70:d1:ea:
7f:90:1e:49:77:d4:24:97:2d:b0:a7:3d:ee:68:de:ad:39:e2:
88:75:62:e9:fb:12:3f:4a:4a:48:e6:75:55:e8:92:af:0c:e0:
66:f6:ca:69:ee:05:72:e0:66:41:14:fd:c7:33:98:7b:24:8e:
5f:bc:cd:fd:6b:f2:d1:23:d2:a2:27:e0:cf:ae:84:79:21:4b:
e4:01:c5:28:c6:a1:64:b9:2b:8c:43:e3:71:ab:f8:51:76:4b:
cb:e0:d4:19:52:35:d0:57:22:d5:e4:2d:cc:80:7a:c1:27:2c:
e7:a0:e0:9d:f5:99:fe:d7:2e:ca:eb:58:09:21:21:80:62:05:
9a:e7:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:39:45 2025 by rpki-client