
$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.mft
File: 42989E8C598C3C118B7B923968905EB4878C7F12.mft (raw, json)
Hash identifier: Mu/SHnVwKZ7eIIGK+TyOIk7oGxaoLHg3oWZP81d7lUw=
Subject key identifier: 43:2C:2E:8E:7D:7B:D0:EF:A8:76:21:D7:58:22:5F:B5:12:00:F3:BE
Authority key identifier: 42:98:9E:8C:59:8C:3C:11:8B:7B:92:39:68:90:5E:B4:87:8C:7F:12
Certificate issuer: /CN=42989E8C598C3C118B7B923968905EB4878C7F12
Certificate serial: 573EE91BDA0D457D05DC5D887D7FCB9B7AC6D638
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42989E8C598C3C118B7B923968905EB4878C7F12.cer
Subject info access: rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.mft
Manifest number: 1E
Signing time: Mon 03 Nov 2025 10:11:55 +0000
Manifest this update: Mon 03 Nov 2025 10:06:55 +0000
Manifest next update: Tue 04 Nov 2025 10:38:55 +0000
Files and hashes: 1: 34352e3136342e36302e302f32322d3332203d3e20323638363035.roa (hash: bEJ6sUQc9xOKqWtjqYXFzwAg3wbuhFywlPVzyctH77w=)
2: 42989E8C598C3C118B7B923968905EB4878C7F12.crl (hash: MgfWLFIXTZx/odyMxs++NSU8XEvgdR8a1JXW0WGBADA=)
3: 323830343a353363343a3a2f33322d313238203d3e20323638363035.roa (hash: ZiXY6XjcwVZFozxoljRkqyrCJBoP0HjpwNlH+H6APZE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.crl
rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42989E8C598C3C118B7B923968905EB4878C7F12.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 10:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3e:e9:1b:da:0d:45:7d:05:dc:5d:88:7d:7f:cb:9b:7a:c6:d6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42989E8C598C3C118B7B923968905EB4878C7F12
Validity
Not Before: Nov 3 10:06:55 2025 GMT
Not After : Nov 4 10:38:55 2025 GMT
Subject: CN=432C2E8E7D7BD0EFA87621D758225FB51200F3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:99:92:c5:a3:d0:11:77:52:42:56:b9:30:
33:cc:f7:8b:a1:0e:67:b4:ad:d3:4a:e8:29:62:91:
ff:1c:be:ad:1c:f8:d2:7f:b0:74:97:fc:c8:92:35:
5b:11:73:b2:cb:8f:ea:64:2e:17:0f:20:1b:dd:3c:
ab:18:87:70:ea:97:03:a5:21:62:e2:15:fc:4e:7b:
48:7c:db:fc:e7:20:6d:95:3b:b5:d8:8c:38:ba:1e:
d2:da:47:05:03:25:52:44:f8:cf:5b:32:36:0e:a4:
18:42:ab:7c:9a:04:a8:ed:18:47:87:db:9a:f0:0e:
d3:21:09:a5:6a:57:c2:fb:15:5f:23:06:f3:a4:8a:
de:a7:0b:82:f5:50:b3:19:49:2f:57:7e:d9:11:70:
36:cb:bc:25:b7:46:ff:2f:d9:c4:26:df:47:9e:8a:
b2:2d:5f:fb:09:5d:36:3b:e6:6c:05:dc:6f:2e:67:
c2:70:07:d8:e3:e5:53:3d:1b:c4:17:9f:04:39:93:
6f:ea:37:c4:e8:4e:d6:46:77:7b:b0:56:d1:37:82:
b0:bb:39:00:1c:52:08:5e:90:d1:67:1a:d8:ec:5d:
83:dc:1b:6c:c4:ee:d6:a7:7e:ca:a0:a4:1f:4d:96:
ab:fd:5c:a6:20:c7:38:58:31:17:7f:cb:57:21:06:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:2E:8E:7D:7B:D0:EF:A8:76:21:D7:58:22:5F:B5:12:00:F3:BE
X509v3 Authority Key Identifier:
keyid:42:98:9E:8C:59:8C:3C:11:8B:7B:92:39:68:90:5E:B4:87:8C:7F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42989E8C598C3C118B7B923968905EB4878C7F12.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/42989E8C598C3C118B7B923968905EB4878C7F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:d9:65:3a:99:76:08:66:4b:0d:88:72:33:aa:e5:4f:bf:
cc:63:9a:01:cd:69:80:ae:f5:e5:f3:cb:4b:0d:7f:e8:4e:16:
51:fe:32:66:44:12:91:0e:31:76:d4:f6:27:ea:c7:50:14:f2:
9d:a2:9c:07:86:c9:c3:dd:e8:5c:6a:2b:21:c6:10:3a:20:35:
b9:0d:4f:3e:17:c3:d8:98:02:eb:cf:ec:d3:3f:fa:75:d3:89:
33:db:38:8f:ea:91:f1:07:78:5a:60:8a:b3:ab:e4:18:bc:ae:
1b:77:55:3c:e7:d2:3e:6d:d2:2e:39:c2:2b:dd:06:3c:d4:4b:
33:71:ee:a7:8c:e3:8a:9d:2a:62:1b:cb:a2:36:d8:f7:f5:b5:
09:9b:2c:20:93:78:a6:2a:f1:a6:4b:5f:09:90:74:9a:ac:f0:
fd:d3:bb:25:83:03:24:97:05:06:ad:cd:f9:d6:63:8b:a6:be:
ae:68:e0:76:5a:26:e3:04:98:0c:76:57:25:ba:92:2a:21:00:
4d:d0:a0:76:8b:4c:50:a9:9b:3f:de:d8:ca:a6:cc:d2:ab:b1:
20:ec:ec:8e:e0:e8:4e:75:81:01:fb:4c:6f:64:cc:ad:fd:4a:
e0:82:4f:93:26:87:5e:c7:77:a0:43:e9:65:ad:94:07:20:f0:
20:95:82:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVz7pG9oNRX0F3F2IfX/Lm3rG1jgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI5ODlFOEM1OThDM0MxMThCN0I5MjM5Njg5MDVFQjQ4
NzhDN0YxMjAeFw0yNTExMDMxMDA2NTVaFw0yNTExMDQxMDM4NTVaMDMxMTAvBgNV
BAMTKDQzMkMyRThFN0Q3QkQwRUZBODc2MjFENzU4MjI1RkI1MTIwMEYzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyd5mSxaPQEXdSQla5MDPM94uh
Dme0rdNK6Clikf8cvq0c+NJ/sHSX/MiSNVsRc7LLj+pkLhcPIBvdPKsYh3DqlwOl
IWLiFfxOe0h82/znIG2VO7XYjDi6HtLaRwUDJVJE+M9bMjYOpBhCq3yaBKjtGEeH
25rwDtMhCaVqV8L7FV8jBvOkit6nC4L1ULMZSS9XftkRcDbLvCW3Rv8v2cQm30ee
irItX/sJXTY75mwF3G8uZ8JwB9jj5VM9G8QXnwQ5k2/qN8ToTtZGd3uwVtE3grC7
OQAcUghekNFnGtjsXYPcG2zE7tanfsqgpB9Nlqv9XKYgxzhYMRd/y1chBqAxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQywujn170O+odiHXWCJftRIA874wHwYDVR0j
BBgwFoAUQpiejFmMPBGLe5I5aJBetIeMfxIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODJjRVVDQkI4Y2tXckVpYm11TGhBajNiRWJSZEpXdlBuRXp6R3BMUzRy
M1cvMC80Mjk4OUU4QzU5OEMzQzExOEI3QjkyMzk2ODkwNUVCNDg3OEM3RjEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyOTg5RThDNTk4QzNDMTE4
QjdCOTIzOTY4OTA1RUI0ODc4QzdGMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
ODJjRVVDQkI4Y2tXckVpYm11TGhBajNiRWJSZEpXdlBuRXp6R3BMUzRyM1cvMC80
Mjk4OUU4QzU5OEMzQzExOEI3QjkyMzk2ODkwNUVCNDg3OEM3RjEyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfBrZZTqZdghmSw2IcjOq5U+/zGOaAc1pgK715fPLSw1/6E4WUf4yZkQSkQ4x
dtT2J+rHUBTynaKcB4bJw93oXGorIcYQOiA1uQ1PPhfD2JgC68/s0z/6ddOJM9s4
j+qR8Qd4WmCKs6vkGLyuG3dVPOfSPm3SLjnCK90GPNRLM3Hup4zjip0qYhvLojbY
9/W1CZssIJN4pirxpktfCZB0mqzw/dO7JYMDJJcFBq3N+dZji6a+rmjgdlom4wSY
DHZXJbqSKiEATdCgdotMUKmbP97YyqbM0quxIOzsjuDoTnWBAftMb2TMrf1K4IJP
kyaHXsd3oEPpZa2UByDwIJWCIQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:51:17 2025 by rpki-client