
$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
File: CF357620357B25129A68E7D55D716CED7E4E1516.mft (raw, json)
Hash identifier: 5aY/sGyYu2BEtX2nAGB4q/GkbMWRvnx/NONTmEGVhbs=
Subject key identifier: AD:5D:70:35:4B:D5:26:AD:60:94:87:96:E1:FC:73:22:9B:64:32:68
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Certificate issuer: /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial: 22ED178A8018968F85722E5ED5EEB888DFFD6924
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
Manifest number: 01E4
Signing time: Sun 02 Nov 2025 19:46:37 +0000
Manifest this update: Sun 02 Nov 2025 19:41:37 +0000
Manifest next update: Mon 03 Nov 2025 20:46:37 +0000
Files and hashes: 1: 323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (hash: lU6VrvpBYvmFhj9XMV8wCL1iuM4M5kJ+oQfWSvxRzlc=)
2: CF357620357B25129A68E7D55D716CED7E4E1516.crl (hash: fZWRzCU80MqFzDCvhXnhGbumr5Q1O/GaqTObHtYov3I=)
3: 3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (hash: FrtYQgGX76cnE7uQafuRYboGA917Ay3diGxJLT0XKGM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ed:17:8a:80:18:96:8f:85:72:2e:5e:d5:ee:b8:88:df:fd:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
Validity
Not Before: Nov 2 19:41:37 2025 GMT
Not After : Nov 3 20:46:37 2025 GMT
Subject: CN=AD5D70354BD526AD60948796E1FC73229B643268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:35:03:ac:42:cc:b9:31:74:8c:54:60:21:5c:
80:f8:73:03:5c:17:92:de:77:82:8f:cb:b3:3d:7b:
7f:c3:22:65:bb:e8:00:2e:a0:c3:1a:de:8e:0c:a4:
a9:d0:34:af:0f:8e:14:f4:14:9d:81:ab:45:e5:af:
44:c5:4e:2b:6d:34:46:06:19:1c:8f:8b:1d:a1:06:
b8:c9:ca:f9:e5:f5:36:ef:38:c3:54:38:ba:09:02:
2e:97:4d:87:29:c7:9c:b6:8d:29:00:2f:89:3b:f2:
0a:bc:55:ce:7a:54:8f:a3:8e:32:57:21:e0:90:6d:
56:ce:77:c5:e1:62:35:a3:63:86:41:68:b5:74:3a:
cb:ce:16:08:a4:7e:09:a5:af:40:e7:68:47:93:1d:
f5:22:50:dd:7d:c4:52:5e:b7:e2:f3:7f:87:13:6f:
a3:92:55:79:97:1b:64:69:f6:22:b3:4b:56:87:b2:
9c:99:2f:15:e9:33:b5:1a:a5:18:51:df:88:9e:09:
85:f5:08:ad:ac:f0:57:3b:fa:78:8f:55:9c:4e:a5:
b5:91:80:8d:06:69:f5:ee:62:42:34:89:98:77:65:
fc:1c:af:74:35:05:41:8b:5b:0c:f0:45:83:34:90:
aa:72:a6:fd:24:ed:c7:4d:44:26:fc:95:e4:1d:e6:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:70:35:4B:D5:26:AD:60:94:87:96:E1:FC:73:22:9B:64:32:68
X509v3 Authority Key Identifier:
keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:82:bd:61:9a:20:66:70:38:4a:52:49:4a:a2:74:4e:fb:3d:
02:35:64:c6:b1:91:be:ce:de:00:40:c6:75:19:93:d1:38:8e:
ba:37:b3:e7:98:89:7f:fe:1b:08:46:a0:a7:02:11:c6:a1:9e:
6a:88:73:4b:f5:71:18:75:26:d0:2a:7b:5b:24:dd:69:30:a2:
c0:f2:66:3a:0e:f1:58:0b:b1:43:c9:8d:ab:e2:17:6a:7d:ba:
bc:7d:6a:d6:81:9c:d5:2d:d8:e7:01:13:0b:cb:cc:6f:62:2e:
fd:bb:b9:bb:a9:e3:93:d5:a0:d7:54:3b:ac:9c:6d:9d:0d:b5:
88:0b:ec:81:cd:f9:71:bd:b6:c1:73:dc:39:87:25:67:e2:27:
f1:20:52:71:cf:c7:3c:40:8f:cc:93:0e:61:3b:3a:60:0a:86:
b6:34:ff:63:a6:c9:d0:dd:6a:c6:ab:44:f9:5d:c5:ad:a0:6e:
e8:d7:61:dc:b0:b6:ee:24:57:79:23:d5:22:cc:c1:66:af:48:
31:32:bf:d3:8a:d3:c6:61:7a:22:98:3e:20:af:63:0e:b2:5c:
41:51:e8:d9:9b:4b:f9:9f:97:28:8c:f1:84:29:5e:97:bd:c3:
52:82:82:ab:71:07:9f:68:1b:24:4b:4a:01:da:83:53:2d:ce:
6f:72:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:36:59 2025 by rpki-client