
$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json)
Hash identifier: oQ68JgL0TFZpcoYsvQK6RerqAHhnN7smi6QF6WY/hcA=
Subject key identifier: D3:0A:64:48:7C:F0:2B:BC:BC:E6:59:7B:9C:EC:B4:67:52:1B:92:7C
Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Certificate serial: 2C0560774406E74FD6480A33141DA04A2AF96F79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
Manifest number: 28
Signing time: Sun 02 Nov 2025 22:12:08 +0000
Manifest this update: Sun 02 Nov 2025 22:07:08 +0000
Manifest next update: Tue 04 Nov 2025 01:50:08 +0000
Files and hashes: 1: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=)
2: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=)
3: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: JqiWcjcAqcfhVUaKs/4DjKrH7TrOwdqWqulErB6FQtE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 01:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:05:60:77:44:06:e7:4f:d6:48:0a:33:14:1d:a0:4a:2a:f9:6f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Validity
Not Before: Nov 2 22:07:08 2025 GMT
Not After : Nov 4 01:50:08 2025 GMT
Subject: CN=D30A64487CF02BBCBCE6597B9CECB467521B927C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:90:71:a9:35:c9:9a:b5:36:50:ab:90:73:
94:df:ba:ae:c1:01:ad:86:77:bf:32:68:ba:2a:11:
ee:5b:b7:12:b4:eb:fe:1d:d8:b5:57:f9:19:20:ec:
3d:43:be:9f:e8:50:b1:61:54:ce:ef:35:40:3a:2b:
05:f9:3a:c2:c5:41:b6:3e:ad:80:5b:25:40:c6:77:
ce:7a:30:58:83:3f:05:4e:14:4e:9d:f5:17:9c:56:
9d:fc:b4:b6:77:70:e9:8c:db:40:e1:68:aa:f9:56:
e4:f5:2e:69:58:7d:70:24:12:1c:0f:95:3b:e5:c0:
ee:ff:23:0c:78:fe:ad:87:c6:e6:7b:9c:09:63:eb:
e8:77:7b:45:2c:2c:6e:43:99:4f:0a:a9:3b:28:de:
ad:54:11:7a:af:2f:87:cd:85:b9:86:01:f4:de:94:
1e:ad:bf:8e:59:96:21:93:99:83:8a:86:a6:dc:8b:
8b:ea:bc:72:84:1e:e8:b7:bd:a3:97:7c:ee:27:8c:
7f:18:22:40:06:42:b4:41:d5:96:b9:f5:b1:a4:64:
63:3e:84:66:d5:2c:dc:3d:b7:1a:f7:54:c5:69:d6:
d9:a0:89:4b:a2:33:27:47:64:2e:70:74:a2:37:9a:
cc:39:84:82:35:4d:7a:c0:03:1c:22:d8:38:8e:89:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:64:48:7C:F0:2B:BC:BC:E6:59:7B:9C:EC:B4:67:52:1B:92:7C
X509v3 Authority Key Identifier:
keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f4:1a:33:0a:d5:07:b7:74:6b:31:10:78:2a:22:07:ef:aa:
1a:76:5e:3d:e5:63:3d:77:b9:4d:aa:cc:f2:b7:a7:9e:d1:b8:
29:7f:a6:b9:75:4e:f5:b6:ad:86:2f:61:66:19:8a:fa:6b:91:
75:72:f7:6f:56:6d:1f:b4:38:83:41:63:a8:ab:02:c9:fd:9b:
1f:f3:32:91:a0:44:94:5c:7f:12:37:88:b8:64:e2:d9:03:d9:
d8:4f:f5:bb:c3:e7:93:d6:69:38:16:cc:1a:0c:ec:bf:76:01:
15:f0:33:b3:db:e6:4c:a4:77:85:89:f9:ca:43:8f:33:86:5f:
b4:71:f0:4f:ac:aa:10:14:a5:a0:d3:b2:cf:84:61:c3:bf:8f:
73:68:4b:fc:e7:e1:30:e7:d2:6c:eb:95:2d:00:03:12:0e:78:
40:f2:59:07:df:86:ff:9f:74:43:06:57:69:3b:79:63:75:9b:
1a:99:c6:0d:25:fe:3c:cd:43:98:c3:3f:f5:d0:a7:98:b0:a1:
3a:2e:a7:11:0e:6b:1f:66:82:73:32:fb:40:02:95:2e:2e:5c:
ac:c9:b1:c6:1e:d9:3a:84:a7:61:0e:92:2f:9a:97:65:4c:0f:
cc:09:8a:b5:73:8d:08:c7:4a:1a:b4:e8:b1:89:f0:91:db:ee:
16:35:d2:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULAVgd0QG50/WSAozFB2gSir5b3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhEMUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZF
NDVCQkMwQTAeFw0yNTExMDIyMjA3MDhaFw0yNTExMDQwMTUwMDhaMDMxMTAvBgNV
BAMTKEQzMEE2NDQ4N0NGMDJCQkNCQ0U2NTk3QjlDRUNCNDY3NTIxQjkyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZpBxqTXJmrU2UKuQc5Tfuq7B
Aa2Gd78yaLoqEe5btxK06/4d2LVX+Rkg7D1Dvp/oULFhVM7vNUA6KwX5OsLFQbY+
rYBbJUDGd856MFiDPwVOFE6d9RecVp38tLZ3cOmM20DhaKr5VuT1LmlYfXAkEhwP
lTvlwO7/Iwx4/q2HxuZ7nAlj6+h3e0UsLG5DmU8KqTso3q1UEXqvL4fNhbmGAfTe
lB6tv45ZliGTmYOKhqbci4vqvHKEHui3vaOXfO4njH8YIkAGQrRB1Za59bGkZGM+
hGbVLNw9txr3VMVp1tmgiUuiMydHZC5wdKI3msw5hII1TXrAAxwi2DiOiShRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0wpkSHzwK7y85ll7nOy0Z1IbknwwHwYDVR0j
BBgwFoAUiNGyB9WqlygXMgSo3OuKpuRbvAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktl
eFEvMC84OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RDFCMjA3RDVBQTk3Mjgx
NzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC84
OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1/QaMwrVB7d0azEQeCoiB++qGnZePeVjPXe5TarM8renntG4KX+muXVO9bat
hi9hZhmK+muRdXL3b1ZtH7Q4g0FjqKsCyf2bH/MykaBElFx/EjeIuGTi2QPZ2E/1
u8Pnk9ZpOBbMGgzsv3YBFfAzs9vmTKR3hYn5ykOPM4ZftHHwT6yqEBSloNOyz4Rh
w7+Pc2hL/OfhMOfSbOuVLQADEg54QPJZB9+G/590QwZXaTt5Y3WbGpnGDSX+PM1D
mMM/9dCnmLChOi6nEQ5rH2aCczL7QAKVLi5crMmxxh7ZOoSnYQ6SL5qXZUwPzAmK
tXONCMdKGrTosYnwkdvuFjXStA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:35:51 2025 by rpki-client