
$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
File: 2855A71E150CFAB4453167F74DEE4613F739EA02.mft (raw, json)
Hash identifier: rZ0MSFwO/egdtMk60PORKtl+AREJWav6MSxAucgnDDA=
Subject key identifier: 98:98:C1:62:2E:BD:F2:5A:F1:5F:3D:DF:3E:3E:CA:71:F6:81:5B:DA
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Certificate issuer: /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial: 68F80924BA45F3128600FA8D0BAC52B920494C57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
Manifest number: F2
Signing time: Mon 03 Nov 2025 10:01:37 +0000
Manifest this update: Mon 03 Nov 2025 09:56:37 +0000
Manifest next update: Tue 04 Nov 2025 10:04:37 +0000
Files and hashes: 1: 3137372e33362e37302e302f32332d3233203d3e20323730393531.roa (hash: T0uisPhEBXv8mI4+ibqv1hEDBIpV4KI+/rJcBTNDy94=)
2: 3137372e33362e37302e302f32342d3234203d3e20323730393531.roa (hash: QB/7FYKGMuSSTESFD3l9dOYNebWGpIMbGxvB3Q59iG8=)
3: 3137372e33362e37312e302f32342d3234203d3e20323730393531.roa (hash: 5T2+0XB0DlBcQ+y+y2vwtE7XEVqcQE/QcBCw+GVC2fU=)
4: 3137372e33362e36382e302f32342d3234203d3e20323730393531.roa (hash: 7Okh+SXRNQjQa5fOkXfDbosLb0nUEjaGjU4QjG6p7dU=)
5: 2855A71E150CFAB4453167F74DEE4613F739EA02.crl (hash: emYbfGtW8UuaecSCNqaWai87QL19969OLcEIelidBgE=)
6: 3137372e33362e36392e302f32342d3234203d3e20323730393531.roa (hash: B+19bI+kr6Z2d08IfqBncU9ZASUecW1oIy0/EqKAbyU=)
7: 323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa (hash: +mB7+Ln3v26C5H7k/9q3QiKkmQNWgXA//LXEnTHml5k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 10:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f8:09:24:ba:45:f3:12:86:00:fa:8d:0b:ac:52:b9:20:49:4c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Validity
Not Before: Nov 3 09:56:37 2025 GMT
Not After : Nov 4 10:04:37 2025 GMT
Subject: CN=9898C1622EBDF25AF15F3DDF3E3ECA71F6815BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:69:46:19:a1:54:6f:92:ea:e8:27:0c:af:
4d:7f:db:24:d9:7d:36:83:9a:5d:6f:bf:21:0d:2a:
26:c8:11:fd:06:7e:6c:f9:3b:34:e4:ab:9e:d5:91:
26:87:9e:b1:a0:1a:38:81:45:43:5f:15:e5:ef:a0:
5d:01:6d:df:0a:b9:f0:4d:d2:d0:54:ae:85:b8:c9:
f5:1a:b1:7f:a6:fd:38:a7:18:f7:28:1f:61:6b:5a:
b9:4e:3c:fc:c5:41:f6:07:2f:e4:ee:d7:4e:4e:d0:
bd:e8:4d:5c:c5:3d:7c:c3:60:3b:8a:f0:43:d0:a9:
96:90:08:ee:06:8d:88:28:3c:7c:8c:d5:58:ee:6b:
14:f4:b9:14:c1:36:1d:2f:74:5c:c4:82:c2:3e:17:
64:e4:b6:24:58:0e:0e:57:a3:10:d6:07:46:b7:cf:
ca:eb:d9:92:f1:7b:60:42:20:7e:95:e1:8d:46:04:
bb:36:c0:a1:bd:bb:82:2a:3e:15:5d:7d:06:5c:92:
99:cf:2f:91:c2:19:47:1f:9a:fe:9e:54:7d:e2:0f:
9c:34:6a:3b:02:5d:74:51:ee:db:52:94:15:b3:ff:
57:5e:27:12:27:8a:a9:26:3e:70:a7:1b:23:d9:1e:
fc:b9:45:7d:18:26:87:ef:50:de:99:c5:c9:93:29:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:C1:62:2E:BD:F2:5A:F1:5F:3D:DF:3E:3E:CA:71:F6:81:5B:DA
X509v3 Authority Key Identifier:
keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dc:aa:46:8a:31:49:f5:e2:b3:e5:6c:79:08:6a:53:b5:d4:
0d:0c:05:ba:05:9c:14:89:8a:c8:92:ca:42:f6:16:8e:3b:a3:
65:02:a6:a3:5c:60:97:bf:38:89:39:3e:0d:a2:c2:f6:35:bb:
3d:fc:ae:72:75:95:2e:4e:92:c0:ab:b1:f1:d0:ef:7c:a0:b8:
3c:95:ec:02:21:3c:bd:1b:6e:da:b7:be:36:1b:1d:e3:ce:5b:
d5:5c:cf:78:b6:aa:8f:1a:3a:df:2e:da:43:0e:87:de:d2:17:
8c:cd:e3:07:d6:f5:df:a2:95:d5:4f:4a:1a:f2:e3:9d:34:dd:
e4:d1:70:5c:75:8f:6d:2d:68:4e:4a:4f:05:c3:21:74:5f:3e:
19:79:f5:78:9b:9d:e8:2c:fe:84:8e:73:b9:c8:17:04:3c:b8:
21:0a:f8:b4:05:3a:6e:a5:4e:10:9c:1e:cc:40:0d:37:c0:1c:
ea:7c:d1:ae:78:f9:eb:c5:72:0b:11:40:6e:f4:32:56:ca:77:
5e:e7:41:33:35:f3:f4:c9:6a:7a:3a:ee:a4:e1:66:3f:6f:3d:
fe:89:f9:a0:11:56:e0:c2:19:42:ca:d3:59:86:2a:41:85:85:
f3:1e:3c:99:14:f6:ef:b6:71:88:a5:1c:0d:60:a5:17:c1:72:
3d:69:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:25:43 2025 by rpki-client