
$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json)
Hash identifier: Bmw7VpWBb6jug4QXJzE7e85wgsyQJSgER0AlG7WD31w=
Subject key identifier: 5F:D6:FD:91:19:E3:52:79:3B:CF:40:45:F4:69:78:B1:FC:50:FA:CD
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial: 6B6FEE35A186991CB42AC3A96BFDD73D2D05D4B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
Manifest number: 0306
Signing time: Mon 03 Nov 2025 00:23:17 +0000
Manifest this update: Mon 03 Nov 2025 00:18:17 +0000
Manifest next update: Tue 04 Nov 2025 01:43:17 +0000
Files and hashes: 1: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=)
2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: htDGfXl2V6hW1aPGKJqOqF0HvGIqsbW2mJWia/qqNn4=)
3: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 01:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6f:ee:35:a1:86:99:1c:b4:2a:c3:a9:6b:fd:d7:3d:2d:05:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Validity
Not Before: Nov 3 00:18:17 2025 GMT
Not After : Nov 4 01:43:17 2025 GMT
Subject: CN=5FD6FD9119E352793BCF4045F46978B1FC50FACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:ec:b7:dc:f8:24:8a:75:0f:76:86:50:ea:
54:82:4d:51:d2:e8:ac:79:7a:11:35:80:81:7b:f1:
d3:c9:17:65:ab:07:bc:97:07:23:77:7c:e0:60:e8:
85:f1:fe:bf:36:78:40:08:ed:96:ae:85:f9:66:9b:
0f:97:4c:54:c6:1c:e7:c2:36:39:17:42:71:4d:71:
2d:1f:0a:03:f6:a2:fe:8c:f7:31:24:df:02:45:69:
cd:2a:77:36:24:2c:8e:09:ff:44:79:34:45:57:74:
23:57:97:2b:1d:35:87:a6:a6:ca:9e:59:ae:cb:52:
cc:95:fc:b1:f8:21:7b:5a:8c:a0:bc:f2:43:a4:4f:
10:bf:3e:27:23:8d:9b:0a:81:48:d4:c6:1d:7e:28:
b7:94:01:3b:b6:b4:1a:24:ee:49:12:f6:f1:dc:ad:
24:78:ee:f3:a1:c4:05:9c:da:fd:48:c7:5a:5a:bd:
27:a4:01:af:2a:bb:89:dc:6e:d6:77:6a:a5:ef:19:
fe:2f:42:92:3f:14:95:82:63:96:d1:07:28:fa:20:
27:43:ee:33:ec:2f:d4:63:97:8e:51:29:fe:5f:ff:
86:85:69:ce:f7:dc:c0:1c:5e:b2:fc:cc:71:81:af:
74:41:64:9e:aa:d1:9a:83:1d:d0:8a:e1:6b:f3:a5:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:FD:91:19:E3:52:79:3B:CF:40:45:F4:69:78:B1:FC:50:FA:CD
X509v3 Authority Key Identifier:
keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1e:de:c9:e3:2a:c3:94:e3:e1:9e:a0:62:50:fa:a3:be:c8:
ec:a8:52:7a:c5:10:76:64:8f:91:e5:8e:a6:3f:ef:03:79:8d:
0e:83:d7:5d:94:6c:e7:96:89:c9:e3:83:14:53:c9:2a:3c:94:
73:60:64:27:56:82:5d:ed:16:7b:5e:57:9c:eb:f5:35:07:8c:
58:e7:91:e3:c2:d3:43:2e:6f:0e:26:ed:2d:0b:79:e6:9c:24:
c7:3e:d8:d3:98:f4:32:c7:eb:a5:29:28:e5:6a:dc:15:37:63:
60:bd:67:ab:06:20:e9:2a:bc:f2:1b:59:4f:5d:b8:22:9e:04:
22:51:35:e7:4a:eb:cb:34:89:ac:7e:26:d8:76:56:af:51:8d:
3a:6d:87:62:64:e9:00:5c:73:e6:88:c9:1f:73:69:d4:fd:26:
e5:0b:fa:53:ef:5e:a2:96:65:1f:36:f7:d0:35:07:04:d1:0c:
91:10:ff:a6:33:db:76:11:f9:a8:63:76:05:f3:fd:c0:b1:72:
2a:49:6b:6e:00:75:49:ab:82:e1:85:1f:1f:44:03:f1:63:ee:
e0:d0:d9:49:0c:73:51:8b:9a:b1:e6:49:a7:ba:dc:6a:c6:10:
53:ac:0d:f9:7a:99:1c:27:5f:90:30:6e:2c:58:13:90:c8:2e:
60:8b:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:53 2025 by rpki-client