
$ rpki-client -vvf rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
File: 206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft (raw, json)
Hash identifier: KhNIEEUtvns+QCNwCQ8XtkOgIYvAYPG1YRoPKQn7DCQ=
Subject key identifier: B2:E2:4D:20:D8:3D:96:36:6B:90:E9:E6:91:6B:B9:DC:8A:EC:14:24
Authority key identifier: 20:6B:D1:2D:C7:EB:1E:7A:26:A6:59:02:0E:DF:09:78:05:6A:B2:1A
Certificate issuer: /CN=206BD12DC7EB1E7A26A659020EDF0978056AB21A
Certificate serial: 1B04E0B235CD847415EE1E432DBF7A2550D8A952
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
Manifest number: 0306
Signing time: Sun 02 Nov 2025 19:10:00 +0000
Manifest this update: Sun 02 Nov 2025 19:05:00 +0000
Manifest next update: Mon 03 Nov 2025 20:29:00 +0000
Files and hashes: 1: 323830343a353830303a3a2f33322d3438203d3e203532383433.roa (hash: p+s2V9NULI59Wy/sE+FYgVLEvmWVdwNJ0ELNuc7Agjg=)
2: 3137372e36362e34302e302f32312d3234203d3e203532383433.roa (hash: uJC9oTL5GdSku+ulcRn9iX0Hg2YsH2U5e/yMiuKuYPA=)
3: 206BD12DC7EB1E7A26A659020EDF0978056AB21A.crl (hash: pUECSDItV1klfod3NrLCQ/YzJTOYn97+WA+4e6Is6ts=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.crl
rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:04:e0:b2:35:cd:84:74:15:ee:1e:43:2d:bf:7a:25:50:d8:a9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206BD12DC7EB1E7A26A659020EDF0978056AB21A
Validity
Not Before: Nov 2 19:05:00 2025 GMT
Not After : Nov 3 20:29:00 2025 GMT
Subject: CN=B2E24D20D83D96366B90E9E6916BB9DC8AEC1424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:e3:83:e1:e8:82:77:c3:fb:67:eb:7b:d2:
68:53:91:9a:d0:bb:5a:fc:d0:58:b0:62:0e:b2:97:
74:b6:5c:10:4d:67:33:d1:6f:60:a1:d5:4d:96:c6:
77:15:0e:c0:d4:c3:bf:b5:a7:47:05:9d:13:83:b5:
96:b5:6e:44:ea:5c:93:66:ef:92:03:21:b8:5e:a7:
75:84:97:ca:4d:85:9b:7c:e2:41:1b:67:40:c6:7d:
18:61:35:a2:d0:ee:66:99:13:a5:da:e1:88:7a:36:
58:31:c2:81:6d:df:71:89:87:01:8a:fb:13:cc:bc:
be:44:02:ce:9a:bc:39:73:a4:2f:f2:db:fd:0c:6e:
ee:3b:3b:67:3e:73:09:96:ee:29:11:be:43:81:6d:
77:16:b0:1d:7f:9f:f0:8b:bd:60:cb:7b:d7:a4:d4:
35:16:a2:25:c2:32:73:2b:5f:a2:7c:85:da:32:81:
b3:34:cb:12:3c:b2:6b:aa:09:6d:50:1f:41:a6:86:
d9:d8:6d:20:b5:9c:d2:85:10:0a:29:b3:df:83:09:
d9:7c:f6:65:6d:17:d9:11:9f:a3:d9:d6:80:d4:7f:
6a:f7:08:70:c5:78:97:91:76:50:55:4e:c0:b8:a1:
8b:6c:2b:a6:d2:21:66:e5:a8:d2:41:05:11:dd:6f:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:4D:20:D8:3D:96:36:6B:90:E9:E6:91:6B:B9:DC:8A:EC:14:24
X509v3 Authority Key Identifier:
keyid:20:6B:D1:2D:C7:EB:1E:7A:26:A6:59:02:0E:DF:09:78:05:6A:B2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:12:8b:1d:6a:4b:73:72:57:40:d3:5d:cd:49:ef:76:26:
7d:e9:ee:e7:53:bb:f0:ed:7d:aa:a6:aa:c0:a3:78:e3:fa:cc:
4d:cf:39:f4:98:5c:93:82:f2:db:f3:d0:fe:fa:42:ea:ce:c5:
cc:0b:4c:9b:c5:02:a8:dd:39:28:5e:c2:8c:1f:d8:be:2d:ce:
3b:d1:ec:87:fe:31:b3:6d:14:99:d2:93:60:03:0b:50:44:4e:
4e:a6:75:88:73:97:a5:3e:7c:c8:ff:a8:d1:1a:0e:c8:8b:bb:
53:ca:9e:bb:2e:e1:37:b2:f8:d9:d9:2e:d4:f0:0a:34:aa:b4:
c9:5f:15:ff:16:e5:cd:32:95:3e:a9:08:61:b8:55:75:9e:04:
04:be:54:21:e4:25:8f:56:03:ff:ac:f6:e8:2a:0e:f0:3f:34:
83:20:4f:78:3f:d3:6b:b0:42:35:cf:e2:17:b3:d9:1b:5d:98:
17:1f:84:1b:26:6f:2a:30:c2:08:1e:e3:6b:cf:8a:3e:cb:b1:
af:af:3e:d0:5c:97:02:bc:b9:79:be:b4:8e:ef:b2:01:a1:0a:
4f:51:a8:84:31:12:c5:fb:d3:d2:39:67:26:f9:53:a5:23:4e:
0f:2e:70:ab:b0:00:9d:af:8a:09:db:db:dc:e8:99:08:4a:1a:
21:c3:8a:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGwTgsjXNhHQV7h5DLb96JVDYqVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2QkQxMkRDN0VCMUU3QTI2QTY1OTAyMEVERjA5Nzgw
NTZBQjIxQTAeFw0yNTExMDIxOTA1MDBaFw0yNTExMDMyMDI5MDBaMDMxMTAvBgNV
BAMTKEIyRTI0RDIwRDgzRDk2MzY2QjkwRTlFNjkxNkJCOURDOEFFQzE0MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOuOD4eiCd8P7Z+t70mhTkZrQ
u1r80FiwYg6yl3S2XBBNZzPRb2Ch1U2WxncVDsDUw7+1p0cFnRODtZa1bkTqXJNm
75IDIbhep3WEl8pNhZt84kEbZ0DGfRhhNaLQ7maZE6Xa4Yh6NlgxwoFt33GJhwGK
+xPMvL5EAs6avDlzpC/y2/0Mbu47O2c+cwmW7ikRvkOBbXcWsB1/n/CLvWDLe9ek
1DUWoiXCMnMrX6J8hdoygbM0yxI8smuqCW1QH0GmhtnYbSC1nNKFEAops9+DCdl8
9mVtF9kRn6PZ1oDUf2r3CHDFeJeRdlBVTsC4oYtsK6bSIWblqNJBBRHdbwWdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsuJNINg9ljZrkOnmkWu53IrsFCQwHwYDVR0j
BBgwFoAUIGvRLcfrHnomplkCDt8JeAVqshowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXg1aDZhR2l6Z0p5alI1R1VVR2ZZVGtHeXlSNzI5ajgyTnVFdWZNMjgx
ZFovMS8yMDZCRDEyREM3RUIxRTdBMjZBNjU5MDIwRURGMDk3ODA1NkFCMjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwNkJEMTJEQzdFQjFFN0Ey
NkE2NTkwMjBFREYwOTc4MDU2QUIyMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXg1aDZhR2l6Z0p5alI1R1VVR2ZZVGtHeXlSNzI5ajgyTnVFdWZNMjgxZFovMS8y
MDZCRDEyREM3RUIxRTdBMjZBNjU5MDIwRURGMDk3ODA1NkFCMjFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXx0Six1qS3NyV0DTXc1J73Ymfenu51O78O19qqaqwKN44/rMTc859Jhck4Ly
2/PQ/vpC6s7FzAtMm8UCqN05KF7CjB/Yvi3OO9Hsh/4xs20UmdKTYAMLUEROTqZ1
iHOXpT58yP+o0RoOyIu7U8qeuy7hN7L42dku1PAKNKq0yV8V/xblzTKVPqkIYbhV
dZ4EBL5UIeQlj1YD/6z26CoO8D80gyBPeD/Ta7BCNc/iF7PZG12YFx+EGyZvKjDC
CB7ja8+KPsuxr68+0FyXAry5eb60ju+yAaEKT1GohDESxfvT0jlnJvlTpSNODy5w
q7AAna+KCdvb3OiZCEoaIcOKkw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:37 2025 by rpki-client