
$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
File: D5A1856A52E7F9EBF280FCB86750839A6466C111.mft (raw, json)
Hash identifier: zLC6JWAXiStHW/45k1PL/+tXJAx1pIsfLYZb+leZkGQ=
Subject key identifier: B4:91:31:F8:B3:C5:46:C9:B3:64:1C:B3:DC:A8:13:36:E4:30:AF:5F
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Certificate issuer: /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial: 60C98D791C82D7BFE79F6F5433843F803A479612
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
Manifest number: 45
Signing time: Mon 03 Nov 2025 06:22:14 +0000
Manifest this update: Mon 03 Nov 2025 06:17:14 +0000
Manifest next update: Tue 04 Nov 2025 06:48:14 +0000
Files and hashes: 1: 3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (hash: KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=)
2: D5A1856A52E7F9EBF280FCB86750839A6466C111.crl (hash: 7lFvrLE7uRJjS37Mbrje0v4IuPO/E2WBhRmgLBQETuI=)
3: 323830343a383237633a3a2f33322d313238203d3e20323632393337.roa (hash: w7mrlzP9adJiyFUUgR0vUJKBTlOPeWaDs+XqI7y8EJY=)
4: 3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (hash: iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 06:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c9:8d:79:1c:82:d7:bf:e7:9f:6f:54:33:84:3f:80:3a:47:96:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Validity
Not Before: Nov 3 06:17:14 2025 GMT
Not After : Nov 4 06:48:14 2025 GMT
Subject: CN=B49131F8B3C546C9B3641CB3DCA81336E430AF5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:44:f1:c1:85:bf:76:3d:c2:a9:19:1f:a8:
5f:67:76:60:63:99:70:44:ae:cb:3b:8d:28:d8:13:
b7:8b:01:63:01:75:3e:c9:a1:0e:4c:64:b9:91:3b:
b6:a9:1c:4c:91:f4:99:c5:02:68:8a:00:4c:75:de:
12:e8:c2:e9:aa:5f:be:c6:84:81:ee:b2:35:5d:99:
39:e5:21:e9:a3:c3:57:18:66:37:d2:e4:fb:e9:40:
eb:e4:a6:2a:3f:5b:eb:a4:c3:64:28:48:fd:3f:86:
7f:0e:76:7f:07:da:1e:c8:89:68:c8:13:e3:63:5c:
26:fa:4c:23:f5:da:06:58:ef:fc:6c:37:b5:cb:52:
b8:5c:08:09:89:63:57:46:f9:ca:e8:31:6b:c4:1e:
1b:61:0b:20:4d:f4:e0:4b:4e:10:fb:d1:a2:c5:27:
a5:ce:45:fc:25:47:fa:4c:2a:e3:31:a5:cc:ba:05:
a3:5a:b3:a2:db:27:fd:f8:fa:c7:20:b2:ff:15:8b:
d8:ae:1e:ec:76:a9:f6:09:b1:6b:72:40:ac:69:f5:
d7:62:89:03:c3:88:02:ed:42:7f:8f:4b:aa:31:85:
3b:d0:29:16:03:12:b2:aa:ab:df:6e:da:1c:4b:32:
81:c2:d3:b6:9e:0b:c1:43:00:29:53:16:46:2d:cf:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:31:F8:B3:C5:46:C9:B3:64:1C:B3:DC:A8:13:36:E4:30:AF:5F
X509v3 Authority Key Identifier:
keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5c:9b:a4:39:9f:b7:04:29:3d:61:e0:98:dc:89:4a:65:d1:
44:41:86:d7:6c:3a:45:39:f2:70:61:50:a6:bf:91:67:72:42:
d2:cf:ae:6c:64:e7:e3:f1:ba:cd:82:a7:c2:ce:58:ff:7b:56:
e7:18:15:5d:f7:22:71:97:72:e5:92:84:79:ce:b3:b7:3d:c4:
92:2b:d2:2a:2c:c7:1c:7f:26:20:21:03:dc:15:ce:ea:58:d2:
51:3d:66:7b:65:13:9d:9e:95:3d:16:2c:67:b2:da:b4:7e:ef:
df:23:98:9d:aa:c4:46:ea:50:3d:98:33:94:1a:c4:b7:b1:97:
24:0f:7d:bd:5c:69:1c:76:20:dd:f4:af:6b:69:50:a6:99:5a:
9f:1e:2e:e4:3f:e5:bb:4d:6c:d8:bd:7c:01:a8:39:88:e9:f1:
90:ef:df:59:92:84:38:d6:30:2a:82:18:03:78:89:f9:e0:3e:
df:cb:91:a0:1c:48:66:d3:6a:d6:ab:96:fb:0e:6b:5f:2c:02:
c8:81:55:86:05:2a:0a:28:ac:ec:21:61:c3:83:45:b5:3d:43:
f5:e8:86:e8:99:15:4a:e9:c2:a7:11:5c:6b:6e:d1:3f:68:07:
ff:64:5c:55:8b:39:44:11:a2:37:be:53:9e:19:51:fb:72:a8:
58:a6:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:36 2025 by rpki-client