
$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
File: C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft (raw, json)
Hash identifier: DpCFGcKYFjyx3VwupUjL2K3bt2C3lr73xejcuOQZAPA=
Subject key identifier: ED:FE:FE:E7:4A:0E:3C:73:78:BC:23:51:A4:3E:80:1B:CF:38:69:37
Authority key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1
Certificate issuer: /CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1
Certificate serial: 50231249C853E9B1B110F53414ABB9BB8C5C4B80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
Manifest number: 25
Signing time: Mon 03 Nov 2025 08:06:36 +0000
Manifest this update: Mon 03 Nov 2025 08:01:36 +0000
Manifest next update: Tue 04 Nov 2025 08:21:36 +0000
Files and hashes: 1: 323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (hash: zGFKaCoTgzOLsixISDZt41J5XhqS2zO2XKDeZGn9Mco=)
2: 323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa (hash: yBJjQb5UJkn1X92Xq40hsg4b4AnfWWDvbxXre2wAako=)
3: 323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (hash: hlEnoJpysDTQhMh9vjpVDrfSuQQe4ncs2AxKBknxFt8=)
4: 323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (hash: QH/LIYXCd77Wq9zzodBAWGHkrnXVwWZgFBEWjsYTfjc=)
5: 323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (hash: SiH0kt0Wyo9/5hkFhetNKoVdOd1SM7uog1jLxCN7roM=)
6: 323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (hash: KiNWT2XYyvn6P4rzOt1uSFrWoSIT6q2OgDhlN/HBy9A=)
7: 323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (hash: Kz+qNOJo1gex4zcS+3Jq85bVEXkl1X8v0g7cMWndPMA=)
8: C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl (hash: H6ipCqgGxGMlNupqzVaiUtmnfJHrxtEihgXarIr3eFE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl
rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 08:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:23:12:49:c8:53:e9:b1:b1:10:f5:34:14:ab:b9:bb:8c:5c:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1
Validity
Not Before: Nov 3 08:01:36 2025 GMT
Not After : Nov 4 08:21:36 2025 GMT
Subject: CN=EDFEFEE74A0E3C7378BC2351A43E801BCF386937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:16:aa:3e:82:ee:54:b1:a0:7c:b4:23:a8:
17:b3:d1:25:7a:34:3a:5a:b1:ab:08:a3:82:06:f1:
d7:40:cc:e2:77:c9:e0:83:ec:fa:e1:90:7f:41:1e:
aa:29:57:1e:a2:e5:73:12:12:b3:6d:d7:48:df:03:
11:5f:f4:0c:8f:b5:57:8f:81:4d:ea:de:69:e0:00:
76:90:c0:da:f3:02:5c:24:73:bb:17:7a:1b:35:6d:
91:30:c3:f4:cf:8f:33:96:9a:71:c0:c8:c5:66:ed:
ac:f7:7f:3c:78:b5:5d:9e:66:33:f2:51:a8:11:55:
92:37:34:e1:ce:0a:a6:33:29:d2:ca:8e:cb:15:07:
39:4d:e7:95:dd:9d:4c:7f:dd:49:11:fc:6b:8b:4d:
d8:6b:35:cd:0d:e8:c8:0e:73:63:f2:ee:11:d8:ff:
b2:e9:e4:5b:e2:a8:6d:33:06:76:17:8a:f8:87:3c:
3e:09:18:66:63:78:a5:e4:b0:eb:a6:99:66:30:be:
ea:d4:e1:f5:1a:f3:5c:5a:84:27:4a:ae:ad:eb:2d:
73:64:79:5d:92:37:24:bd:6d:cd:15:3d:00:5c:99:
e1:84:63:c8:87:3b:bb:30:73:fa:8b:eb:88:3a:16:
b4:b7:72:17:31:54:8e:c4:4d:64:17:f3:ff:c2:75:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:FE:E7:4A:0E:3C:73:78:BC:23:51:A4:3E:80:1B:CF:38:69:37
X509v3 Authority Key Identifier:
keyid:C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:18:45:a2:29:e8:fc:58:bc:61:9f:f6:8a:37:33:a8:08:
6c:9f:d5:cc:c5:f7:3f:c5:59:11:07:7e:01:66:f2:20:2b:f1:
87:71:61:d9:2b:5c:3a:d0:76:f5:bb:04:64:0c:93:eb:71:99:
86:4f:05:82:e0:8e:33:66:8a:d6:25:ef:e6:36:94:2f:f0:34:
f5:35:b3:42:27:c0:7c:11:c8:26:7a:f9:3c:70:e9:de:a7:89:
e4:99:48:d0:9f:1d:ec:66:de:a3:f4:fc:63:ca:6c:80:11:12:
6c:e6:c6:32:04:cb:08:c2:e1:ae:e5:17:38:4a:f2:cc:9d:af:
7c:1b:01:9a:e8:bf:17:2c:38:e8:cf:d9:cc:82:ee:63:2e:3f:
7b:0a:a8:0f:00:5e:65:de:44:fe:75:34:34:57:4e:4d:d7:b9:
46:80:91:bb:11:75:7f:6e:61:ee:08:71:2a:98:1c:07:30:96:
99:d6:7e:4f:37:89:ae:21:3e:22:13:55:a7:cf:39:a1:ae:e7:
e1:21:55:5b:5b:0e:ba:0a:1a:93:00:2d:61:b5:0d:b2:66:06:
f5:6d:b9:f1:61:17:34:e0:53:9c:99:bb:95:0d:21:6b:8b:a1:
cf:80:b4:36:b7:93:f9:45:21:dd:a5:03:b9:f9:64:2b:b3:2b:
fb:6b:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:05:28 2025 by rpki-client