
$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
File: 2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft (raw, json)
Hash identifier: nt0nFB5KAms+srSXseaEY5eNSX5GqmvuOO5fQV1vV2E=
Subject key identifier: 84:6C:92:3A:73:3C:4C:13:0F:27:76:61:71:65:94:B5:47:C0:8F:D3
Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
Certificate issuer: /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Certificate serial: 6B680D001D989DED8E003E7087E260A3C9194A17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
Manifest number: 02A0
Signing time: Mon 03 Nov 2025 03:15:51 +0000
Manifest this update: Mon 03 Nov 2025 03:10:51 +0000
Manifest next update: Tue 04 Nov 2025 03:20:51 +0000
Files and hashes: 1: 3137372e37322e38382e302f32312d3332203d3e203532383232.roa (hash: l1bCBW5xTIWmnRtwFALqoufSI4NmF7ZdUExV4DVUkHY=)
2: 2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl (hash: S9cqgXLiedoQ6wGcAZzNPy3EetHoqup54oacAxc7yfs=)
3: 323830343a6262633a3a2f33322d313238203d3e203532383232.roa (hash: NiTHJW5Y+34NTE8ZT454pnL1Mlzpd+vYci8H9lwnai8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 03:20:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:68:0d:00:1d:98:9d:ed:8e:00:3e:70:87:e2:60:a3:c9:19:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168
Validity
Not Before: Nov 3 03:10:51 2025 GMT
Not After : Nov 4 03:20:51 2025 GMT
Subject: CN=846C923A733C4C130F277661716594B547C08FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:dc:e3:e9:81:8d:49:a2:4e:65:b9:d4:5e:
2f:d4:38:d1:c1:2c:4c:3b:36:1a:6e:d0:fe:bc:0f:
cb:aa:cd:d3:6d:a2:1c:07:51:e0:70:ed:8a:9a:5f:
56:f7:4f:9d:49:6c:62:71:01:44:16:a9:0d:25:08:
e0:c7:17:4e:88:e3:8b:42:a5:d4:05:ab:c4:da:b1:
54:3a:8e:9c:a7:51:b4:13:32:a9:55:0f:f0:20:ad:
a5:9d:f8:69:60:e7:e5:7a:94:e8:4f:8a:87:1f:68:
49:bb:60:39:ce:83:b1:02:30:ed:59:48:91:21:7b:
6b:71:82:eb:5b:a6:ef:d3:9d:29:b2:35:19:f7:7a:
07:bc:c1:eb:b2:92:cb:dd:19:67:3b:f9:04:d5:2a:
8c:ba:fa:de:5a:c2:bd:c4:53:4d:a4:bb:f6:6c:6d:
0d:c7:73:f5:48:61:e7:5f:de:67:f5:4b:d0:24:1d:
9b:0c:7c:02:8e:02:af:06:f3:b1:2d:11:61:76:d0:
b2:35:bc:d8:a4:b6:4a:0b:97:3c:15:e4:b9:89:d4:
96:3a:73:d3:51:96:55:22:94:4f:fe:9c:a7:7a:7d:
83:30:76:2b:d9:07:86:56:30:31:cd:96:9d:41:83:
15:62:da:e6:e2:f2:42:e8:b6:77:74:27:73:c6:8e:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6C:92:3A:73:3C:4C:13:0F:27:76:61:71:65:94:B5:47:C0:8F:D3
X509v3 Authority Key Identifier:
keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5d:f8:aa:7c:33:f9:d9:d6:53:6f:09:bb:e5:74:37:ac:e8:
80:f5:d3:b1:8c:59:c1:e1:4e:28:1e:8b:d5:3e:49:8c:fa:43:
3f:cb:b3:49:cf:41:9b:b4:36:f7:07:a2:ae:a7:f6:5f:9f:fa:
48:04:c4:3f:b2:12:d8:06:72:14:07:37:0a:d0:68:c7:64:9a:
b8:0a:d4:65:e9:63:76:43:a7:2b:65:9e:84:5e:9b:04:eb:30:
6c:8d:0e:9b:48:9e:6c:a7:07:e6:17:ee:95:0a:c4:a0:4f:8b:
74:93:40:bd:4c:0f:bf:87:83:bd:12:cd:32:ae:1f:fa:fe:aa:
f1:f1:de:3e:2a:6e:9b:eb:94:9a:00:85:7c:58:3e:d3:51:9f:
e9:c4:99:20:9f:d3:b2:c4:cb:d8:f2:37:c8:34:3f:9a:4b:3b:
dc:63:7e:b1:7d:a9:f8:b8:b0:3e:aa:e7:89:55:d4:d4:8a:57:
ac:c0:2a:d8:64:b1:b5:46:ae:21:bf:5d:21:2e:05:20:5c:b0:
fe:54:35:da:5e:90:03:66:40:11:eb:89:c2:4b:32:23:89:ec:
e6:5e:40:8b:54:34:ab:09:fc:55:60:8e:c5:e5:d5:1f:5e:72:
4a:ea:00:07:c0:ec:53:0b:39:90:7c:42:5e:bd:c9:8a:da:43:
b7:39:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:39 2025 by rpki-client