
$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
File: 312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft (raw, json)
Hash identifier: wAR2mskAzBAOcGl4Q+HVwKAe5wU4TxsYsUNi/koEweo=
Subject key identifier: 11:AA:AD:9A:C3:6B:5B:55:FC:E7:EC:40:6C:73:B4:82:F6:D2:AC:63
Authority key identifier: 31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5
Certificate issuer: /CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5
Certificate serial: 70C12366DCAC83876759D8B17FE71F2DEFE51FBE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
Manifest number: D9
Signing time: Sun 02 Nov 2025 22:15:43 +0000
Manifest this update: Sun 02 Nov 2025 22:10:43 +0000
Manifest next update: Mon 03 Nov 2025 23:17:43 +0000
Files and hashes: 1: 312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl (hash: BiYyQoAf/yHYlO7Y3W3nGqSUg1cHWcrA1mHQ5j7NXhk=)
2: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: AcgGAlvaKXbUxC9kB4j399ZgseBmCmyzLXIybiYAVlE=)
3: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: HcOGsAPSHvkeaRLUa88kfrvHyXD3Izj/1JBiGMJkKhs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl
rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 23:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c1:23:66:dc:ac:83:87:67:59:d8:b1:7f:e7:1f:2d:ef:e5:1f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312317E584CD5A10D2CB04D6FC1E40518B4C26C5
Validity
Not Before: Nov 2 22:10:43 2025 GMT
Not After : Nov 3 23:17:43 2025 GMT
Subject: CN=11AAAD9AC36B5B55FCE7EC406C73B482F6D2AC63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:19:4e:9f:c1:c3:81:cf:a8:f9:e2:3a:17:c4:
9a:d1:7e:54:5d:a4:a1:6c:8f:3c:4a:40:26:00:fe:
3d:53:ab:04:cf:2a:52:f4:68:bf:c4:16:08:2b:fa:
8a:ec:33:bf:b0:ef:20:0e:55:4f:4d:1b:40:1e:ed:
22:61:8f:ae:a2:0f:4e:7f:0b:df:28:92:92:34:00:
e5:95:30:b2:e9:72:5a:7d:c4:25:b0:b3:b5:00:30:
9b:3d:35:48:00:40:f0:4c:69:32:16:c6:ef:d9:02:
df:74:21:71:db:28:af:9a:af:a1:73:d2:ae:19:e2:
75:8f:68:df:5f:c4:dc:f2:04:66:9b:57:72:b1:b5:
ac:27:55:8b:2f:3b:fb:93:14:41:68:e1:3c:7d:ac:
7f:b4:d5:c8:45:4d:8a:9b:a3:ab:87:14:8c:c9:8c:
91:64:23:78:34:af:14:2f:b0:5d:c8:ed:0b:09:69:
05:23:74:67:67:99:48:c8:54:6f:2b:96:f0:df:65:
58:f6:78:31:5a:1e:31:be:fa:49:3f:39:33:f1:70:
3c:f8:cc:e1:a5:fd:4a:d2:8e:35:13:f3:75:26:a9:
49:19:98:cb:c0:f3:ae:7b:c3:61:10:c0:3d:dd:80:
c1:96:d7:39:d3:a2:c8:a1:dc:14:22:6c:2b:97:03:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:AD:9A:C3:6B:5B:55:FC:E7:EC:40:6C:73:B4:82:F6:D2:AC:63
X509v3 Authority Key Identifier:
keyid:31:23:17:E5:84:CD:5A:10:D2:CB:04:D6:FC:1E:40:51:8B:4C:26:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/312317E584CD5A10D2CB04D6FC1E40518B4C26C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6a:f9:80:e1:9e:66:0d:96:93:13:85:18:be:e3:0b:72:02:
d3:7f:e3:ef:41:c2:6a:02:83:7d:b4:ac:7d:00:43:f0:56:0f:
50:0a:8b:ac:1e:31:cb:a7:29:40:f2:7a:20:57:2b:f0:f2:3d:
15:e5:1f:80:37:d8:2d:c0:9d:7d:59:30:95:90:41:98:aa:54:
7b:c3:19:b6:ad:f5:5f:ca:b8:05:f7:c6:e7:48:94:d6:9d:cf:
7b:60:e2:f5:61:c1:f4:98:d9:df:29:a3:c9:d3:9c:6b:66:f5:
27:72:96:1f:95:a8:48:76:a3:56:10:8b:af:45:76:e7:ad:f6:
4d:d7:62:c6:4f:86:f6:5c:a5:df:25:24:e4:51:a3:dd:f4:f2:
b7:02:ba:35:5c:e5:57:14:0e:58:d3:fd:4f:86:d1:9d:be:d7:
ed:7a:c0:30:67:d0:7f:71:bc:31:72:c4:c8:77:76:6a:0f:a8:
b2:55:36:1f:84:6b:89:85:54:1c:21:58:06:3c:63:05:f1:1b:
3a:60:8a:47:5d:18:83:9f:70:dc:00:96:cd:02:2f:90:32:7a:
8d:50:04:63:58:dd:26:b8:9c:cb:2d:26:b4:62:17:a2:0b:72:
0e:9b:0a:7d:7b:c0:9e:ee:ed:68:42:25:85:97:08:eb:7e:20:
52:db:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:33:53 2025 by rpki-client