
$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft (raw, json)
Hash identifier: eluyiQXNLacTqNd+sIv6M31q1cGFjh+9taBV7XP04ig=
Subject key identifier: 7A:34:7D:C0:F7:34:7B:A0:6A:D2:CB:71:B5:82:C5:DF:80:CA:22:49
Authority key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
Certificate issuer: /CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Certificate serial: 4D213C73FAE913144EB9F37109FAA337C97E476E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
Manifest number: 0301
Signing time: Tue 04 Nov 2025 00:56:26 +0000
Manifest this update: Tue 04 Nov 2025 00:51:26 +0000
Manifest next update: Wed 05 Nov 2025 01:10:26 +0000
Files and hashes: 1: 323830343a343035383a3a2f33322d3438203d3e20323635393533.roa (hash: P1kjWEGrObzZJrYICVUDSoEdRZLmjZ79Ee/h/Dakbdo=)
2: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl (hash: BtICIMPxki6Xh+OfUkYziNgXOMlAUNYU2kYNXReP/vg=)
3: 3136342e3136332e35322e302f32322d3234203d3e20323635393533.roa (hash: N0btAFtvDXp7wrWYpNQVZV54i7RyzNCdiBD/oCt2wRo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 01:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:21:3c:73:fa:e9:13:14:4e:b9:f3:71:09:fa:a3:37:c9:7e:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED
Validity
Not Before: Nov 4 00:51:26 2025 GMT
Not After : Nov 5 01:10:26 2025 GMT
Subject: CN=7A347DC0F7347BA06AD2CB71B582C5DF80CA2249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:b4:19:50:87:ea:16:c1:67:08:7b:c5:cd:
79:fc:f5:f0:2c:29:c5:9b:06:d4:c4:37:c2:b8:aa:
b8:c8:08:12:af:32:49:2c:cd:cb:bc:91:9e:e0:ec:
bc:47:5a:8c:53:00:bd:d3:02:3e:65:e4:de:84:71:
4b:fe:99:2d:58:02:a5:92:80:68:50:f8:10:14:a1:
c0:8a:3e:38:3a:5e:91:8e:02:6a:78:4c:f7:db:e2:
c5:96:9e:da:ee:e2:0a:c1:0d:d9:9e:27:99:f5:b5:
e3:f1:e6:5e:36:bf:82:1e:ab:36:f8:55:eb:7c:7a:
eb:42:64:4d:64:c6:25:90:e0:cd:e0:8c:1a:35:ca:
97:1a:bb:6c:ab:36:58:fb:7d:20:55:25:ae:1a:9a:
f4:fd:3c:b2:6e:c4:17:44:eb:a6:06:ac:74:fd:1b:
46:5c:6b:79:58:29:b0:4f:9c:1d:f5:63:78:e7:7f:
4d:99:e3:24:f1:78:66:c0:17:d4:c9:c5:a8:38:4a:
99:4e:96:89:cc:66:79:34:c8:fc:f5:33:a3:43:72:
46:a6:5f:cc:ae:c9:d7:0e:5e:97:37:cb:0f:45:63:
cc:6f:83:94:d0:68:0b:e6:67:bc:6b:6e:08:00:1d:
0d:fc:8b:2b:65:6a:83:0e:6a:91:09:52:6c:98:a2:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:7D:C0:F7:34:7B:A0:6A:D2:CB:71:B5:82:C5:DF:80:CA:22:49
X509v3 Authority Key Identifier:
keyid:5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:26:89:ee:11:f3:f5:19:f8:70:88:db:60:7d:82:36:7c:e1:
f4:e8:79:84:14:37:be:9a:cd:2a:80:ca:fa:ec:09:61:4e:85:
a1:90:88:f5:e7:00:d1:8d:ed:66:60:37:9a:0b:7b:ce:7d:1f:
6d:be:e5:70:cb:7b:9e:93:b2:07:ed:48:8f:58:85:18:60:71:
a9:43:2e:63:cc:60:6e:d2:7a:a7:d6:a2:aa:f4:cf:5f:1d:9a:
b3:dc:6d:5b:8c:a5:7c:c6:99:b5:26:6a:42:2c:2f:a7:b8:b7:
16:74:8a:bd:f4:0f:4a:ad:88:17:72:4f:ca:fa:0c:5d:26:37:
0a:88:96:9f:88:10:99:be:4f:82:7a:13:f0:4e:3b:61:d2:65:
ca:6a:ff:4f:38:f5:87:ef:3c:fb:10:70:80:68:3d:32:b7:f4:
4b:c4:23:75:c2:1a:07:17:ac:7c:ff:d2:3f:f9:93:1e:53:8b:
ce:84:82:41:94:ba:41:ef:fa:94:2e:48:2a:bd:e2:6c:b0:da:
58:f0:bd:80:83:f0:b3:86:17:c6:c9:54:7e:4e:4e:0a:43:c9:
99:32:3b:a8:a3:d7:35:3b:68:12:ea:de:a5:af:c3:a5:37:ba:
c1:61:13:a1:4a:ca:85:90:5a:cd:4a:b5:fa:d9:88:8b:11:fb:
61:a8:9e:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTSE8c/rpExROufNxCfqjN8l+R24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFGOTU1RENCM0ZBNkM2QkE3QUVDM0Q4QkMxMzcyNzA4
Njk2QjhFRDAeFw0yNTExMDQwMDUxMjZaFw0yNTExMDUwMTEwMjZaMDMxMTAvBgNV
BAMTKDdBMzQ3REMwRjczNDdCQTA2QUQyQ0I3MUI1ODJDNURGODBDQTIyNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FbQZUIfqFsFnCHvFzXn89fAs
KcWbBtTEN8K4qrjICBKvMkkszcu8kZ7g7LxHWoxTAL3TAj5l5N6EcUv+mS1YAqWS
gGhQ+BAUocCKPjg6XpGOAmp4TPfb4sWWntru4grBDdmeJ5n1tePx5l42v4Ieqzb4
Vet8eutCZE1kxiWQ4M3gjBo1ypcau2yrNlj7fSBVJa4amvT9PLJuxBdE66YGrHT9
G0Zca3lYKbBPnB31Y3jnf02Z4yTxeGbAF9TJxag4SplOlonMZnk0yPz1M6NDckam
X8yuydcOXpc3yw9FY8xvg5TQaAvmZ7xrbggAHQ38iytlaoMOapEJUmyYome7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUejR9wPc0e6Bq0stxtYLF34DKIkkwHwYDVR0j
BBgwFoAUWvlV3LP6bGunrsPYvBNycIaWuO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4
TmQvMS81QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjk1NURDQjNGQTZDNkJB
N0FFQzNEOEJDMTM3MjcwODY5NkI4RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QkpIY3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMS81
QUY5NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAASaJ7hHz9Rn4cIjbYH2CNnzh9Oh5hBQ3vprNKoDK+uwJYU6FoZCI9ecA0Y3t
ZmA3mgt7zn0fbb7lcMt7npOyB+1Ij1iFGGBxqUMuY8xgbtJ6p9aiqvTPXx2as9xt
W4ylfMaZtSZqQiwvp7i3FnSKvfQPSq2IF3JPyvoMXSY3CoiWn4gQmb5PgnoT8E47
YdJlymr/Tzj1h+88+xBwgGg9Mrf0S8QjdcIaBxesfP/SP/mTHlOLzoSCQZS6Qe/6
lC5IKr3ibLDaWPC9gIPws4YXxslUfk5OCkPJmTI7qKPXNTtoEurepa/DpTe6wWET
oUrKhZBazUq1+tmIixH7YaieAg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 06:20:58 2025 by rpki-client