
$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
File: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft (raw, json)
Hash identifier: VKs9Q3IhNRbv0DY5WLNwVK2QQJLsWmFXhc/OpZnHaWs=
Subject key identifier: 7D:8F:22:33:46:F6:D1:3C:E8:92:5F:2B:0E:3B:0D:22:C5:C7:02:A9
Authority key identifier: 39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86
Certificate issuer: /CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86
Certificate serial: 13595B1360068404CB359E14CA36BD1BD246170E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
Manifest number: 11
Signing time: Mon 03 Nov 2025 09:46:22 +0000
Manifest this update: Mon 03 Nov 2025 09:41:22 +0000
Manifest next update: Tue 04 Nov 2025 13:20:22 +0000
Files and hashes: 1: 323830343a363530303a3a2f33322d313238203d3e20323639343632.roa (hash: dYFJ+TK53yUSuiBuIq6FGVmH+goh9YSou9bovn9JMV8=)
2: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl (hash: 1jOOdsp/S9euTMmsIDkCXE9NU178lXQyDw5qTepcdac=)
3: 34352e3138372e39362e302f32322d3332203d3e20323639343632.roa (hash: NaiFTgXjlXyLcqdW+W3yI7vIOFQqkj4gTIl4hxoKefI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl
rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:59:5b:13:60:06:84:04:cb:35:9e:14:ca:36:bd:1b:d2:46:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86
Validity
Not Before: Nov 3 09:41:22 2025 GMT
Not After : Nov 4 13:20:22 2025 GMT
Subject: CN=7D8F223346F6D13CE8925F2B0E3B0D22C5C702A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:2c:2c:dd:f3:df:41:8a:f2:bb:f5:10:5c:
82:ef:a6:99:bd:24:f2:4b:19:9d:dd:48:a2:10:8e:
a2:a9:7c:a1:d6:86:54:4c:90:08:45:49:db:76:88:
26:b0:f4:53:cb:e1:d5:c5:ee:7d:75:69:18:a9:d2:
23:40:4f:f9:6a:51:55:db:38:85:83:e4:ba:45:fa:
85:92:2e:f2:80:5e:a2:29:ee:af:ea:91:98:b9:e1:
75:c6:a7:6f:e1:7c:2d:0c:25:39:0b:2e:a8:a6:80:
f8:33:4e:e7:d1:d0:a1:88:e4:b6:2f:80:1a:f8:11:
93:0e:17:5a:bd:92:a2:16:54:b5:b9:e8:90:26:f5:
cc:c9:73:3c:6c:c5:c4:61:be:f0:fd:f8:6c:e3:d1:
42:92:63:1d:27:22:67:ed:74:8e:95:61:1c:c8:67:
00:38:5f:d8:85:86:ee:10:44:e8:7b:0d:c8:8d:ec:
34:dd:d3:e6:34:b6:dd:fb:f2:80:c6:76:10:04:6b:
05:74:c8:ae:b7:8b:56:ce:65:b2:ba:ef:f3:5f:44:
a3:f9:96:ab:65:b3:26:18:bf:b8:cb:cf:eb:40:d4:
17:f0:90:40:df:a4:1f:6a:01:21:f0:3c:74:61:4d:
9c:d4:7a:80:9f:f9:09:c3:b6:7a:31:a3:bf:3c:38:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:22:33:46:F6:D1:3C:E8:92:5F:2B:0E:3B:0D:22:C5:C7:02:A9
X509v3 Authority Key Identifier:
keyid:39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:79:f4:14:b0:84:f6:98:16:d2:47:6d:c1:f3:cf:dc:53:99:
2e:f4:43:36:cd:ae:2b:9f:42:f1:38:97:9b:2b:b5:20:08:46:
24:94:cf:0c:f3:0d:3c:a0:4f:33:30:b9:d4:10:32:4b:00:7f:
e8:ae:1c:70:93:7b:4b:79:ce:46:43:b1:2e:04:9a:7e:10:85:
09:c6:71:d2:d0:53:84:4e:c8:1d:6d:a6:0f:f5:df:4b:b6:69:
ba:1f:ba:1f:df:83:85:7c:1b:58:cc:84:3d:20:a2:0a:e9:44:
62:96:7b:0b:2a:45:5b:a3:3a:25:5c:d8:32:a1:53:b6:81:c1:
03:56:ee:fe:b4:79:b6:0d:a7:d1:fe:ac:60:85:7b:8b:3d:eb:
0e:02:42:55:0e:3b:3c:5e:b8:99:08:82:2b:7c:d3:44:83:84:
1f:a4:b7:93:32:7f:a9:85:02:4b:9a:49:e1:8a:90:c4:9d:ce:
30:46:d1:f6:7e:26:cf:95:8d:66:d9:be:a3:33:7d:a2:bd:9d:
ee:9e:72:6d:a1:53:53:42:05:74:53:aa:28:7b:2c:12:27:6b:
1d:e1:cf:a4:c3:00:c9:79:3d:2c:9b:83:81:89:d7:34:1f:ab:
78:e2:73:59:26:ec:2d:69:65:77:06:d3:b7:18:24:bb:b3:e9:
fc:b2:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:10:37 2025 by rpki-client