
$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
File: 5068952903F5F17C21FA5B2EC1BE472DF306072C.mft (raw, json)
Hash identifier: KvCBEOnkzQ+6CqSKRf0YbT+5RZolFdbHm+xODsA6Q2k=
Subject key identifier: F0:FC:C5:48:29:C9:2C:31:65:A8:30:27:D9:E3:F3:11:83:33:C0:7A
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Certificate issuer: /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial: 76466E84D8B09A23E64CE8811C4C78D9A093F476
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
Manifest number: 02BB
Signing time: Wed 05 Nov 2025 14:06:27 +0000
Manifest this update: Wed 05 Nov 2025 14:01:27 +0000
Manifest next update: Thu 06 Nov 2025 15:41:27 +0000
Files and hashes: 1: 323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (hash: BXkrp2Mvx2nWGCFFgusdd+uwhU+HbeeOijlRUAvUL8s=)
2: 3137302e37392e302e302f32322d3332203d3e20323636323839.roa (hash: 3UcJp+sAAG3um4LkAt+wonBgw14MEtXK+Iy70mF7x7c=)
3: 5068952903F5F17C21FA5B2EC1BE472DF306072C.crl (hash: pgSxWDY85VuBc74CVMVXDHNQIXeOupy5zFKSWYnflpI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 15:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:46:6e:84:d8:b0:9a:23:e6:4c:e8:81:1c:4c:78:d9:a0:93:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Validity
Not Before: Nov 5 14:01:27 2025 GMT
Not After : Nov 6 15:41:27 2025 GMT
Subject: CN=F0FCC54829C92C3165A83027D9E3F3118333C07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:2a:ef:e4:39:99:80:87:f7:0d:a0:29:27:
19:04:fa:ba:96:8c:03:d3:6e:63:e8:ae:9c:c4:41:
ca:17:50:41:21:78:df:fe:f9:a1:c1:53:3f:7b:51:
9e:64:cc:fa:52:60:6c:29:06:3a:c0:8a:4e:5f:8d:
ca:f6:73:d0:1b:26:52:21:68:42:4e:3b:7e:e3:ca:
73:82:33:12:a1:ba:90:4f:b4:e8:2d:5c:5e:43:85:
1c:1c:14:15:df:d8:1b:c7:e1:e8:22:ce:0b:ff:80:
0d:25:42:23:fe:53:dd:80:11:fe:b5:03:6c:a5:17:
51:31:e8:11:2f:b7:cd:aa:f8:49:11:53:44:56:c2:
02:f8:7d:70:12:e0:12:5d:1d:e7:66:75:fa:be:c5:
f7:c6:cb:bd:5d:75:11:2a:f1:0a:44:35:f5:0a:8b:
4e:b8:81:a0:f5:7d:68:42:ab:c8:66:e1:b4:1d:12:
91:a6:b7:69:29:4d:e9:29:f9:4b:36:5e:b1:03:ac:
14:c8:a3:57:43:69:04:3f:95:ef:cc:72:5e:eb:67:
40:93:67:bb:02:0a:00:5c:e3:01:31:2e:d1:f0:db:
f5:c5:22:0c:7d:52:c5:f8:a1:46:32:73:81:3e:6a:
11:4d:f7:2d:f8:8c:69:d6:67:81:36:3f:8d:e7:ba:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:C5:48:29:C9:2C:31:65:A8:30:27:D9:E3:F3:11:83:33:C0:7A
X509v3 Authority Key Identifier:
keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:5d:2b:e3:36:bc:3f:c9:ee:9e:04:6c:ac:98:d1:a9:3c:
2a:90:3e:d9:56:7f:ef:90:24:4c:d7:4e:46:ee:56:73:ab:3e:
66:11:d3:95:c9:15:44:59:be:90:47:2d:e1:f5:08:e7:ce:e0:
c3:d7:d6:4f:da:0f:db:04:30:de:f8:9d:3f:eb:12:8c:3f:90:
5c:9c:09:19:f4:07:76:b1:bb:19:a3:34:1a:89:a2:61:aa:b2:
0e:ad:73:0a:1e:7b:8c:1e:29:94:8d:2c:b0:4b:61:91:f2:9b:
c3:6d:51:6f:10:f4:53:cc:0f:70:0b:b4:ee:18:13:68:b3:0a:
07:4c:41:30:95:7c:32:58:36:e6:ca:89:eb:b8:fa:c2:01:32:
6d:e4:6a:8c:fc:28:45:ea:13:b7:38:b6:bd:83:6d:ba:c1:08:
b4:ef:f1:e9:80:6c:03:81:57:e6:5e:6c:b7:39:2f:73:2f:dc:
59:b8:d6:36:9c:dd:43:9f:e8:99:61:05:78:00:39:5f:f1:18:
37:87:9f:38:b7:9e:51:53:63:33:b8:c2:d6:ed:18:f0:76:4f:
72:76:9d:4a:8a:7b:c5:90:a3:bf:c4:3d:5d:19:02:a4:f8:32:
3f:93:c4:af:e6:4c:61:17:d5:fc:97:38:2a:91:b2:cf:76:fd:
47:0e:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:35:26 2025 by rpki-client