
$ rpki-client -vvf rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
File: 43B19C9E57D3EDADD315DF0E16760E303285E640.mft (raw, json)
Hash identifier: icNe40ezbUDH8a/3eET3PXQx/e4ZHyKfE18YLatFgIQ=
Subject key identifier: B2:0B:36:94:11:44:F2:B3:9C:52:7C:78:88:2D:7A:F8:6E:37:46:CA
Authority key identifier: 43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
Certificate issuer: /CN=43B19C9E57D3EDADD315DF0E16760E303285E640
Certificate serial: 7DD4B99BFCB4C652BB75F7BB5FA780B5F8035A4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
Manifest number: 0304
Signing time: Sun 02 Nov 2025 22:27:33 +0000
Manifest this update: Sun 02 Nov 2025 22:22:33 +0000
Manifest next update: Tue 04 Nov 2025 00:19:33 +0000
Files and hashes: 1: 43B19C9E57D3EDADD315DF0E16760E303285E640.crl (hash: Lsss16IF8x2xpnAZyMr70DQFtHtTcA7x357e6EWo+h4=)
2: 323830343a333330633a3a2f33322d3336203d3e20323635313133.roa (hash: fx1aVoJ8u5swT9sokjs71rdgCIfOetZ7kdmMctTx2UU=)
3: 3137302e3235342e3130382e302f32322d3234203d3e20323635313133.roa (hash: jSR8/YMl7l3F3ZQFPLDZugzcVfH7Z8XPfuj/tMptYgw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl
rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d4:b9:9b:fc:b4:c6:52:bb:75:f7:bb:5f:a7:80:b5:f8:03:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43B19C9E57D3EDADD315DF0E16760E303285E640
Validity
Not Before: Nov 2 22:22:33 2025 GMT
Not After : Nov 4 00:19:33 2025 GMT
Subject: CN=B20B36941144F2B39C527C78882D7AF86E3746CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:97:99:8d:eb:97:5e:cf:93:a1:3e:60:d0:
3b:e4:b1:94:90:8c:b6:41:0f:19:9b:9a:e5:57:99:
11:f0:68:99:dc:f6:e2:31:33:27:b5:b5:f8:a2:69:
59:f2:09:be:d2:a2:b8:5d:0b:f1:83:7e:91:51:c7:
29:82:35:af:d1:89:4e:1b:df:22:f6:de:00:60:77:
19:f1:fe:f3:6e:c6:87:3f:a9:4d:28:d0:e4:42:de:
bf:bc:11:fc:56:6c:ed:95:39:5f:88:cf:c2:38:cb:
f9:ae:1d:d6:76:23:a1:90:8e:ae:69:19:91:ea:81:
60:aa:ad:32:b2:b0:ae:7c:6c:3c:86:36:9f:32:16:
14:84:8e:b1:ad:d5:13:88:a5:77:7e:ea:ec:dd:35:
df:5c:fc:fa:38:0e:54:31:bc:5c:09:f7:57:55:d7:
12:82:68:0e:02:15:e1:c0:fb:93:25:2f:be:dd:0d:
d1:b5:6a:9e:dc:10:10:22:bd:42:82:0a:3a:34:95:
1f:6f:f3:10:08:17:68:ed:cb:a9:9d:58:60:82:78:
6a:89:b8:97:3a:53:63:f8:7b:35:ae:af:cb:56:ba:
cc:88:74:fb:8b:82:bf:89:84:fb:cc:8c:4a:9c:dd:
62:e0:8b:83:fa:06:d0:d9:69:f6:3b:46:33:b0:8d:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:36:94:11:44:F2:B3:9C:52:7C:78:88:2D:7A:F8:6E:37:46:CA
X509v3 Authority Key Identifier:
keyid:43:B1:9C:9E:57:D3:ED:AD:D3:15:DF:0E:16:76:0E:30:32:85:E6:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43B19C9E57D3EDADD315DF0E16760E303285E640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn54ZudRwFLxrxQTKZdqY93Mc1zaCTYpZoqoGuJKoY3s/1/43B19C9E57D3EDADD315DF0E16760E303285E640.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7f:a2:5e:f3:11:d4:51:ec:a5:f6:c4:c0:d3:95:85:84:8d:
5a:c3:1b:72:10:ba:d9:d3:95:a7:9c:50:9a:b1:0b:29:9c:67:
ea:66:97:4b:c2:2f:56:73:ab:5e:91:8c:2c:1f:fa:72:5a:7f:
b6:a5:f0:bd:a1:1c:d8:0f:3f:d5:41:35:27:04:49:87:2c:77:
b9:bd:2b:0a:54:7c:62:4e:6f:3b:bd:93:50:4b:8c:c6:3f:e2:
78:46:a1:4d:e9:6a:6a:26:94:2a:b1:86:3b:56:35:75:a3:0b:
5f:1b:c9:80:94:b9:59:7a:70:2d:d7:2f:48:1c:1b:3a:82:ad:
9a:7b:a5:78:45:06:e5:1b:5c:f2:14:fc:c0:7a:fa:09:bb:10:
ee:af:11:bd:78:c3:b1:bc:4c:e7:81:e0:30:2d:be:df:23:d8:
7b:58:43:f0:45:49:3a:35:4b:c4:0b:de:6d:95:33:07:67:2d:
19:2e:df:95:4f:c5:9e:f9:04:6b:4f:9a:b2:c6:72:4b:59:5a:
32:b9:af:56:85:31:96:4c:ad:5c:e5:51:f4:02:a9:2d:b7:fe:
24:89:11:e0:42:45:ae:83:00:32:c1:ec:21:84:97:36:ca:18:
cb:f1:ed:74:32:10:6c:88:2c:66:33:3f:e6:ac:cc:72:a0:70:
a8:55:3d:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfdS5m/y0xlK7dfe7X6eAtfgDWkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCMTlDOUU1N0QzRURBREQzMTVERjBFMTY3NjBFMzAz
Mjg1RTY0MDAeFw0yNTExMDIyMjIyMzNaFw0yNTExMDQwMDE5MzNaMDMxMTAvBgNV
BAMTKEIyMEIzNjk0MTE0NEYyQjM5QzUyN0M3ODg4MkQ3QUY4NkUzNzQ2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChk5eZjeuXXs+ToT5g0DvksZSQ
jLZBDxmbmuVXmRHwaJnc9uIxMye1tfiiaVnyCb7SorhdC/GDfpFRxymCNa/RiU4b
3yL23gBgdxnx/vNuxoc/qU0o0ORC3r+8EfxWbO2VOV+Iz8I4y/muHdZ2I6GQjq5p
GZHqgWCqrTKysK58bDyGNp8yFhSEjrGt1ROIpXd+6uzdNd9c/Po4DlQxvFwJ91dV
1xKCaA4CFeHA+5MlL77dDdG1ap7cEBAivUKCCjo0lR9v8xAIF2jty6mdWGCCeGqJ
uJc6U2P4ezWur8tWusyIdPuLgr+JhPvMjEqc3WLgi4P6BtDZafY7RjOwjQkLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsgs2lBFE8rOcUnx4iC16+G43RsowHwYDVR0j
BBgwFoAUQ7GcnlfT7a3TFd8OFnYOMDKF5kAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ241NFp1ZFJ3Rkx4cnhRVEtaZHFZOTNNYzF6YUNUWXBab3FvR3VKS29Z
M3MvMS80M0IxOUM5RTU3RDNFREFERDMxNURGMEUxNjc2MEUzMDMyODVFNjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQjE5QzlFNTdEM0VEQURE
MzE1REYwRTE2NzYwRTMwMzI4NUU2NDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q241NFp1ZFJ3Rkx4cnhRVEtaZHFZOTNNYzF6YUNUWXBab3FvR3VKS29ZM3MvMS80
M0IxOUM5RTU3RDNFREFERDMxNURGMEUxNjc2MEUzMDMyODVFNjQwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmH+iXvMR1FHspfbEwNOVhYSNWsMbchC62dOVp5xQmrELKZxn6maXS8IvVnOr
XpGMLB/6clp/tqXwvaEc2A8/1UE1JwRJhyx3ub0rClR8Yk5vO72TUEuMxj/ieEah
TelqaiaUKrGGO1Y1daMLXxvJgJS5WXpwLdcvSBwbOoKtmnuleEUG5Rtc8hT8wHr6
CbsQ7q8RvXjDsbxM54HgMC2+3yPYe1hD8EVJOjVLxAvebZUzB2ctGS7flU/FnvkE
a0+assZyS1laMrmvVoUxlkytXOVR9AKpLbf+JIkR4EJFroMAMsHsIYSXNsoYy/Ht
dDIQbIgsZjM/5qzMcqBwqFU9MQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:41 2025 by rpki-client