
$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
File: DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft (raw, json)
Hash identifier: xTlt6LuaoilGi7dec0lnNKWY6ruThARUZZmq+IBlL38=
Subject key identifier: 2A:21:F4:D8:67:32:C9:13:75:49:2F:B7:8A:8A:F5:77:74:23:98:9D
Authority key identifier: DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B
Certificate issuer: /CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
Certificate serial: 03A24457B84E9E685D833597C63992B5CA6986D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
Manifest number: 023B
Signing time: Mon 03 Nov 2025 16:21:37 +0000
Manifest this update: Mon 03 Nov 2025 16:16:37 +0000
Manifest next update: Tue 04 Nov 2025 20:18:37 +0000
Files and hashes: 1: DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl (hash: XPHsbLgglEm5UJkTryBU5HkhVOmL7LE/bqRzW4y+hMw=)
2: 3133312e3139362e32382e302f32322d3234203d3e20323731343130.roa (hash: ydnnka0+OlIVr22V1E7GQvPOVKsua6emsd0Y50DmFag=)
3: 323830343a376231383a3a2f33322d3438203d3e20323731343130.roa (hash: QTNnzR+UYlBgLx4JqbZERJxck9MVaHyRwCbO/zvmHR4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl
rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 18:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a2:44:57:b8:4e:9e:68:5d:83:35:97:c6:39:92:b5:ca:69:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE11F8185214800CA4C71C2A532004CC7BE8E00B
Validity
Not Before: Nov 3 16:16:37 2025 GMT
Not After : Nov 4 20:18:37 2025 GMT
Subject: CN=2A21F4D86732C91375492FB78A8AF5777423989D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:20:ea:32:73:e8:e8:83:c1:e6:c6:c9:ec:
cd:ff:25:9f:f9:33:78:3d:89:57:3d:60:fa:6f:dd:
fb:f2:f3:18:9d:ac:81:b1:d8:94:38:d9:91:c7:be:
31:e5:99:ae:10:65:e0:e5:9a:f1:46:3e:48:e2:b8:
e7:79:c9:64:c5:9f:f2:bc:86:6c:66:84:61:e3:af:
5c:db:fb:3b:de:99:5a:c8:9d:1e:db:a8:c1:4b:8a:
f5:a3:5f:61:42:b5:bb:e2:02:b5:1a:0b:7f:04:f3:
eb:86:0f:a0:3c:3a:9b:4c:a0:91:84:6e:4f:90:ea:
61:dc:3e:39:bf:51:a0:61:f9:3b:ae:62:8b:ff:0d:
f0:91:60:26:96:e7:33:71:ba:8c:83:ce:13:c3:6b:
94:2b:49:f0:ab:6c:ad:1f:ce:cc:97:63:17:b1:1f:
c5:21:3c:52:65:36:18:18:f9:c4:c1:30:86:9c:49:
12:bd:28:2b:60:4e:74:06:02:d8:aa:2f:e9:a5:96:
e2:fe:8b:86:01:bf:27:ee:c8:07:c4:19:67:2c:b8:
b0:23:ae:82:ae:8c:cc:78:ce:ef:7e:ae:12:37:c9:
85:9a:98:9b:fe:38:83:1b:43:96:f0:1e:c5:19:a3:
3c:99:f0:64:2b:0c:19:c3:a4:12:70:9f:d7:9f:c8:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:F4:D8:67:32:C9:13:75:49:2F:B7:8A:8A:F5:77:74:23:98:9D
X509v3 Authority Key Identifier:
keyid:DE:11:F8:18:52:14:80:0C:A4:C7:1C:2A:53:20:04:CC:7B:E8:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE11F8185214800CA4C71C2A532004CC7BE8E00B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/DE11F8185214800CA4C71C2A532004CC7BE8E00B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fe:92:00:61:3e:a7:f0:43:eb:70:1e:46:ff:80:af:2f:39:
5c:0e:22:2b:9d:47:c6:e3:6b:37:fc:c8:04:71:e4:3f:f5:2e:
5a:71:0d:db:59:1e:98:5c:0e:7f:0b:93:72:8c:d0:62:3e:9c:
81:b8:f8:d9:9e:6e:12:99:da:e8:14:a6:0d:b6:b4:64:be:fd:
34:e1:84:cd:35:ca:23:e8:62:e8:f0:e0:42:86:77:f2:67:ad:
e1:1e:e7:bb:94:c9:25:45:71:d9:f0:65:ae:85:4f:9b:7c:79:
2c:9f:f7:79:e3:9d:ce:14:e4:65:c6:da:f2:48:88:5b:4a:6c:
d3:49:33:07:8e:b0:a3:c5:e7:34:3a:9c:3c:08:25:fa:4b:75:
bb:65:e7:ff:b9:c7:e7:4b:24:19:a3:00:2d:61:31:79:32:e5:
2d:ea:08:43:2a:dc:07:1b:de:d4:25:7c:9a:17:fc:ec:62:cf:
aa:00:81:30:fa:7e:d7:c7:0e:4c:be:c5:41:97:c9:80:27:5b:
5d:53:25:0d:63:1e:8f:64:fe:11:dc:80:4a:2b:28:e8:f0:59:
36:cc:db:66:0c:b2:a0:7d:62:79:e7:6a:e3:01:a7:1d:48:77:
f0:9c:1c:24:5f:a9:c6:0f:87:62:cc:29:2f:bf:33:ad:ef:3b:
58:63:0e:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUA6JEV7hOnmhdgzWXxjmStcpphtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxMUY4MTg1MjE0ODAwQ0E0QzcxQzJBNTMyMDA0Q0M3
QkU4RTAwQjAeFw0yNTExMDMxNjE2MzdaFw0yNTExMDQyMDE4MzdaMDMxMTAvBgNV
BAMTKDJBMjFGNEQ4NjczMkM5MTM3NTQ5MkZCNzhBOEFGNTc3NzQyMzk4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkyDqMnPo6IPB5sbJ7M3/JZ/5
M3g9iVc9YPpv3fvy8xidrIGx2JQ42ZHHvjHlma4QZeDlmvFGPkjiuOd5yWTFn/K8
hmxmhGHjr1zb+zvemVrInR7bqMFLivWjX2FCtbviArUaC38E8+uGD6A8OptMoJGE
bk+Q6mHcPjm/UaBh+TuuYov/DfCRYCaW5zNxuoyDzhPDa5QrSfCrbK0fzsyXYxex
H8UhPFJlNhgY+cTBMIacSRK9KCtgTnQGAtiqL+mlluL+i4YBvyfuyAfEGWcsuLAj
roKujMx4zu9+rhI3yYWamJv+OIMbQ5bwHsUZozyZ8GQrDBnDpBJwn9efyMKxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKiH02GcyyRN1SS+3ior1d3QjmJ0wHwYDVR0j
BBgwFoAU3hH4GFIUgAykxxwqUyAEzHvo4AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBY
eXIvMC9ERTExRjgxODUyMTQ4MDBDQTRDNzFDMkE1MzIwMDRDQzdCRThFMDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMTFGODE4NTIxNDgwMENB
NEM3MUMyQTUzMjAwNENDN0JFOEUwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBYeXIvMC9E
RTExRjgxODUyMTQ4MDBDQTRDNzFDMkE1MzIwMDRDQzdCRThFMDBCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHv6SAGE+p/BD63AeRv+Ary85XA4iK51HxuNrN/zIBHHkP/UuWnEN21kemFwO
fwuTcozQYj6cgbj42Z5uEpna6BSmDba0ZL79NOGEzTXKI+hi6PDgQoZ38met4R7n
u5TJJUVx2fBlroVPm3x5LJ/3eeOdzhTkZcba8kiIW0ps00kzB46wo8XnNDqcPAgl
+kt1u2Xn/7nH50skGaMALWExeTLlLeoIQyrcBxve1CV8mhf87GLPqgCBMPp+18cO
TL7FQZfJgCdbXVMlDWMej2T+EdyASiso6PBZNszbZgyyoH1ieedq4wGnHUh38Jwc
JF+pxg+HYswpL78zre87WGMOPQ==
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:25:37 2025 by rpki-client