
$ rpki-client -vvf rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.mft
File: 9045801A4DC68DA953FC89CE34780D7EC29C95F7.mft (raw, json)
Hash identifier: udYd7qo3voPQpWj2esTbvSzkdg1Q0ZgItOKkFATiYzU=
Subject key identifier: D0:36:AE:95:FF:E3:6D:C0:3E:20:D8:08:E7:F3:78:28:3E:83:AF:32
Authority key identifier: 90:45:80:1A:4D:C6:8D:A9:53:FC:89:CE:34:78:0D:7E:C2:9C:95:F7
Certificate issuer: /CN=9045801A4DC68DA953FC89CE34780D7EC29C95F7
Certificate serial: 24996F433BA053CA33E55BD416ECF47B66263C8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9045801A4DC68DA953FC89CE34780D7EC29C95F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.mft
Manifest number: 54
Signing time: Mon 03 Nov 2025 04:47:27 +0000
Manifest this update: Mon 03 Nov 2025 04:42:27 +0000
Manifest next update: Tue 04 Nov 2025 06:41:27 +0000
Files and hashes: 1: 3133382e3132322e35362e302f32322d3332203d3e20323634333237.roa (hash: /5sTmh8CIrqdmn85Jx/rgCpOUpo+GadutfMVLl4jauk=)
2: 9045801A4DC68DA953FC89CE34780D7EC29C95F7.crl (hash: Ajd371R5czF1eM2K6yoHDFG4DlOI6bAAq0jJMDmacDc=)
3: 323830343a323635343a3a2f33322d313238203d3e20323634333237.roa (hash: KxTO+NI0KoExiDZ8xGDa2gFsjYRGGAS7Miw3a38JgCY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.crl
rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9045801A4DC68DA953FC89CE34780D7EC29C95F7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 06:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:99:6f:43:3b:a0:53:ca:33:e5:5b:d4:16:ec:f4:7b:66:26:3c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9045801A4DC68DA953FC89CE34780D7EC29C95F7
Validity
Not Before: Nov 3 04:42:27 2025 GMT
Not After : Nov 4 06:41:27 2025 GMT
Subject: CN=D036AE95FFE36DC03E20D808E7F378283E83AF32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:f2:3a:b6:4c:dc:6b:df:dc:de:58:f8:1c:
b2:dd:67:f5:e4:39:de:e0:c1:11:6c:bd:fc:e6:bf:
90:07:d1:c7:da:91:29:bf:6f:dd:e1:e3:1b:76:1c:
61:a0:9f:4b:4d:bc:59:e3:89:5f:e4:25:a9:dc:75:
96:cb:ab:09:8b:b6:fd:a0:b6:c6:68:8d:b7:9e:2e:
09:d7:28:64:46:ca:a8:16:98:a0:5d:08:01:d2:47:
84:24:61:08:4c:53:d1:c3:e8:bb:b5:3d:76:ed:18:
c7:5a:3a:f3:ef:c8:70:01:70:59:fc:82:e4:06:54:
e9:b7:91:6b:2a:e4:60:ff:28:22:c2:9e:b1:5d:51:
a7:f7:c4:f3:ae:52:1f:1f:98:d0:1e:f5:2c:67:4a:
22:bb:f2:26:b2:7c:bf:70:5d:e8:ab:41:5b:dd:59:
ee:19:42:1e:65:23:bd:50:06:30:f0:a1:f8:80:78:
e1:47:31:cb:e4:0d:e5:48:03:c1:a2:34:25:f3:74:
cb:f6:93:eb:2d:0f:f2:89:af:94:76:a9:af:1c:b3:
40:7a:0e:d0:9d:dc:28:c4:e6:a7:84:8f:a1:dc:d9:
47:6b:21:00:7c:bd:78:41:b4:12:e1:d1:7c:b8:8c:
67:61:76:96:20:fe:87:fc:78:77:d7:ca:a6:23:9d:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:AE:95:FF:E3:6D:C0:3E:20:D8:08:E7:F3:78:28:3E:83:AF:32
X509v3 Authority Key Identifier:
keyid:90:45:80:1A:4D:C6:8D:A9:53:FC:89:CE:34:78:0D:7E:C2:9C:95:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9045801A4DC68DA953FC89CE34780D7EC29C95F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2VSs2uMeaZWmuLkqzUHq6SdJCC3ZFqwDTWsHFYDT3rU/0/9045801A4DC68DA953FC89CE34780D7EC29C95F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9a:c3:55:be:f2:81:5e:c1:0b:04:aa:02:e1:46:51:8b:9a:
6d:49:ff:43:13:ff:1e:0d:46:e3:92:ff:62:f6:34:e2:4a:b0:
18:0c:78:1e:2a:51:a3:31:d0:1b:20:91:9f:b5:9b:a2:3c:c9:
99:6f:43:e4:c8:42:03:5b:23:f4:b0:87:53:0c:b0:6f:03:b2:
8e:3a:fb:a6:88:c9:e1:6f:79:32:2c:58:93:52:f1:85:c7:c6:
5b:0f:c2:a4:a8:34:43:5e:2a:58:00:e7:5d:2d:99:bd:3e:f2:
89:68:68:4c:ca:0b:54:08:c8:4e:6b:7d:ba:5e:56:5b:9f:7a:
f1:ab:f4:fa:a3:fb:72:d5:2b:ea:10:1c:7c:cf:15:4d:1b:22:
a1:21:41:15:f3:fb:7a:b8:19:01:ce:16:9e:49:d8:f2:68:b6:
ff:bc:8d:7d:ba:b6:c1:50:29:4e:e3:93:e6:e3:f6:74:01:3f:
5e:cb:11:fb:8a:fe:ee:0b:71:22:f1:31:1c:4a:d7:1d:04:9d:
e4:06:3a:ae:4c:b7:be:34:63:41:e9:c5:91:d0:24:49:60:54:
4a:c5:c8:a3:bc:12:8f:18:38:1d:78:3a:de:5d:94:65:de:bd:
51:21:aa:ed:5f:93:26:8f:64:7b:5a:bd:2c:7f:5f:f8:fe:a5:
11:d0:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:29:24 2025 by rpki-client