
$ rpki-client -vvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
File: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft (raw, json)
Hash identifier: 5rpJJHDVL2zxZ/MEeNekUTaVpT9V+uOkq9NjgjlczK4=
Subject key identifier: 99:88:91:A5:D7:8F:1D:E6:0F:5A:79:E3:16:07:68:F9:85:DF:4C:EE
Authority key identifier: 3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
Certificate issuer: /CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Certificate serial: 212E8FC7A4E2253AB1946316A0AFF3550F30DADB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
Manifest number: 0303
Signing time: Mon 03 Nov 2025 01:50:50 +0000
Manifest this update: Mon 03 Nov 2025 01:45:50 +0000
Manifest next update: Tue 04 Nov 2025 03:10:50 +0000
Files and hashes: 1: 323830343a373339303a3a2f33322d3438203d3e20323730393233.roa (hash: Iq5WCwuvz0rLCwvWBiWtBI9QmiixD6hDdHX1VCgdhF0=)
2: 3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl (hash: Yoq0ndpQPc+woPy1RLsLSKXl1VKNfwbu8CF2MLaOcDA=)
3: 3138362e32362e36382e302f32322d3234203d3e20323730393233.roa (hash: 3JoJ7nxLjZvn6ezW2u+Ab54zGDHRl8hQrUOiQXrz9RQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 03:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2e:8f:c7:a4:e2:25:3a:b1:94:63:16:a0:af:f3:55:0f:30:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Validity
Not Before: Nov 3 01:45:50 2025 GMT
Not After : Nov 4 03:10:50 2025 GMT
Subject: CN=998891A5D78F1DE60F5A79E3160768F985DF4CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:98:35:76:c3:a5:69:c9:ca:99:46:0a:f9:
e1:bb:db:c9:ab:42:ac:4d:57:66:72:24:7c:41:4b:
c4:60:2f:81:36:66:fb:35:50:7b:fa:65:0d:ff:95:
65:6b:5c:17:8b:fb:5f:48:12:9a:d8:d6:11:57:d1:
bd:63:21:fe:d3:2b:c9:e7:ed:f0:b2:31:d7:ab:8b:
4d:36:31:57:cb:2e:be:a7:d1:dd:ac:cc:7d:09:af:
d8:1a:a0:df:33:ca:17:14:43:30:27:c5:ea:54:c8:
2c:2b:08:47:aa:0a:31:d5:8c:93:5d:40:f3:5a:b2:
38:60:21:59:65:c2:bb:25:9b:dd:06:1b:83:c9:ae:
19:82:93:dd:bb:b7:b9:75:78:a8:ca:b3:72:1c:51:
09:93:eb:ff:8b:81:3f:c1:25:ed:01:6c:7e:85:94:
d7:e3:5b:cd:dd:fa:6a:72:20:f4:89:d1:46:d9:44:
d5:5d:6f:18:69:ea:dc:45:a5:a9:29:bd:f6:4f:bc:
69:0a:17:17:cd:ec:a1:12:73:a0:d7:d7:dc:9e:17:
1a:fe:ad:ce:12:bf:40:21:6f:a6:f3:9a:1b:46:cb:
bc:74:36:d4:cd:7e:59:52:a2:14:0c:18:d5:f8:4a:
75:e0:cc:b8:c8:d6:23:0f:23:78:eb:77:c0:d9:55:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:91:A5:D7:8F:1D:E6:0F:5A:79:E3:16:07:68:F9:85:DF:4C:EE
X509v3 Authority Key Identifier:
keyid:3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:86:c6:a6:b5:cf:27:4c:24:3a:aa:e2:04:ed:cd:b9:ad:6a:
ad:0e:aa:34:5e:fe:66:7e:4b:5c:56:82:b9:03:b3:8c:b1:f8:
17:fd:f6:11:09:b7:b8:e9:c3:6f:ec:a3:61:34:12:f0:0c:2e:
38:01:eb:68:b3:96:5b:13:1f:92:87:be:9e:b4:c2:20:15:9f:
fa:75:1d:05:c4:8e:ed:45:0a:35:1b:3b:eb:81:a4:e9:14:47:
6e:ea:10:63:a7:cf:ee:72:a7:f5:a3:8c:0b:8c:fd:82:7f:d1:
de:90:78:9f:c5:22:4f:e4:8d:b5:ef:4c:b1:fa:f2:32:25:59:
e0:22:d9:e3:6a:bb:ee:0e:cb:63:16:0e:bb:98:c7:24:89:c1:
57:e0:fb:05:55:42:82:ce:d9:fa:dc:c1:5c:bf:83:bb:a8:46:
d2:d3:cc:5f:2e:77:27:ef:b6:8a:a5:85:ad:ee:f1:be:e2:5f:
8f:6c:59:99:87:44:ee:b7:eb:f2:9a:f1:90:a7:b7:e7:1d:50:
1f:8b:86:04:c3:61:69:0e:9b:aa:02:f6:d7:0b:6f:eb:11:9f:
f3:34:d3:89:7e:38:ff:87:95:9e:40:55:8f:35:53:29:9c:9c:
75:99:33:8b:71:a0:df:9e:5f:c2:47:2e:16:55:3e:3d:cb:8c:
a7:44:11:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:42 2025 by rpki-client