
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
File: AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft (raw, json)
Hash identifier: c4smjONq+nBEj2iR3H84ZWSewF3b2SCGoDRN6CTIA0c=
Subject key identifier: 09:E5:1B:E7:FA:8E:D6:49:32:F7:CD:03:74:BD:99:71:0E:FC:6C:F2
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial: 259FE85039FC68C69E079A39748AA0AA86B93BC2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
Manifest number: 0308
Signing time: Sun 02 Nov 2025 16:24:57 +0000
Manifest this update: Sun 02 Nov 2025 16:19:57 +0000
Manifest next update: Mon 03 Nov 2025 20:10:57 +0000
Files and hashes: 1: 323830343a323430343a3a2f33322d313238203d3e20323634313937.roa (hash: 8ZKh+/A1B7U2qnoSIyqA74nUY0E4NfYAZQ5DA4URAUY=)
2: AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl (hash: APIGx1UxkFFZCx2OmElvRMqihUJbQXPVl/vIAvIXhGM=)
3: 3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa (hash: 0fjUNidFm7BTlV1+oalJDhBOmBcKhkFlWCYsHfmdOOw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9f:e8:50:39:fc:68:c6:9e:07:9a:39:74:8a:a0:aa:86:b9:3b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Validity
Not Before: Nov 2 16:19:57 2025 GMT
Not After : Nov 3 20:10:57 2025 GMT
Subject: CN=09E51BE7FA8ED64932F7CD0374BD99710EFC6CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:e5:9c:b3:eb:71:a8:81:13:ca:ed:9b:b3:
92:cc:37:5c:16:5e:81:79:2b:e6:37:0f:0c:b3:89:
c1:14:73:ed:b5:9c:9e:e8:ad:42:51:b6:c1:0c:cb:
17:ab:4f:62:6d:ce:c1:a4:83:7d:84:65:d0:29:92:
cb:0c:8d:94:c8:93:5f:7d:9f:7e:ab:2a:4f:fe:44:
7f:df:a5:74:05:f4:b9:9a:6e:8e:64:fe:13:bf:b3:
73:9e:3e:2f:fe:1a:72:37:61:4e:43:6e:57:a5:ae:
43:5b:a5:d8:0d:37:9d:2e:1c:9f:b2:59:61:66:54:
93:92:c0:f7:ff:a9:df:ba:3b:5d:9f:fc:6c:76:28:
51:a5:b3:6a:f0:8f:5b:ce:3e:76:50:39:4f:5b:76:
7b:51:0e:ce:82:5a:c9:de:2a:9f:1a:fb:e0:71:f4:
ad:08:4d:84:c0:02:e6:c1:d0:c1:e8:8d:a7:8d:75:
d0:5b:4f:92:b1:9d:c7:bf:c0:70:71:b7:98:4c:70:
66:b2:b8:28:96:a5:e2:b1:da:42:d2:f2:fd:13:44:
30:41:e1:d0:de:95:a1:c3:dd:a3:19:4e:8f:fe:dd:
b6:b3:2c:4d:db:20:98:9d:a1:90:6b:31:2c:e0:f3:
ae:66:8c:e4:63:34:dd:d3:75:18:28:1b:85:e4:48:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:1B:E7:FA:8E:D6:49:32:F7:CD:03:74:BD:99:71:0E:FC:6C:F2
X509v3 Authority Key Identifier:
keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:c0:62:61:f7:01:6f:e1:cf:e2:fe:4b:ff:44:2c:f0:ae:
78:cc:2a:38:b0:06:e0:fe:6b:ab:44:74:dc:45:3c:a9:b8:0e:
47:b7:46:e6:93:80:5a:be:aa:bc:b2:9e:dc:a3:5e:9b:13:5c:
72:9f:89:28:39:f6:2f:47:05:b6:40:46:78:31:42:26:11:df:
ee:ca:43:68:63:8b:f4:3f:73:e1:ff:74:0e:4c:91:4c:0a:c6:
8f:48:b4:64:c2:09:28:01:84:c9:7a:a3:13:61:b1:97:a0:48:
f2:a2:80:ce:30:53:94:fe:ff:cb:43:07:2a:8a:63:53:fa:f2:
36:8c:f9:7b:fa:b8:b5:81:8e:f8:8e:e1:06:ab:b9:5e:0c:d2:
23:ee:bd:1c:d3:69:42:20:16:f9:ff:d9:09:35:ed:e5:9d:3b:
61:a4:d8:00:7a:09:e6:a9:f6:44:91:39:b9:d0:cb:68:cd:dd:
c7:74:a7:8f:e6:53:ca:63:b8:b0:cb:8e:71:8c:aa:a5:1f:bb:
f2:7b:99:e5:f3:db:e9:0c:72:92:af:a9:c2:11:30:08:ea:63:
64:1a:0b:fe:73:4f:7a:dd:02:bb:a2:e9:3c:32:c2:99:5c:19:
db:c2:60:db:e4:80:fc:f3:f6:d3:b0:d3:1c:9c:57:7a:1a:b0:
00:b3:78:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJZ/oUDn8aMaeB5o5dIqgqoa5O8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFMUYyQzYyMzM1RkYzMzcyNzczREU3MjU0NUU4QjM4
RjBCRkMyMTAeFw0yNTExMDIxNjE5NTdaFw0yNTExMDMyMDEwNTdaMDMxMTAvBgNV
BAMTKDA5RTUxQkU3RkE4RUQ2NDkzMkY3Q0QwMzc0QkQ5OTcxMEVGQzZDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfOWcs+txqIETyu2bs5LMN1wW
XoF5K+Y3DwyzicEUc+21nJ7orUJRtsEMyxerT2JtzsGkg32EZdApkssMjZTIk199
n36rKk/+RH/fpXQF9Lmabo5k/hO/s3OePi/+GnI3YU5DblelrkNbpdgNN50uHJ+y
WWFmVJOSwPf/qd+6O12f/Gx2KFGls2rwj1vOPnZQOU9bdntRDs6CWsneKp8a++Bx
9K0ITYTAAubB0MHojaeNddBbT5Kxnce/wHBxt5hMcGayuCiWpeKx2kLS8v0TRDBB
4dDelaHD3aMZTo/+3bazLE3bIJidoZBrMSzg865mjORjNN3TdRgoG4XkSMoVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCeUb5/qO1kky980DdL2ZcQ78bPIwHwYDVR0j
BBgwFoAUruHyxiM1/zNydz3nJUXos48L/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT
NVQvMS9BRUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTFGMkM2MjMzNUZGMzM3
Mjc3M0RFNzI1NDVFOEIzOEYwQkZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlTNVQvMS9B
RUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb3rAYmH3AW/hz+L+S/9ELPCueMwqOLAG4P5rq0R03EU8qbgOR7dG5pOAWr6q
vLKe3KNemxNccp+JKDn2L0cFtkBGeDFCJhHf7spDaGOL9D9z4f90DkyRTArGj0i0
ZMIJKAGEyXqjE2Gxl6BI8qKAzjBTlP7/y0MHKopjU/ryNoz5e/q4tYGO+I7hBqu5
XgzSI+69HNNpQiAW+f/ZCTXt5Z07YaTYAHoJ5qn2RJE5udDLaM3dx3Snj+ZTymO4
sMuOcYyqpR+78nuZ5fPb6Qxykq+pwhEwCOpjZBoL/nNPet0Cu6LpPDLCmVwZ28Jg
2+SA/PP207DTHJxXehqwALN4Ig==
-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:36 2025 by rpki-client