
$ rpki-client -vvf rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
File: 339912378B69A4318260C6F2C3D6E285FC8978A5.mft (raw, json)
Hash identifier: 99s93P92n8V2c3ZCCfj9i6jPmXPQfiVff4nWbgjgoWY=
Subject key identifier: 38:24:5F:C4:95:14:2C:42:3F:85:AC:3C:6A:83:FF:FD:63:76:D0:FE
Authority key identifier: 33:99:12:37:8B:69:A4:31:82:60:C6:F2:C3:D6:E2:85:FC:89:78:A5
Certificate issuer: /CN=339912378B69A4318260C6F2C3D6E285FC8978A5
Certificate serial: 14099DC9C75985DC791F963DF3077D58A82FC734
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
Manifest number: 03
Signing time: Wed 05 Nov 2025 10:50:25 +0000
Manifest this update: Wed 05 Nov 2025 10:45:25 +0000
Manifest next update: Thu 06 Nov 2025 12:03:25 +0000
Files and hashes: 1: 323830343a393237343a3a2f33322d313238203d3e20323734373133.roa (hash: TEmq//04GXxvrmUqV+u34XfU/orZIJj5k6DBRwEaEDI=)
2: 339912378B69A4318260C6F2C3D6E285FC8978A5.crl (hash: fcP+Zr8AYn9yI5Px/7E4BY+7+a/0uBpCIfWzRMbiwE0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.crl
rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 12:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:09:9d:c9:c7:59:85:dc:79:1f:96:3d:f3:07:7d:58:a8:2f:c7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339912378B69A4318260C6F2C3D6E285FC8978A5
Validity
Not Before: Nov 5 10:45:25 2025 GMT
Not After : Nov 6 12:03:25 2025 GMT
Subject: CN=38245FC495142C423F85AC3C6A83FFFD6376D0FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:29:54:3c:d2:78:64:ad:c5:69:61:f0:1b:
dc:3e:ca:45:16:10:ca:e0:71:f4:e3:2a:98:83:ac:
bc:7e:79:80:c2:5c:cb:5d:47:26:00:b3:ae:6c:54:
47:27:86:ef:f7:6c:d4:68:2e:1d:e2:8c:55:e7:b5:
cc:e4:3b:3a:1d:50:c9:cd:22:7d:ee:9d:38:c5:a8:
29:37:6c:f2:11:a4:08:d2:c0:c7:2b:bc:59:18:cb:
90:1a:65:53:20:5b:f8:72:63:a0:d1:d5:f7:dd:8b:
73:b9:42:c8:6b:73:ac:7b:0b:24:3c:c5:ea:c0:08:
20:1e:01:86:89:eb:da:ac:d3:36:f6:d0:13:64:ec:
a8:47:af:b3:30:6b:dc:a1:1d:57:dc:6c:90:4c:38:
e0:33:9a:1f:b5:d7:a6:63:56:2c:3b:f6:6e:42:b0:
cd:a8:36:82:37:27:e2:70:28:22:83:d7:0b:80:45:
a7:60:a2:d6:b3:3a:76:83:70:f1:90:69:08:ba:f4:
61:91:24:35:0c:39:27:e4:b1:2f:1d:1f:0c:73:7c:
e4:b2:1a:a8:9a:ed:d9:b7:6b:c7:15:4b:c8:19:8b:
7a:9a:c0:56:f9:9c:75:6f:f2:81:6f:77:0a:c0:15:
3d:07:c6:09:e3:00:6c:1e:e7:c7:04:07:6c:07:37:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:5F:C4:95:14:2C:42:3F:85:AC:3C:6A:83:FF:FD:63:76:D0:FE
X509v3 Authority Key Identifier:
keyid:33:99:12:37:8B:69:A4:31:82:60:C6:F2:C3:D6:E2:85:FC:89:78:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1a:7a:d9:07:ce:7a:2d:a0:0d:d7:58:7f:88:06:b0:7c:a4:
09:50:1c:56:53:af:70:86:ce:9a:91:c0:7a:fd:f7:74:e8:13:
55:1a:1c:26:28:1d:ec:b6:ec:45:ca:b5:aa:aa:a2:c0:6d:7b:
7f:c8:40:0c:32:12:7f:cb:ef:72:ed:55:9e:ba:8c:93:a7:f5:
50:08:d4:70:ee:00:28:a4:fe:53:44:62:4f:63:b0:69:41:ba:
f6:26:b0:ff:21:4e:92:e9:78:e3:c8:93:00:28:ca:fc:65:50:
d6:a5:73:5b:e1:c9:a7:cf:57:93:c0:a9:76:4c:ac:7a:e9:fe:
d4:69:5d:fb:9d:37:a4:53:27:13:c1:22:82:e2:7b:c8:31:c2:
14:1f:96:11:3b:70:7d:40:df:7c:1f:80:96:28:d2:c7:3d:16:
8d:a7:9b:8a:d7:d5:af:c3:32:1a:b8:bb:40:a4:43:38:4d:b7:
2d:c3:e0:f6:1a:ae:69:8f:a1:19:73:46:a0:1b:3c:75:2e:e2:
b3:63:c9:e2:bd:5e:2e:8b:2c:17:67:08:20:e3:d3:6b:48:f7:
7e:fb:40:cc:62:45:7d:ac:a0:9a:b1:b5:5e:f3:da:83:9b:d7:
ff:86:b4:f3:b4:bc:92:39:ac:f8:ee:4d:d0:d5:42:65:4b:3f:
9a:75:f1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:41:05 2025 by rpki-client