
$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
File: 249982A414DC7818B3DD0BE08F54211F76DC2061.mft (raw, json)
Hash identifier: q3F4m6pfLQEUCC4pxdRHw1VK3bkT4luY5V7zOkCZCqE=
Subject key identifier: EA:7B:0F:50:70:D2:21:75:22:E8:19:2F:49:E1:5A:89:85:DF:6B:79
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Certificate issuer: /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial: 2A4515D7FA4B58CF03B443C2F8EE388D6F7D00ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
Manifest number: 02ED
Signing time: Mon 03 Nov 2025 06:21:19 +0000
Manifest this update: Mon 03 Nov 2025 06:16:19 +0000
Manifest next update: Tue 04 Nov 2025 08:28:19 +0000
Files and hashes: 1: 323830343a376338303a3a2f33322d3334203d3e20323731353030.roa (hash: 5wxJoDQVtyxUwlGvQJcFCFKiMCJlKItNci34dzVbtBM=)
2: 249982A414DC7818B3DD0BE08F54211F76DC2061.crl (hash: CFxl3clWI3Innub1xIccIKp/Ou4kN4NXWl5BM8RAawQ=)
3: 3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa (hash: QehcrbUqW+25+aE3u12HS8CpPA1nvgIYGJIiidbJdOE=)
4: 3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa (hash: Y6XBSOMMP/yx67hmBHKyeL1a8wdjtXjNc8P8n93d56s=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl
rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 08:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:45:15:d7:fa:4b:58:cf:03:b4:43:c2:f8:ee:38:8d:6f:7d:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Validity
Not Before: Nov 3 06:16:19 2025 GMT
Not After : Nov 4 08:28:19 2025 GMT
Subject: CN=EA7B0F5070D2217522E8192F49E15A8985DF6B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:d6:69:6a:62:0a:01:5b:6f:f9:ff:58:82:
fb:4b:4f:33:76:49:f7:96:61:fa:84:ad:d9:6c:2e:
4f:ba:ef:5c:e3:f9:bd:a2:85:c7:d2:36:36:d8:2c:
eb:2c:86:f2:10:82:c3:62:48:79:2e:05:e5:9d:28:
c1:17:1e:4a:cc:f3:a0:f0:9e:ee:1b:3b:11:fa:cd:
ed:8a:e5:d7:6b:c4:44:d1:75:54:01:72:cb:1d:b5:
25:e7:e8:79:75:59:f5:a5:a4:41:2e:46:9d:69:ff:
51:77:36:a6:fc:51:11:b3:94:d1:10:13:bb:cb:29:
94:4b:11:ed:65:2e:b3:15:66:15:10:6d:47:15:e4:
3c:0e:97:21:f0:19:33:39:79:22:33:64:6a:fe:f2:
3d:17:9d:95:1c:70:db:2d:12:d0:17:37:0c:3b:ec:
ec:1f:95:f2:86:3e:29:da:68:66:31:88:5a:be:b7:
6e:ea:f5:ca:2e:9b:ff:9e:26:0f:8a:db:9b:22:20:
35:b6:bf:87:5f:61:bd:ac:64:6c:fb:bf:4a:c7:db:
8d:33:0d:b8:6c:5e:f1:ac:6d:67:03:b8:a6:80:2d:
30:19:1d:5d:50:7e:af:58:54:2f:18:49:6f:fe:ee:
e4:9f:d4:72:a2:03:ed:8d:27:c3:e8:bf:14:4d:51:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:0F:50:70:D2:21:75:22:E8:19:2F:49:E1:5A:89:85:DF:6B:79
X509v3 Authority Key Identifier:
keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:c2:0b:e2:57:12:05:29:7b:dc:35:61:f0:45:6f:e0:c9:
ac:63:e6:01:21:7b:31:4e:45:96:f9:a7:39:df:17:47:09:1c:
be:a0:fc:1f:b9:14:48:4e:3d:0a:c9:11:b2:e0:93:20:83:a5:
05:50:20:63:3e:f1:37:1a:66:83:db:ce:c1:7e:c8:e5:2c:ce:
66:8e:b9:2f:08:76:56:1a:99:74:3e:96:a4:48:92:e0:9a:27:
3d:dd:14:83:ec:c0:2d:ce:ef:a8:bc:c5:87:51:28:84:dc:08:
dd:fd:f7:79:fa:74:3a:86:af:a2:0a:0d:65:a3:ca:68:96:46:
82:91:ad:12:df:86:b9:9c:f4:6a:c3:c9:ba:4a:30:6a:43:74:
ec:33:38:f9:8a:7e:c2:d8:12:50:dc:b2:20:af:ed:f2:84:5d:
7d:b2:7d:79:db:ee:0b:94:dc:b1:15:c8:0e:3d:99:0e:53:59:
36:8b:c8:34:c5:df:ed:6b:8f:f9:f5:5e:48:f5:f4:dc:fa:d9:
47:ef:97:31:e3:e2:ee:4f:fb:5b:d6:d2:df:9f:0a:ce:b1:ff:
1c:c0:82:20:7c:e8:72:23:2a:33:e0:ff:51:09:3a:5d:eb:d0:
83:24:78:60:10:64:ee:58:e9:87:15:22:a1:e1:bb:bc:10:db:
44:0c:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:26 2025 by rpki-client