
$ rpki-client -vvf rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft (raw, json)
Hash identifier: eXctixQ/M1DePlKzC0G+PXYQAWHQGV8R08R2W3/gKqs=
Subject key identifier: 56:45:7E:2D:A1:0C:49:34:78:A5:96:09:DB:7E:C8:58:85:3B:51:47
Authority key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18
Certificate issuer: /CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
Certificate serial: 2F29002083957C99E99299A300250E7D41E02AFA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
Manifest number: 02D0
Signing time: Mon 03 Nov 2025 01:21:48 +0000
Manifest this update: Mon 03 Nov 2025 01:16:48 +0000
Manifest next update: Tue 04 Nov 2025 02:53:48 +0000
Files and hashes: 1: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl (hash: qEFRHb70HcRnCCfFwvzU449wGBBsUKD2vj+3ESlTuMY=)
2: 323830343a333731303a3a2f33322d3438203d3e20323636333837.roa (hash: BjGC5eMR0YSEruOhjfQ+lJ7fY2ANHWJKOYwIhJJj1tA=)
3: 3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa (hash: yjukKX2qFl+ag4oBXkInGjhNeRNYgSEFnV9bYH+/uuY=)
4: 3137302e38312e32302e302f32322d3234203d3e20323636333837.roa (hash: VJh4yPuPfP8C/QCwSIvi/lNvlfKZSvYgiigNdvjXEGQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl
rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 02:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:29:00:20:83:95:7c:99:e9:92:99:a3:00:25:0e:7d:41:e0:2a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418
Validity
Not Before: Nov 3 01:16:48 2025 GMT
Not After : Nov 4 02:53:48 2025 GMT
Subject: CN=56457E2DA10C493478A59609DB7EC858853B5147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:e3:5a:29:99:e4:0a:e5:6c:04:59:03:fa:
c1:e9:fa:83:3b:10:9f:32:14:19:ad:5c:1f:4c:b7:
5c:bf:b4:56:9e:b1:2e:b1:97:57:f0:8c:c9:74:84:
b0:7f:a5:55:67:19:03:a8:11:ec:0c:f2:d8:72:36:
8d:c2:af:02:0d:e5:60:fb:1f:8e:e0:7d:b1:f2:b6:
49:1e:15:ae:30:5b:a6:37:ca:cf:fe:0b:01:19:03:
8c:98:30:c7:5a:ee:30:68:74:a0:ad:21:40:da:07:
8d:b8:38:a6:cc:fa:3d:85:de:bb:40:69:6e:7b:bb:
ef:af:04:06:1a:66:b8:da:03:4f:62:5a:98:04:f7:
d6:33:19:6f:a0:e3:b3:7b:ba:f5:aa:b7:05:9b:55:
6f:76:d7:a8:47:2b:ca:73:52:88:34:5c:99:65:22:
ea:cb:41:3a:f1:72:06:02:3c:e9:5d:93:24:13:a9:
aa:a3:8c:8f:ef:9e:6c:29:b0:96:88:fb:c2:83:55:
7a:c1:11:d0:b9:8c:07:3a:26:1a:53:b4:e3:7c:06:
6f:dc:7d:25:95:bb:33:bb:2e:1e:aa:46:d2:10:76:
f9:0c:49:62:ab:77:d1:3a:63:2d:9c:00:c8:21:42:
6d:0d:00:82:5e:de:c2:45:b0:c1:83:b6:3e:67:e1:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:45:7E:2D:A1:0C:49:34:78:A5:96:09:DB:7E:C8:58:85:3B:51:47
X509v3 Authority Key Identifier:
keyid:A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:7f:29:46:53:1d:09:75:4f:f9:aa:08:17:0f:bf:33:5c:
83:15:ea:f7:64:82:b3:99:eb:1c:8c:58:37:a9:b4:f3:3d:6a:
d7:a5:4b:72:d5:c5:56:bd:80:ed:2d:16:47:15:64:e7:38:7f:
0c:1e:1e:f6:2c:30:f3:ff:62:2a:78:ea:fe:92:2d:3a:d9:89:
18:c7:56:7e:17:ad:f4:f2:9c:72:96:a4:0b:4c:30:03:5d:42:
f5:4f:ee:75:cf:39:ca:44:9c:e8:fc:60:65:09:f1:1f:28:f0:
22:a3:4e:78:57:82:d8:6a:58:db:96:38:0f:85:aa:fa:a4:ef:
72:3b:6c:21:bb:41:3a:21:cc:79:71:b5:d0:e9:ff:17:51:e1:
55:13:a3:18:0a:7d:ef:eb:30:7e:3a:76:ac:c5:b0:2e:8e:8a:
99:9f:3b:e0:32:92:02:32:f9:5e:98:4e:e9:a0:69:b1:44:b7:
27:7f:c9:85:ea:5b:ea:2b:96:70:22:a1:58:b1:e2:e0:91:e6:
22:cb:56:f9:dd:2f:39:88:46:85:20:83:02:61:ac:d6:9b:d2:
d8:e0:59:45:31:ef:eb:0b:33:3c:1c:b7:9c:4c:e4:6f:1f:9e:
a4:7c:90:00:fe:0d:4e:cd:30:92:6a:d0:5c:50:66:93:c5:61:
5b:ca:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:41 2025 by rpki-client