
$ rpki-client -vvf rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
File: 9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft (raw, json)
Hash identifier: rq3/5fO91Qz8qhTSddZmD+Fn/lmrxrrd/QeFaOYoxvo=
Subject key identifier: E9:40:6D:65:AD:26:69:E0:14:E2:41:01:C5:03:48:DB:00:02:3B:82
Authority key identifier: 9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85
Certificate issuer: /CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
Certificate serial: 2316C0DB56B16A37750F9C31E643B9B719DCB483
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
Manifest number: 42
Signing time: Mon 03 Nov 2025 05:48:06 +0000
Manifest this update: Mon 03 Nov 2025 05:43:06 +0000
Manifest next update: Tue 04 Nov 2025 06:13:06 +0000
Files and hashes: 1: 323830343a3265343a3a2f33322d3438203d3e203533323334.roa (hash: 4y75WrPTrxC3DwpGL9SbT1HsU6Eb97/6ZwqA//FpiEU=)
2: 9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl (hash: QlzwoG/VBD/4tu9wS+AbXAjwxi84wM5Ha2K5P0tmOR0=)
3: 3137372e31302e36342e302f32312d3234203d3e203533323334.roa (hash: z8qCRpxN4CXSNIFsTe2IdbvVUfEwHgX1A2ZvgCek+qQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl
rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 06:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:16:c0:db:56:b1:6a:37:75:0f:9c:31:e6:43:b9:b7:19:dc:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
Validity
Not Before: Nov 3 05:43:06 2025 GMT
Not After : Nov 4 06:13:06 2025 GMT
Subject: CN=E9406D65AD2669E014E24101C50348DB00023B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:c4:a5:85:90:2b:d7:03:eb:ad:f8:22:d9:
9d:d2:14:e7:0d:d7:f2:20:29:9f:13:b3:63:21:cc:
31:0f:ce:96:1b:db:4a:a6:36:cd:f8:ad:04:a1:64:
d8:75:21:35:80:81:1d:cb:e4:8a:7a:b2:39:dd:70:
c2:4f:67:aa:fe:8f:22:ad:c0:d5:79:09:41:8a:33:
e7:d8:a1:02:db:1b:dd:13:15:f6:7c:5b:70:dc:73:
2e:0d:a2:ef:bf:e9:52:48:3b:71:12:80:a5:07:3d:
c0:98:c8:f1:4c:d8:bb:78:34:74:45:cf:6d:f7:05:
84:91:5e:6d:e9:63:b1:1a:f4:1f:78:34:d8:e5:4c:
17:59:6d:85:d3:c3:c8:46:3b:d8:28:8f:5e:01:5b:
05:c7:88:0a:8a:0d:1e:13:a7:be:69:45:54:89:ca:
bf:c8:00:ad:b7:b2:2f:d1:e3:00:aa:32:b8:ea:98:
83:94:a4:3a:b1:f3:ee:71:45:0d:13:c3:44:f4:6d:
bd:0e:86:2b:2b:56:08:90:8c:93:bb:8c:88:23:04:
a1:8f:9a:8e:7d:48:49:ad:ed:b7:18:9e:11:4e:f9:
5d:63:90:ba:24:dc:3c:0a:3d:2a:62:68:d4:76:8f:
bb:e9:53:ee:90:3e:3a:4e:6c:73:d4:5f:4a:bb:1d:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:6D:65:AD:26:69:E0:14:E2:41:01:C5:03:48:DB:00:02:3B:82
X509v3 Authority Key Identifier:
keyid:9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:c4:1e:f5:d6:8c:f1:b2:bd:70:1f:ed:73:97:6b:22:38:
2d:ab:21:16:49:49:6c:6a:51:96:8e:29:6d:94:ad:f4:99:ae:
bf:00:d3:bb:44:61:fb:70:97:a6:b2:f1:c4:ff:e2:d4:dd:7e:
6d:18:35:4d:6d:7a:fa:f3:a1:6c:33:57:bb:a4:43:05:6e:83:
a7:f4:02:75:9a:ad:23:bb:87:de:40:08:94:73:6b:a1:48:3d:
99:47:57:0e:d2:08:6b:43:24:b9:80:ea:c2:10:f3:ca:1a:d1:
a7:c9:06:97:86:a9:b9:5a:cb:f2:d1:93:e0:97:56:da:65:49:
8c:91:2e:96:f5:38:ba:69:11:ae:71:7a:1a:54:e0:48:ff:82:
58:fa:87:c0:55:29:d8:7b:f4:bf:d1:cd:56:31:b2:64:0c:36:
33:43:bb:d5:f0:4a:a1:0a:bc:35:82:bd:02:84:e1:60:69:32:
24:de:f9:df:19:4d:ef:ff:82:ce:4b:1c:88:06:e1:28:6a:e7:
a4:35:b9:7a:f0:65:21:cf:c0:53:a9:83:3d:72:ec:44:4b:eb:
1e:4e:22:bf:33:34:11:5e:0e:01:e5:b7:c0:b8:1f:c4:04:6f:
73:ec:61:80:bd:3a:c0:61:e4:4c:4a:8f:60:23:65:0a:58:71:
04:3a:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:30:20 2025 by rpki-client