
$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
File: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft (raw, json)
Hash identifier: wESztEegmSKbXgeDmMWnSBVYfshlYyxP0cBHOPUFyWg=
Subject key identifier: AA:38:76:CE:ED:40:BC:B2:A9:BE:06:AF:C5:1B:49:FB:6C:CB:78:EA
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Certificate issuer: /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial: 2DF2429F2AEC4584F6C29C9C3E77555BBFEE49A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
Manifest number: B4
Signing time: Sun 02 Nov 2025 19:49:07 +0000
Manifest this update: Sun 02 Nov 2025 19:44:07 +0000
Manifest next update: Mon 03 Nov 2025 20:29:07 +0000
Files and hashes: 1: 323830343a333464383a3a2f33322d3332203d3e20323635343834.roa (hash: zwF8uAxp0Y9mWlMcIGpcEdDQI4UXWaeyagKZ5G1gYXM=)
2: 3136382e3139372e3135322e302f32322d3232203d3e20323635343834.roa (hash: eRNs97HyB0u62rEBYqNoT2MZ/OrIvvvQ685ph/Anf10=)
3: 323830343a333464383a383030303a3a2f33332d3333203d3e20323635343834.roa (hash: bzUwb9vCcXHaFyB0RM9vUz+JLvelmkvURETnOF+U06Q=)
4: 323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa (hash: 36CmdseByt18edrqGOwO6jO/ADuqymhG8/4H177lLZQ=)
5: 3136382e3139372e3135322e302f32332d3233203d3e20323635343834.roa (hash: I7+GzxzOLMovqWw1X3+jBkfJhsi0JQOxHv2XvVhfK4k=)
6: 3136382e3139372e3135342e302f32332d3233203d3e20323635343834.roa (hash: x9aOdfFvH3VEu4sk7sDZlptBHbKpqSCl0IgxVOsEsl8=)
7: 323830343a333464383a3a2f33342d3334203d3e20323635343834.roa (hash: zt6CDyXNajt2tU1ITWsX4t1cpsGBPoMVHVY3j9JOWJE=)
8: 38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl (hash: qP2MVMf8UDOYUuGdv51fDzTcvBIgpLyG2SKt+eGmqx0=)
9: 3136382e3139372e3135352e302f32342d3234203d3e20323635343834.roa (hash: +MeOKyYM0p0XGjUyx4vlgTCn375XhEQTf8sFNxrJNsg=)
10: 323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa (hash: e8/V55oyxKMD2kRIZ3R5netibA9M1wN5NIDFQOgF8nA=)
11: 323830343a333464383a3a2f33332d3333203d3e20323635343834.roa (hash: U7LwLqKHuoMSYFazJUUaIirfWRssObY0fuSR3+Ju+oI=)
12: 3136382e3139372e3135322e302f32342d3234203d3e20323635343834.roa (hash: tEzMkwxnxtvEU2wXxlFFw5Tb2aEh0v3SW6BXNU2rURE=)
13: 323830343a333464383a383030303a3a2f33342d3334203d3e20323635343834.roa (hash: zuQiAIOJ+ZS/ropb8EjQjUEWysJVZ+9WV54nzLTqbmw=)
14: 3136382e3139372e3135342e302f32342d3234203d3e20323635343834.roa (hash: 5l+tJQJrcMlijNHk6lzmu7K2C/kncgrrLnSopr/x5T4=)
15: 3136382e3139372e3135332e302f32342d3234203d3e20323635343834.roa (hash: mU9j1eH/ij0pYMxywalB5xSaBOdQ6VaAayECuuFpXko=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 20:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f2:42:9f:2a:ec:45:84:f6:c2:9c:9c:3e:77:55:5b:bf:ee:49:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Validity
Not Before: Nov 2 19:44:07 2025 GMT
Not After : Nov 3 20:29:07 2025 GMT
Subject: CN=AA3876CEED40BCB2A9BE06AFC51B49FB6CCB78EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:01:ea:7b:9f:c6:db:45:1b:7b:4d:cd:9d:
cf:2c:d0:6e:94:a5:3f:96:b4:f1:fc:88:e3:10:25:
5e:6f:51:62:12:da:ee:a9:7f:1e:a8:57:c8:37:ac:
2f:24:46:7f:7f:ff:3b:a6:16:46:6b:93:5a:d5:4a:
fc:d3:25:c5:25:30:ab:b7:da:79:99:4c:c0:7a:a8:
6d:07:f2:7a:6c:6c:88:47:d7:3f:19:fc:31:9f:da:
2f:21:5a:7f:36:06:a4:49:2f:f2:8b:8d:25:80:5b:
38:b4:82:e0:11:f3:dd:29:ad:22:c4:6b:1d:44:27:
53:6c:e5:db:58:d1:87:03:a4:51:37:8c:9e:c6:53:
11:8a:fe:97:2d:87:6d:6e:11:49:cb:3d:a8:5f:30:
9a:f9:39:e0:de:a6:70:81:2e:53:8b:3b:b0:ba:9e:
dd:66:40:9b:de:9b:33:59:f0:b6:07:4c:59:85:d5:
3e:45:3f:eb:50:22:62:53:15:a6:8d:c5:44:85:ab:
b5:fd:e4:cc:ae:bb:d9:b3:e1:79:70:2e:43:08:a1:
4e:21:97:92:a3:d6:6e:55:65:15:3f:42:21:21:a0:
9e:96:7c:17:1b:c5:98:06:6c:f9:45:12:f5:c7:88:
0d:8a:2e:44:b8:15:90:b4:b3:b0:fb:30:5f:ef:6e:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:76:CE:ED:40:BC:B2:A9:BE:06:AF:C5:1B:49:FB:6C:CB:78:EA
X509v3 Authority Key Identifier:
keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:fe:30:1d:5f:c5:19:ff:f8:9a:40:3b:c1:77:9a:e8:18:
01:0f:bb:47:38:a3:d0:33:e2:eb:96:9f:73:9f:a6:db:87:ae:
b0:20:87:86:38:25:13:4b:99:a1:1a:7d:0d:17:13:e4:13:75:
43:1f:d0:d6:af:d9:fd:31:b9:20:a4:c6:50:8a:d8:69:f3:4c:
0e:e1:60:f3:5d:ab:1e:cf:42:a5:80:1c:be:47:93:00:80:c9:
9a:c6:c6:e8:e3:40:07:e9:d3:3b:26:5a:cc:7e:08:47:a4:1c:
99:e2:e4:7e:51:db:37:54:d4:87:28:7b:68:bb:99:bb:9a:f0:
8e:b8:78:44:b9:60:76:1d:12:ac:c6:8c:10:e3:c3:3e:df:b5:
74:e8:1d:1c:30:f5:d3:09:f7:5d:b2:51:74:dd:63:5f:f3:c0:
ec:69:96:66:9c:3f:eb:20:70:d7:ee:e6:d2:67:25:d0:9d:e9:
22:43:77:f0:99:e0:96:a2:7d:fd:24:fc:cd:37:5d:9b:c5:d7:
fe:f8:3d:9e:ce:ea:f2:91:1b:8f:99:aa:2a:25:80:a1:82:56:
e4:e1:88:5e:f4:38:5c:96:34:ca:2c:ae:d1:df:d5:e7:29:bb:
0d:b2:b9:94:ba:9f:8a:74:63:31:0e:91:9b:a9:71:72:b0:db:
35:f9:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:51 2025 by rpki-client