
$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.mft
File: 3645559635FEB57B094C7B62BAA7BE7350BDE693.mft (raw, json)
Hash identifier: GoePgMN4Z8yeNp88TXadPtc2nv3PK8Qwf8DWu6WXeic=
Subject key identifier: 82:92:F6:C9:2F:B6:C9:97:2F:B6:CD:66:04:4B:20:88:3C:EB:4E:EE
Authority key identifier: 36:45:55:96:35:FE:B5:7B:09:4C:7B:62:BA:A7:BE:73:50:BD:E6:93
Certificate issuer: /CN=3645559635FEB57B094C7B62BAA7BE7350BDE693
Certificate serial: 319990CF82F43FF3123F621F8B1EF03DD7FF9F8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3645559635FEB57B094C7B62BAA7BE7350BDE693.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.mft
Manifest number: 3E
Signing time: Mon 03 Nov 2025 08:22:43 +0000
Manifest this update: Mon 03 Nov 2025 08:17:43 +0000
Manifest next update: Tue 04 Nov 2025 12:15:43 +0000
Files and hashes: 1: 323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (hash: T1e1ntf/YwuN1BoUKkWMxtr3B5YC9zjNFelO4sDgzUo=)
2: 3645559635FEB57B094C7B62BAA7BE7350BDE693.crl (hash: 7unXKoKf0Ulu1t2OdzYwZo8r9n76TEuGkhpOG1dC9go=)
3: 34352e3232342e3138352e302f32342d3234203d3e20323637303836.roa (hash: dmm+2dATAm7K60GkUIeiUstSSDFj57F7yOH86K9Rt14=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.crl
rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3645559635FEB57B094C7B62BAA7BE7350BDE693.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:99:90:cf:82:f4:3f:f3:12:3f:62:1f:8b:1e:f0:3d:d7:ff:9f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3645559635FEB57B094C7B62BAA7BE7350BDE693
Validity
Not Before: Nov 3 08:17:43 2025 GMT
Not After : Nov 4 12:15:43 2025 GMT
Subject: CN=8292F6C92FB6C9972FB6CD66044B20883CEB4EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:9b:a8:57:f1:34:87:40:b3:e3:5f:3e:f3:
fe:74:c2:0d:bb:c3:fa:c3:55:42:5b:a2:46:2a:8a:
0f:a9:ed:f1:81:e1:62:60:85:46:d6:7d:44:29:33:
d0:33:bd:f1:72:06:67:7b:d6:6a:cc:4f:f0:6d:9a:
17:a8:ba:3f:22:14:de:06:ff:31:ff:86:53:81:02:
2e:3c:95:36:8e:b9:51:ca:d6:30:22:16:2e:a3:1f:
d5:71:c3:dd:bd:e8:00:f0:b5:08:e1:5a:2a:a4:d4:
80:13:79:17:8f:b6:44:00:a5:93:85:8d:a8:b8:fc:
36:14:c4:0a:3f:05:22:59:02:b8:71:93:8f:c0:c7:
f3:e0:56:76:f0:c8:d8:6b:64:4d:2d:5a:2f:94:f6:
94:9d:55:7e:af:b1:69:79:8d:58:a4:08:86:fa:70:
bc:24:05:93:5b:84:2a:e8:3c:60:61:ea:32:5b:02:
e0:de:3e:22:e3:e3:03:88:b3:58:55:c4:bf:08:45:
6d:5c:e0:06:1c:eb:de:32:b3:ff:c7:3e:4b:35:f3:
3a:80:cf:6d:64:40:98:8d:be:9b:b1:f3:46:bb:d8:
95:16:bc:d5:9b:41:dc:a5:a8:6c:91:d1:10:73:b3:
91:0f:d0:f7:f4:4d:2b:c3:10:3b:4b:a3:25:6c:96:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:F6:C9:2F:B6:C9:97:2F:B6:CD:66:04:4B:20:88:3C:EB:4E:EE
X509v3 Authority Key Identifier:
keyid:36:45:55:96:35:FE:B5:7B:09:4C:7B:62:BA:A7:BE:73:50:BD:E6:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3645559635FEB57B094C7B62BAA7BE7350BDE693.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/3645559635FEB57B094C7B62BAA7BE7350BDE693.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f1:4e:d6:c5:d5:9c:aa:11:b4:37:cd:8c:3d:22:31:87:8d:
24:51:25:8e:6b:b1:21:16:8b:fc:f8:0b:e3:46:1e:cb:7e:34:
1f:79:f9:05:4e:48:f2:26:3e:10:5c:5e:ce:b6:84:e5:43:42:
87:a0:b5:c6:96:50:c0:59:a2:db:fc:02:89:f1:b0:4a:95:b7:
f4:6e:6f:f5:22:25:b7:b1:e8:26:eb:bf:fb:8c:be:75:93:66:
54:d2:6f:58:ff:46:96:c4:6d:2c:d9:b7:27:0e:17:44:7b:29:
7b:bf:ab:8c:f8:ed:8a:b4:4c:38:95:9b:3a:80:92:1c:5e:2a:
3a:e7:fb:25:aa:55:3f:95:f1:88:96:eb:71:f7:84:b3:e7:56:
93:6c:91:43:72:bc:fd:1d:e5:ba:41:bb:bf:e8:82:e7:d7:d6:
26:f1:94:64:a2:c6:b0:1f:e5:60:65:13:9a:61:a6:da:bf:a3:
8e:91:e6:bc:e4:9c:19:9a:13:61:f5:c9:00:61:96:3b:02:70:
dd:3d:df:4f:0d:a4:f0:52:ca:a1:4c:3b:51:7d:0a:2d:62:84:
74:54:30:7d:c9:95:a8:be:f1:70:1f:4a:1e:c4:09:90:31:db:
22:41:e0:d6:6b:24:1a:19:47:0b:31:19:80:97:7b:ac:d3:9e:
f6:5b:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:52:55 2025 by rpki-client