
$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
File: D4DA9F477593CD447FEE14D83B87CF3109732518.mft (raw, json)
Hash identifier: +k3PtGk2BTi/gV/u2V6vD/CgplqhJUgVMqczMHFmHaM=
Subject key identifier: C3:EA:58:E7:7C:41:24:15:E8:0D:DA:A6:EF:BA:9E:72:4A:25:2B:E6
Authority key identifier: D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18
Certificate issuer: /CN=D4DA9F477593CD447FEE14D83B87CF3109732518
Certificate serial: 7FE68B4EB142916894EB58874AB92997B59C3821
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
Manifest number: 0146
Signing time: Mon 03 Nov 2025 08:50:19 +0000
Manifest this update: Mon 03 Nov 2025 08:45:19 +0000
Manifest next update: Tue 04 Nov 2025 12:35:19 +0000
Files and hashes: 1: 34352e3232352e3138302e302f32332d3234203d3e20323635343430.roa (hash: UG1bIEqSWcVFogpAN8dpdluBA2B6FznRqi8LUSLWdB0=)
2: D4DA9F477593CD447FEE14D83B87CF3109732518.crl (hash: KhO4PVIJ7RmWsrvR0b8LwqHwPBVHe7+pr+3mBedsiC4=)
3: 3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (hash: 0miu0D5Gp1Chkjl4hhkBDcSw8B8Ad0dKsBzzjNy10No=)
4: 3137392e3139312e382e302f32312d3234203d3e20323635343430.roa (hash: pdPmIty1pH7V4Osp9Kq9lIakHDY9LRoCHbkEjChw8QQ=)
5: 323830343a333432633a3a2f33322d3438203d3e20323635343430.roa (hash: EH9NyyBoMTp1Gi63vgui2VwKI6RlvddRYrs90u0BAAk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl
rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e6:8b:4e:b1:42:91:68:94:eb:58:87:4a:b9:29:97:b5:9c:38:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4DA9F477593CD447FEE14D83B87CF3109732518
Validity
Not Before: Nov 3 08:45:19 2025 GMT
Not After : Nov 4 12:35:19 2025 GMT
Subject: CN=C3EA58E77C412415E80DDAA6EFBA9E724A252BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:af:8d:82:86:85:2c:bd:3d:f6:d1:d8:ca:
03:5b:8f:1b:dd:bb:7c:d9:49:c1:f6:f5:27:ac:4f:
22:16:e3:70:78:e1:7f:2c:56:88:77:d0:c6:07:8b:
31:bd:b8:8b:81:78:82:58:cb:a7:b2:f0:e3:f5:ab:
b0:ed:79:3b:1e:32:86:3c:c8:e9:8d:1b:5f:7d:9c:
cb:3d:4c:69:6d:87:8d:3d:75:c7:9c:85:2a:81:7a:
ff:d3:1c:ae:83:9c:e3:22:80:6a:db:cf:65:de:96:
3c:29:ce:ee:9b:75:31:a4:25:36:06:67:a9:1d:f8:
9c:00:8f:87:a7:1b:c1:f5:d7:20:1b:01:c5:74:6a:
1e:d2:6f:86:ff:59:91:40:f2:86:88:fe:e5:af:16:
d3:14:b8:f5:2e:74:0a:42:f6:54:33:40:0b:e5:fa:
ed:b3:25:44:90:7b:29:51:7d:84:ce:c4:00:8b:92:
c6:9a:53:5e:60:33:fe:c7:d3:ae:28:69:b8:bf:ca:
af:75:79:34:92:2d:a2:03:69:e4:f5:99:81:c4:a8:
05:cc:31:9b:97:ec:a2:55:2d:ad:8c:cc:42:c6:eb:
f0:13:8a:f0:0d:73:de:a7:a1:ef:b4:f0:72:3c:35:
49:48:b5:e0:00:f1:01:f9:b5:83:25:d3:cb:67:5a:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:58:E7:7C:41:24:15:E8:0D:DA:A6:EF:BA:9E:72:4A:25:2B:E6
X509v3 Authority Key Identifier:
keyid:D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:0c:de:8d:e9:dd:00:2c:61:1a:59:2f:a2:78:d0:61:c2:
69:8a:64:c9:4e:27:47:a2:c2:cb:63:63:a5:f3:c0:40:41:eb:
d5:b2:f6:f9:cc:1c:cf:6a:76:14:6d:cb:19:4c:11:42:d7:16:
d8:bb:93:7a:fa:2d:67:5c:eb:4a:e5:d8:da:4a:2a:93:d6:db:
7a:7a:81:35:2f:25:53:5d:7c:c9:cd:47:1c:5c:15:29:10:b9:
71:be:24:27:62:0d:e9:76:43:28:36:72:62:aa:6f:32:77:10:
c8:d4:26:55:82:34:b5:37:26:ca:e5:78:a4:06:9f:c8:63:7c:
76:a2:53:60:72:dd:06:42:ff:9e:2c:a6:76:ef:35:bc:f0:dd:
8b:d1:78:12:a3:be:f2:f2:d7:2a:9d:13:28:0b:18:f3:71:9d:
cf:98:02:29:a0:d9:96:03:bd:03:55:5f:97:67:31:cc:4c:93:
ba:b9:f5:5d:d7:3a:f8:79:55:7a:c4:ce:d4:54:d9:25:ec:87:
7d:6a:95:95:b5:97:9a:84:5d:d4:fd:e7:e3:e9:26:ea:90:b5:
2a:1d:87:6d:0d:1d:a8:3f:75:2d:65:30:6f:fe:ea:f0:91:8f:
20:5e:97:9c:d5:48:00:86:35:62:bc:c6:1e:7c:60:44:00:74:
dd:1b:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:31:19 2025 by rpki-client