
$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json)
Hash identifier: FLF35o8Yb+y4GKSEGHYVcvMAyO6wBjYY7dzQP5Tc78U=
Subject key identifier: 6B:F5:23:B5:22:3C:D7:D5:F9:2F:76:85:16:E1:E4:96:7F:4C:B3:93
Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Certificate serial: 449668765868FA070ADA5999B869A95C83622F7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
Manifest number: 011A
Signing time: Mon 03 Nov 2025 10:51:02 +0000
Manifest this update: Mon 03 Nov 2025 10:46:02 +0000
Manifest next update: Tue 04 Nov 2025 16:20:02 +0000
Files and hashes: 1: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=)
2: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: urTOngXMRFkKE3c+cGxb40cw5k8/zVhJ8ePIRvs0H+k=)
3: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:96:68:76:58:68:fa:07:0a:da:59:99:b8:69:a9:5c:83:62:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Validity
Not Before: Nov 3 10:46:02 2025 GMT
Not After : Nov 4 16:20:02 2025 GMT
Subject: CN=6BF523B5223CD7D5F92F768516E1E4967F4CB393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:34:96:05:ef:4a:49:59:20:c3:35:80:8a:
e5:86:de:1f:3a:96:90:10:0a:8e:50:c5:73:2d:cf:
65:e1:59:f3:8d:9c:8e:29:6f:ad:af:76:05:2e:e7:
67:98:ae:e8:ac:ff:fa:db:94:da:49:64:25:8a:2c:
bf:9c:c9:2e:75:fe:c4:e2:d8:4c:d3:95:c4:4e:13:
fb:df:b4:0a:7d:50:6e:c0:8d:11:4e:89:c7:7b:b1:
f5:b1:5a:49:0f:96:68:18:fb:32:5f:c4:df:a7:07:
11:cc:21:01:1e:ae:f4:05:22:cf:b2:4d:e8:9c:1d:
d3:fc:51:d8:a8:23:70:19:09:54:09:02:1f:04:c4:
89:7c:4a:82:9b:da:df:b7:e3:ce:30:be:b4:4a:16:
9c:d2:7a:25:08:e7:0b:db:c8:49:69:e8:e3:53:ae:
ba:3c:c4:52:77:2f:18:7d:ee:3f:6c:61:1b:cd:be:
a1:a0:2e:92:59:a0:ef:3e:cb:a9:8e:0e:59:28:9d:
5b:19:24:12:a2:28:f9:40:fa:59:fa:d2:ab:68:5b:
3a:d8:2d:0c:d1:64:27:d6:7a:19:08:e5:f4:df:e6:
7d:f4:1f:56:26:f7:be:69:3d:df:7e:e2:13:30:cc:
51:2e:01:f7:f5:16:a8:18:10:ff:a0:53:8b:52:82:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:23:B5:22:3C:D7:D5:F9:2F:76:85:16:E1:E4:96:7F:4C:B3:93
X509v3 Authority Key Identifier:
keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:40:22:67:53:6d:41:76:67:25:d2:c1:db:48:9a:34:7b:
90:7b:a1:c5:25:da:21:98:51:5d:57:07:4a:d7:06:03:e4:09:
28:ab:15:8c:bd:0b:2e:a3:8d:fb:3d:3a:2b:00:b5:fd:d2:59:
be:53:89:03:f9:08:0c:8a:87:64:41:8a:11:b1:75:e7:da:ef:
2b:bd:14:33:5d:95:29:70:09:f9:a7:5a:7f:bd:40:01:b8:47:
20:b9:b4:75:b0:e8:ba:94:3b:a6:77:5d:0f:1a:f7:57:75:bd:
e6:70:2e:af:4c:46:bc:62:99:6a:85:95:58:df:47:2e:55:cc:
05:21:61:9f:71:89:ab:41:6f:8e:21:bb:b1:f4:43:3f:5a:fd:
55:90:c6:38:97:78:31:55:cd:bf:f9:9c:8c:00:b1:8b:d7:e1:
10:36:0c:a5:4a:17:a2:d5:20:f9:99:f0:5b:26:e4:fd:82:b4:
d3:40:82:62:71:13:40:da:62:97:97:04:51:15:8e:11:f1:80:
10:3b:9c:30:d1:fb:51:7f:69:4b:aa:6d:67:fd:e0:69:c1:e7:
2f:42:f7:a6:bc:04:3d:01:2e:f8:9f:9e:42:4b:9f:df:94:6b:
d4:8d:02:ed:bc:38:ae:a6:fe:ce:84:5c:91:0a:30:99:30:62:
02:a5:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:39 2025 by rpki-client