
$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
File: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json)
Hash identifier: 6LezQtLmKItekFmd99nHJU5Cs2oWC/0Fm2DZHHJHXWY=
Subject key identifier: 35:40:3D:D4:81:8D:B8:75:CC:9D:7A:47:4C:26:B8:52:CD:CF:95:E2
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Certificate issuer: /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial: 53EF30D94999A68728DA68CDE05EAA878ABC2F74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
Manifest number: 02FE
Signing time: Mon 03 Nov 2025 08:55:34 +0000
Manifest this update: Mon 03 Nov 2025 08:50:34 +0000
Manifest next update: Tue 04 Nov 2025 08:56:34 +0000
Files and hashes: 1: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: teDHx3rfclNBcgvyxELXht02D8yqcynj3T4nIl3WTV8=)
2: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: mky3eE3bx2kcV4ZGcqdlXI9kN6ITAw5dtUdmNnbM04A=)
3: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: hEdsYPpEYPD/H7JxaI1qlIgBP5CxC1rxiVbomFZxPTA=)
4: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: BY4SD16BwCLGiQCdlfmYRFg3wdhGuI3NPnN3QyHza1M=)
5: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: /rhTp7cAUkfwcSsOM4bufZ4hzfY9DaqMVKYmLOYscFo=)
6: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: vPCwI7osU5XVMd4zwaC+hIHow7PaLve2zweqHvxoEMY=)
7: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: PoDROXq7zNqNwPpg4bHVhkKOrPE3a92QWBQs0sLrW1g=)
8: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: QRux96G/lfgz7O4EjHPAERqDHHHWAhFqgGE1GI68Qng=)
9: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: hhWP0ZOFP9QkXD1TLCXf2DK00yVyWv88kwhVjqWeg9Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 08:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ef:30:d9:49:99:a6:87:28:da:68:cd:e0:5e:aa:87:8a:bc:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Validity
Not Before: Nov 3 08:50:34 2025 GMT
Not After : Nov 4 08:56:34 2025 GMT
Subject: CN=35403DD4818DB875CC9D7A474C26B852CDCF95E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:f7:dc:e7:cc:2b:6e:7d:03:e1:15:ee:1a:
be:2f:54:73:45:b3:86:64:ae:5b:83:8d:a2:20:c7:
ce:0f:a7:0c:07:5f:90:6c:58:40:5d:25:d0:eb:18:
2d:f7:d6:e2:0a:99:a4:2a:8b:94:73:f2:7e:ca:30:
b3:16:5b:40:d5:75:33:3b:6f:31:90:09:7e:19:72:
90:88:a0:54:a5:c0:12:18:25:3e:51:04:f3:82:30:
b6:1f:e7:b4:84:03:7e:47:e2:40:8d:c5:f9:22:1d:
e3:dd:34:12:c3:f8:b8:03:7a:e7:73:93:a1:62:8d:
d8:d8:78:60:5a:f0:31:5f:82:8e:d6:60:28:f4:38:
c1:4d:dd:59:ed:7f:fe:9e:7a:ca:bc:fc:a2:da:77:
00:62:7e:79:b4:28:fb:c2:8d:16:2f:dd:3b:40:e9:
17:e3:9c:a7:ef:d5:7c:5d:74:c1:ba:a9:bd:e0:d2:
ba:da:d0:34:ab:57:55:77:57:25:c5:bb:59:7e:2c:
f7:55:14:da:16:61:47:41:f9:92:48:cd:29:41:dd:
91:99:e7:97:c4:ce:4b:fb:89:70:76:a9:e1:41:de:
23:c4:78:7a:1b:08:1e:53:98:6d:80:6b:d3:8e:86:
fb:f8:6e:8f:77:36:f9:f3:8b:e9:50:34:d1:45:a4:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:3D:D4:81:8D:B8:75:CC:9D:7A:47:4C:26:B8:52:CD:CF:95:E2
X509v3 Authority Key Identifier:
keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:07:65:ee:d7:70:dc:35:93:b3:ef:35:77:60:e0:c5:9e:f5:
49:a2:d4:b9:83:8e:08:e4:f0:00:92:56:5b:20:5b:14:91:8a:
6e:0b:44:ed:f5:6d:5b:5c:0f:39:ba:a3:98:4d:82:16:d4:66:
c2:24:38:b1:51:9d:13:74:17:bb:dc:2a:37:30:d8:d6:9b:26:
93:f3:24:29:89:4e:09:ee:99:3f:da:1d:de:ff:87:6b:06:7c:
ee:bd:4e:49:07:eb:1d:75:e0:90:dc:8d:a8:52:f7:37:50:1d:
6e:0f:0b:93:1d:6c:7b:86:a2:06:2c:50:66:9f:59:30:bb:27:
ff:b8:63:c8:b1:4a:87:9f:8a:3a:7a:22:97:14:b7:ef:eb:e9:
14:0d:6e:59:a1:41:14:e0:b4:0b:d2:b8:2f:36:75:84:34:99:
43:82:0e:31:c3:33:2e:35:e5:f9:e3:cd:31:cc:ff:d2:d2:87:
3f:a6:8a:d1:4d:5c:99:4e:8a:cb:7c:ee:c8:b1:6b:40:f1:2f:
da:df:55:68:5b:dd:21:fd:e6:45:0b:18:d6:31:fc:aa:46:65:
f5:16:96:53:e1:78:f7:69:8a:63:be:5b:3c:db:5f:ec:dd:5a:
8c:38:f3:ec:16:90:f2:a1:64:e7:75:6a:4a:6b:80:08:a5:af:
38:6f:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:08:21 2025 by rpki-client