
$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
File: B53A77B5E460044CB626F7588E1A91702B1AE08E.mft (raw, json)
Hash identifier: DeqMQrDM27CxASr17cHdiLsUHHEPtjQAxYEp7/FVzww=
Subject key identifier: 47:7D:B4:67:8B:44:9B:47:12:BB:F5:31:B2:AE:44:7C:1C:6F:FD:41
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Certificate issuer: /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial: 13BDBC1152DF342FE3794B5968F4F287798F2E41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
Manifest number: 03DF
Signing time: Mon 03 Nov 2025 10:04:28 +0000
Manifest this update: Mon 03 Nov 2025 09:59:28 +0000
Manifest next update: Wed 05 Nov 2025 01:46:28 +0000
Files and hashes: 1: 3138362e3139322e33322e302f32302d3234203d3e203533313332.roa (hash: zC/0qGXtfAq1mmTZ8CdKICvQgbE9iscMX1joAfRYUVs=)
2: 3137392e3130372e3131322e302f32302d3234203d3e203533313332.roa (hash: TJrKtqVC4Sii3g9qpAW2V333dMFic56g963Uw1S+t/E=)
3: 3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa (hash: 7fwiEuhjbGywbiIdUszGni67G3frQOGGH54RBi4CW7s=)
4: B53A77B5E460044CB626F7588E1A91702B1AE08E.crl (hash: XXr2YZM8y5dO1mLlfPVbi++d16F3wzfvlms5+bREark=)
5: 323830343a313636383a3a2f33322d3438203d3e203533313332.roa (hash: +Xg7aFhNal1NEBj1tp2LkQX7ZnjUA/E/JssM2xFfD08=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl
rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bd:bc:11:52:df:34:2f:e3:79:4b:59:68:f4:f2:87:79:8f:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Validity
Not Before: Nov 3 09:59:28 2025 GMT
Not After : Nov 5 01:46:28 2025 GMT
Subject: CN=477DB4678B449B4712BBF531B2AE447C1C6FFD41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:93:97:14:f7:72:15:e6:7c:82:b6:97:ee:
26:e3:10:d4:96:09:58:a5:ea:d9:28:ec:1a:b6:d9:
e0:8d:1c:3d:37:c4:2b:8f:96:30:0b:e9:5d:2d:44:
b8:50:4a:77:87:8f:71:a5:33:b3:84:c8:84:fc:db:
3d:ad:4e:f2:5f:ad:a8:51:70:d3:50:f4:ea:d9:ba:
5d:67:79:77:e6:d2:02:f8:71:2e:57:00:0d:3d:98:
e2:d7:bc:3e:86:37:37:76:83:23:cf:ce:51:d9:bf:
47:d6:3e:a4:25:ed:c3:a2:b4:0a:eb:18:fd:cf:99:
f2:d1:fd:b0:6f:49:75:9b:90:0e:e7:c3:fc:64:a5:
ee:4d:ec:c7:8a:02:e0:cb:c9:a3:59:60:18:a8:51:
3c:83:df:7d:67:5f:73:84:90:ff:4d:8b:c6:72:14:
b7:89:0f:4e:d4:a3:06:6a:2a:f4:ad:3b:8d:cd:0f:
e1:93:b2:8b:c0:43:98:63:f7:ef:fd:85:67:42:3c:
e0:c9:1d:b8:80:3f:96:01:1b:2d:eb:7a:16:51:5e:
72:b6:48:17:55:ee:3a:be:c4:9c:c2:d4:84:fb:a9:
72:30:10:ce:90:19:ad:04:6e:24:bd:a1:17:ee:86:
82:d1:2a:68:2e:fc:96:e7:5c:b8:2d:0e:21:53:1b:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7D:B4:67:8B:44:9B:47:12:BB:F5:31:B2:AE:44:7C:1C:6F:FD:41
X509v3 Authority Key Identifier:
keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:71:19:13:32:67:a7:f1:de:81:21:73:4a:be:8a:5c:a7:
ec:10:ae:5f:cb:3e:a7:f9:68:6b:26:e5:09:27:4b:af:8c:7d:
5b:86:7e:cb:a7:a1:f0:61:6e:dd:73:76:a7:8c:9b:89:3b:4c:
fa:b0:26:c5:ba:ea:a7:45:ee:18:eb:75:eb:51:96:d8:9a:02:
11:13:9e:68:c6:e8:27:ff:fb:e5:2d:bc:b6:df:a7:83:1f:96:
98:68:e9:be:e2:96:eb:b3:52:aa:f4:f6:3b:5b:d4:0a:2e:c1:
a8:2c:2a:6e:aa:49:d7:b9:b8:c4:4b:f4:bc:19:9d:1b:6c:ed:
0f:4e:19:ea:c6:6c:82:e8:a4:53:10:1b:66:71:28:4d:1b:05:
98:dd:0b:eb:d8:3d:53:7c:35:7d:e5:ea:68:69:d2:c4:a1:5a:
11:10:69:0b:20:75:f5:ed:45:99:95:6b:e6:6e:ff:74:b6:63:
99:7f:fe:f1:6c:94:a2:77:bf:02:cc:f7:75:5d:9a:a6:28:ca:
42:2a:5f:d2:e8:b2:01:db:82:10:f9:84:e0:07:3b:d9:e9:23:
48:82:bb:a7:2d:2f:fc:00:97:38:14:97:de:09:b4:bd:59:fa:
70:69:b3:bb:74:5c:72:e2:72:ce:e0:79:79:b1:b5:d4:cd:3f:
e9:96:da:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:32:42 2025 by rpki-client