
$ rpki-client -vvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
File: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft (raw, json)
Hash identifier: sFoaNLk56YBpCKKKp9haNGh8dpEgyuTi35P63PDrm2w=
Subject key identifier: FC:0C:24:AE:18:A3:31:1D:AF:F9:63:0D:6A:90:08:FA:D7:DD:48:BB
Authority key identifier: 06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
Certificate issuer: /CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Certificate serial: 23324E92040CCBBC84ED1646CB67979D52F64164
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
Manifest number: 0304
Signing time: Mon 03 Nov 2025 02:10:35 +0000
Manifest this update: Mon 03 Nov 2025 02:05:35 +0000
Manifest next update: Tue 04 Nov 2025 05:40:35 +0000
Files and hashes: 1: 068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl (hash: DSeVcRdkLvasw7EPXGrgIHpkLflUgZpNRIqmjzK9TZ8=)
2: 323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (hash: Bzk4dZzrNC2Jl6ZUDrTLxTfoojkN5yomvgAkgomW3v0=)
3: 3137302e38342e3131362e302f32322d3234203d3e20323634393933.roa (hash: uQbx9J4xqOZ9ulDsiq8PH8RnyLqo6V/EHfZIYzuiAOU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 05:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:32:4e:92:04:0c:cb:bc:84:ed:16:46:cb:67:97:9d:52:f6:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D
Validity
Not Before: Nov 3 02:05:35 2025 GMT
Not After : Nov 4 05:40:35 2025 GMT
Subject: CN=FC0C24AE18A3311DAFF9630D6A9008FAD7DD48BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:31:62:47:4a:f3:02:c5:14:41:99:f4:52:
14:f4:37:b4:d1:0a:8e:5b:de:c9:4e:34:50:eb:96:
63:71:e9:c9:27:46:d4:bd:90:47:b0:9d:b4:60:16:
4d:57:c4:ac:9d:b4:05:a7:72:6b:45:f5:3d:3e:17:
02:d8:eb:21:a9:d4:43:3f:fa:66:24:db:b8:c7:18:
8b:22:68:9f:13:1d:51:fe:89:7f:32:8b:69:10:3d:
75:6d:c1:e2:21:3a:9f:9c:51:31:6f:c1:96:30:35:
42:14:dd:f2:26:76:41:e4:64:db:2e:ab:f4:13:e0:
96:ea:83:80:a7:f9:ca:1a:c8:39:91:f1:12:e4:cc:
30:f9:7a:74:95:b0:1e:b9:97:80:fe:3d:36:b2:d3:
99:e0:a1:e9:fe:55:f0:1b:5c:d4:30:37:c3:37:34:
f4:01:a4:8d:6f:f8:49:a9:55:66:18:ef:a5:2f:17:
cd:72:55:ac:63:4e:95:52:ec:7f:2c:ab:44:41:2b:
98:c1:04:64:40:28:9a:ce:84:38:a7:6b:71:7b:b4:
7b:a2:15:8b:00:0f:28:be:99:9e:65:b6:ea:52:09:
01:19:06:eb:cc:48:19:cf:f5:0f:13:22:2c:a1:1d:
f5:e7:2f:b1:35:33:fb:71:7a:6c:f3:e0:e3:38:b1:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:24:AE:18:A3:31:1D:AF:F9:63:0D:6A:90:08:FA:D7:DD:48:BB
X509v3 Authority Key Identifier:
keyid:06:8F:DF:C5:A2:B7:BE:13:87:BD:BD:BF:1E:8D:51:EA:F4:D2:0F:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/1/068FDFC5A2B7BE1387BDBDBF1E8D51EAF4D20F2D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ab:81:47:36:45:0f:b3:ba:e5:07:38:fd:a2:ba:0b:5f:39:
f4:cc:09:13:b4:b8:84:87:06:e1:06:65:ac:37:66:cd:3a:43:
15:4e:b4:16:6f:df:9e:b3:2b:76:25:9f:03:a0:d8:90:d0:ab:
af:1d:62:82:f4:a2:cd:fd:2e:71:ce:84:da:21:6e:93:8a:bb:
26:0a:fb:4b:48:71:25:fb:f9:9a:a7:0f:7f:43:c6:4c:2f:5a:
22:d8:c1:e5:e6:b7:c2:4e:a6:f5:80:4f:f2:11:42:55:bb:2c:
3d:d8:d3:ee:37:b1:97:00:fc:04:d3:34:98:c8:35:4c:55:b2:
7a:ac:01:4b:5e:c2:31:f9:4f:19:5e:ec:a9:84:78:6c:d1:d8:
af:81:1a:98:85:10:a7:a7:06:66:b8:66:da:b7:c9:f6:88:4d:
f0:21:a9:c8:c9:1a:67:2d:fb:32:c4:f7:1a:dd:f0:7f:d8:00:
87:c2:3c:dd:f7:c4:9f:ec:65:a6:2d:53:de:86:6e:27:ac:43:
99:04:7c:df:d1:ff:39:75:02:ba:bd:ea:50:12:a9:15:02:1b:
b4:de:bf:5f:60:7c:54:04:84:22:30:de:db:51:ff:1d:93:bf:
3d:ff:90:bc:e1:81:5a:11:46:2f:b4:d8:67:f4:71:5f:d1:7d:
88:ae:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:13:22 2025 by rpki-client