
$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
File: D903348767481BAEFE2C4B534D22308FC61456DE.mft (raw, json)
Hash identifier: ETZVoWx7T1fZ61t6aSDdbjzqro9lzBctrr3yFGFFLM8=
Subject key identifier: 9B:AD:6A:25:20:19:2D:20:BE:BC:12:12:3F:9C:21:4F:AC:DC:DD:8D
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Certificate issuer: /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial: 37232E58140150D0A5441AA3B377F0250151C15B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
Manifest number: 0305
Signing time: Mon 03 Nov 2025 13:28:38 +0000
Manifest this update: Mon 03 Nov 2025 13:23:38 +0000
Manifest next update: Tue 04 Nov 2025 14:49:38 +0000
Files and hashes: 1: 323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (hash: Mw7HvlDrp63aWO1ARIfPFNHv5rafM0coG3YOIzN9QdA=)
2: D903348767481BAEFE2C4B534D22308FC61456DE.crl (hash: gtjAddTnEPEhMjnuRW9RNzcB3p2WqiiVPwHUZv71Ojs=)
3: 3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (hash: 9qI1j80SisNpEFrkVgnZx2fMMWt5iqrs2+4KLEk1aLI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 14:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:23:2e:58:14:01:50:d0:a5:44:1a:a3:b3:77:f0:25:01:51:c1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
Validity
Not Before: Nov 3 13:23:38 2025 GMT
Not After : Nov 4 14:49:38 2025 GMT
Subject: CN=9BAD6A2520192D20BEBC12123F9C214FACDCDD8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:1f:83:63:39:f3:04:30:6a:78:76:2b:0f:
4a:c1:e1:fd:dc:de:f6:42:de:d8:cc:45:f5:43:a1:
07:95:6e:88:7b:21:e4:2f:19:e8:d8:02:c0:19:e0:
40:aa:6f:74:e2:c1:a9:af:e9:d7:b2:e4:9c:d9:b8:
40:fc:57:76:b1:65:72:3b:2c:f0:39:5d:e7:bd:b6:
ad:3c:eb:2c:ca:6b:fc:08:cb:3f:83:be:a8:db:41:
ef:2e:34:52:c5:29:3b:42:bb:38:cd:00:10:ee:f2:
a4:66:c3:e1:43:de:72:bf:76:98:bc:54:35:69:5a:
78:72:d0:c8:60:41:6f:7e:2a:50:ae:5b:36:1d:46:
0d:5a:2b:68:f9:ef:dd:35:63:30:d0:6e:75:61:1a:
32:cc:3c:09:34:d8:6d:8e:e6:0f:7b:25:fe:65:c3:
7f:f7:b7:b8:ad:1d:96:ea:ea:37:91:07:3e:2b:92:
e5:34:bf:b4:2b:ab:35:65:89:82:59:0f:32:c4:cb:
fd:9e:96:d8:45:db:0e:ec:0a:ae:53:93:01:e3:5c:
2a:eb:85:92:ad:e5:f7:95:9f:ac:76:57:e1:e0:2c:
46:88:34:df:eb:95:c5:ed:5c:a5:ca:de:7a:13:44:
fc:5b:73:d1:88:5b:61:ef:6b:cf:ee:ad:e2:f3:e1:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AD:6A:25:20:19:2D:20:BE:BC:12:12:3F:9C:21:4F:AC:DC:DD:8D
X509v3 Authority Key Identifier:
keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f4:fb:9e:4c:86:5f:42:0f:b9:86:5c:c6:06:be:0a:62:33:
b6:1b:3e:ae:26:be:45:80:6c:db:9a:19:2a:9c:f2:2b:f4:74:
a2:dc:77:d0:88:a8:8a:02:1e:8b:56:3d:d7:ee:39:9a:30:dd:
0c:9f:09:b2:91:40:b4:6c:62:37:16:44:00:94:db:d5:05:76:
98:c1:31:6f:8a:f8:5a:33:5d:e0:11:87:3c:cf:b6:f7:46:79:
c0:6a:12:b3:20:be:a0:16:79:af:ff:55:ad:4b:b6:0d:5f:50:
d6:35:89:f9:09:b7:4f:8c:d3:5f:1e:ec:c5:6b:fb:f7:c8:1e:
03:fd:80:e2:20:4c:30:4b:d6:5f:32:80:7b:27:06:e1:8c:ac:
b4:ea:71:db:61:77:fa:da:12:9e:47:4d:b8:01:d0:4d:57:50:
bd:83:cc:3c:fe:49:4c:7b:e4:d8:3d:68:43:21:4d:cd:ec:4c:
a2:37:d7:15:64:98:9e:59:c6:b6:11:17:7a:32:e7:bc:b5:ff:
4f:0b:d5:bd:47:0d:b7:35:3d:a5:fe:6b:bf:dd:de:8f:96:b3:
e6:90:02:ae:45:12:9d:0e:50:48:67:5f:09:a8:6b:e9:b4:86:
db:ee:ba:4c:9f:22:cc:34:e2:51:9b:71:1f:39:24:2b:ee:a5:
af:c3:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:34:56 2025 by rpki-client