
$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
File: D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft (raw, json)
Hash identifier: 3RPgcXRFt6SuVUbofkZofBt/EWhkwqAtPr2IY3V90wo=
Subject key identifier: 61:31:32:4B:F9:6E:3B:DA:89:EC:5A:47:4B:AB:42:B8:59:0E:85:4A
Authority key identifier: D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF
Certificate issuer: /CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
Certificate serial: 701A44406B3CBF4B25A50910B046EEE363B06943
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
Manifest number: 34
Signing time: Sun 02 Nov 2025 22:38:24 +0000
Manifest this update: Sun 02 Nov 2025 22:33:24 +0000
Manifest next update: Tue 04 Nov 2025 02:31:24 +0000
Files and hashes: 1: 3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (hash: Uowem+LzYl1JyCZCsHEfTMQHEAC3Ebsrx0Hmo5HI4bQ=)
2: D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl (hash: BytSTTEJI+lspiM4XSPhZcs5lbng0bZTEkNeYf0bxyo=)
3: 323830343a373930343a3a2f33322d313238203d3e20323731323830.roa (hash: lYvNUFCnmy0F9mKUaBfM6n6xRFogG6MEYh7M55VBPSM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl
rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 02:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1a:44:40:6b:3c:bf:4b:25:a5:09:10:b0:46:ee:e3:63:b0:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C7382C3F8DE81A2390899A3504852C3F3E2FAF
Validity
Not Before: Nov 2 22:33:24 2025 GMT
Not After : Nov 4 02:31:24 2025 GMT
Subject: CN=6131324BF96E3BDA89EC5A474BAB42B8590E854A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:75:29:53:00:6c:cf:56:9f:5e:11:8e:35:
b9:54:15:20:0d:8d:5c:28:3c:c0:3b:f7:19:77:81:
c6:9f:d6:aa:5d:3f:ce:99:4c:ca:b1:05:3b:50:53:
8e:01:b3:45:ad:c2:1b:94:c6:f9:d1:05:86:82:24:
b9:b0:f9:63:ab:f7:e0:21:91:91:b9:6e:de:41:e2:
e5:a0:9d:7b:38:f7:3e:ce:5c:a5:86:0c:fe:27:5f:
91:c7:62:b9:62:14:be:03:43:68:79:ff:e5:64:dc:
d5:2e:b8:41:51:36:40:72:a2:a8:e9:1b:fc:0f:2a:
e4:e4:0f:e4:85:a3:5e:bb:d0:3c:b9:1d:e8:f2:ab:
4f:d1:09:4d:b3:a4:d1:12:c4:13:82:30:6e:d3:1c:
a7:62:a2:f5:c6:c4:14:d1:ab:f5:24:a0:45:72:63:
5c:ad:2c:99:e7:0a:e6:81:5e:71:6e:e6:fb:52:4b:
9c:9d:9a:3c:c2:22:b2:22:8c:3f:e3:09:42:55:55:
f9:1a:8a:4b:ff:4d:0e:2d:ac:41:17:18:02:a2:53:
b9:76:ee:d7:c8:83:15:97:d9:c2:d8:8c:2f:be:46:
c0:7c:fa:c5:2f:a2:b6:9e:3e:a4:3d:51:d4:b8:45:
73:01:b6:9f:66:48:13:55:f0:89:f5:5a:83:2e:72:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:31:32:4B:F9:6E:3B:DA:89:EC:5A:47:4B:AB:42:B8:59:0E:85:4A
X509v3 Authority Key Identifier:
keyid:D0:C7:38:2C:3F:8D:E8:1A:23:90:89:9A:35:04:85:2C:3F:3E:2F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/D0C7382C3F8DE81A2390899A3504852C3F3E2FAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:04:0a:a4:2d:39:66:59:be:b7:ec:d7:24:7c:c3:4e:68:d2:
72:ee:37:28:ac:21:03:2e:a6:a8:25:d6:9e:3f:35:fc:86:bf:
c3:05:3c:ac:e2:d6:48:9f:96:ad:2f:3a:72:b1:28:8f:84:bd:
58:0e:05:67:24:f9:02:16:a8:62:3a:91:ed:f4:0f:00:5d:a8:
8e:f7:90:ae:db:67:66:5c:b6:dd:c1:6d:8a:65:b8:d9:50:61:
43:6f:fe:38:40:d5:6f:43:46:af:42:00:44:27:aa:45:b5:e6:
b4:42:31:fd:db:76:19:9d:c6:91:43:cb:f8:28:1e:11:11:a5:
ff:d1:75:62:1c:ac:ff:8b:99:68:c1:ed:d8:43:e8:d9:61:f5:
bc:70:be:f6:ea:54:bb:f6:ff:16:10:5a:97:b5:39:ae:ff:8e:
40:bf:76:5a:5e:d7:85:ab:e6:89:a2:66:7c:0b:2a:5f:8a:bd:
54:85:65:dc:76:71:02:2f:0c:e0:d9:f7:27:fe:57:d3:23:9b:
93:aa:71:56:ac:92:ed:b9:2b:59:65:84:36:60:4f:60:98:48:
c8:9f:e5:a5:1b:6d:72:a9:7b:a9:e1:86:0b:ed:d8:c5:fa:9d:
6e:90:b7:b1:4a:b1:0d:b2:11:ff:30:c7:82:8e:6d:91:2d:d5:
a4:0b:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:01:14 2025 by rpki-client