
$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
File: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft (raw, json)
Hash identifier: 2kY4Q2ITZlFYO2jhoYKx5aoQDGkd0lFyJfriWrYPKA4=
Subject key identifier: 8B:24:9B:17:31:EC:61:9C:D7:B6:9D:E0:B0:C5:B9:D3:3F:4C:D5:1E
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Certificate issuer: /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial: 3139AA18132421F40599373F7C589DC0914FBD67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
Manifest number: 02DD
Signing time: Sun 02 Nov 2025 21:40:39 +0000
Manifest this update: Sun 02 Nov 2025 21:35:39 +0000
Manifest next update: Mon 03 Nov 2025 23:57:39 +0000
Files and hashes: 1: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl (hash: yfA5+U2TPhy+wXPRQ/jOrfBYCKOz+DK96igQCmAmy2k=)
2: 34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (hash: eFZpq7/lysWMyCeALQauJV3pZgyFoGyONpbY4mt4A3E=)
3: 34352e3138382e38322e302f32332d3233203d3e20323639353837.roa (hash: HoBoo1GA/eR/ql8oBZdRyvEIvJV03tZN4bSv6wnSky8=)
4: 34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (hash: HuPGets2yD0kaZS9QAO1gzE2/AZ5Lldb3ma5DeOW8zA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 23:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:39:aa:18:13:24:21:f4:05:99:37:3f:7c:58:9d:c0:91:4f:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Validity
Not Before: Nov 2 21:35:39 2025 GMT
Not After : Nov 3 23:57:39 2025 GMT
Subject: CN=8B249B1731EC619CD7B69DE0B0C5B9D33F4CD51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:a9:91:2f:cc:fe:cb:f3:67:1f:04:77:fe:
92:1d:2c:62:da:ea:d3:8d:a3:63:cd:8d:ee:11:d2:
57:93:31:70:a5:bb:49:3e:59:56:05:85:72:cb:58:
49:94:21:12:83:91:ce:a3:d1:db:f9:0d:b2:03:ba:
c9:62:da:00:42:7a:a6:bf:94:1f:64:16:b3:af:7d:
f2:30:bb:2c:7b:b5:37:04:8c:8d:4c:c2:9a:a5:f1:
e1:88:22:b8:b7:1c:e1:e4:86:ab:8f:dd:00:a6:e4:
49:e3:ab:fd:19:21:54:cd:77:1e:f9:6b:f9:2c:6b:
95:67:47:a9:d1:08:b0:9d:b0:ed:ef:e5:e7:7a:00:
83:a2:84:1b:01:27:17:71:87:89:13:fd:2a:2b:68:
2f:ec:af:40:24:9b:6d:eb:c2:4b:7a:96:7b:85:db:
38:94:23:5c:86:d5:61:c9:08:fb:09:af:86:d1:10:
51:4b:e0:71:9d:04:6a:ed:fe:c1:03:4e:f3:b8:1e:
d8:56:dc:0e:a7:e7:8b:e3:90:7d:75:5a:e6:1f:37:
4c:50:57:0f:db:92:9a:5f:0c:e6:85:99:eb:77:24:
0d:d4:6b:a9:08:74:cf:9a:e1:1a:8e:20:e4:b4:8e:
83:1e:22:46:5b:04:3c:9e:48:cd:3c:d7:f8:b8:72:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:9B:17:31:EC:61:9C:D7:B6:9D:E0:B0:C5:B9:D3:3F:4C:D5:1E
X509v3 Authority Key Identifier:
keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:80:03:74:93:a7:e5:e4:59:d7:a6:b2:0c:b1:8d:b7:7b:18:
ad:bc:36:a7:77:ee:74:43:79:39:e4:7e:9b:56:dd:67:c1:8b:
b8:ee:fe:83:e6:ab:de:68:af:ed:4b:90:7a:3e:86:0c:eb:36:
6f:97:da:a7:81:46:a7:33:b4:13:ed:3a:de:fe:b6:8d:b7:a9:
89:29:0b:54:b8:59:8e:39:16:3b:ce:0d:32:b3:ea:0e:c0:44:
4e:f9:10:ad:b5:bf:3f:0a:cf:9a:45:be:9e:e1:a6:67:a7:90:
9b:b8:82:e7:49:c7:71:9f:7d:fa:b0:fc:9a:c7:4c:b5:23:ef:
60:ac:07:a9:33:ca:1a:f5:a7:cc:d6:ed:ec:e8:d4:12:cc:b7:
68:67:41:23:43:c3:48:7e:a6:ad:ed:60:fa:ba:de:b1:16:3d:
7d:9c:b7:38:4a:79:e1:93:f4:8d:a3:49:3c:e5:35:8a:e7:72:
6e:1b:a0:5c:e7:8b:3f:95:2a:67:2a:55:b0:46:33:24:b5:e9:
8e:4b:a3:80:40:c0:ef:2b:7f:13:bd:56:79:53:2e:dc:84:9f:
85:07:fb:0c:33:f9:42:05:e7:9b:9e:de:e1:8c:47:af:e9:ee:
b4:ea:c3:60:3b:2a:4f:be:b6:93:c6:8c:88:1c:44:c8:17:36:
7d:8c:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:34:42 2025 by rpki-client