
$ rpki-client -vvf rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.mft
File: 61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.mft (raw, json)
Hash identifier: Wcx4rzcuUc82InbWeaEQ/DxvCTVNJzP1Xd//Lb+EDhs=
Subject key identifier: 5D:4D:C9:5A:14:E3:B0:E4:EB:FF:57:77:51:61:56:BD:21:3A:52:4C
Authority key identifier: 61:FB:82:0C:D9:2C:B4:8F:CB:EA:08:20:C0:6C:5B:6F:20:BA:93:44
Certificate issuer: /CN=61FB820CD92CB48FCBEA0820C06C5B6F20BA9344
Certificate serial: 7EBF4D1D1362F0BB31F62F5C2B9E5580B7C5CFD1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.mft
Manifest number: 19
Signing time: Mon 03 Nov 2025 01:39:28 +0000
Manifest this update: Mon 03 Nov 2025 01:34:28 +0000
Manifest next update: Tue 04 Nov 2025 03:14:28 +0000
Files and hashes: 1: 61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.crl (hash: 5GHDsE+ePJjFKc3AI2ovRyFZUOw7JMiFlw9hgQvkfNk=)
2: 323830343a373563343a3a2f33322d313238203d3e20323731303638.roa (hash: fYREL2m9MQ52QhM6DDxc5XdL6ODHjCQGyv3UBf3duoU=)
3: 3137392e34382e37322e302f32322d3332203d3e20323731303638.roa (hash: OKugfZ7q1mte/GKaZZh1wufCrDZgDgxkx21uF1v7chI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.crl
rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 03:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bf:4d:1d:13:62:f0:bb:31:f6:2f:5c:2b:9e:55:80:b7:c5:cf:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61FB820CD92CB48FCBEA0820C06C5B6F20BA9344
Validity
Not Before: Nov 3 01:34:28 2025 GMT
Not After : Nov 4 03:14:28 2025 GMT
Subject: CN=5D4DC95A14E3B0E4EBFF5777516156BD213A524C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:31:95:e1:8e:ff:74:bd:69:64:dd:76:73:
a5:87:84:4d:91:24:ba:f8:a3:7e:c0:eb:ca:d0:bf:
e3:63:d0:44:29:35:c7:7e:1a:f0:09:4d:74:1a:b5:
1b:20:0a:3d:f3:24:80:d1:0c:6d:07:fe:3e:d7:de:
42:2b:ff:25:05:e9:84:7a:ae:c4:f9:70:2e:05:e6:
fc:de:5f:ef:0f:b8:43:75:0f:13:64:14:a6:6e:98:
3d:82:7f:6a:32:45:6e:6a:7f:59:6f:f9:f2:35:14:
d3:51:de:b0:11:68:06:e0:7f:16:00:7e:b8:0f:90:
f6:4c:a7:19:57:74:e3:05:ec:c8:6f:c3:03:65:63:
d3:86:c4:c3:78:c9:67:4f:99:ad:4d:be:8e:3a:fc:
40:e0:d5:b5:e3:d1:a9:18:60:f2:7c:6e:33:93:b2:
90:9e:ae:56:0e:b2:c2:c8:56:2d:f0:8b:4b:05:c4:
3d:a7:82:02:15:ec:72:b8:7f:31:cd:14:91:d8:8a:
0b:3d:30:72:36:c0:2a:af:0d:de:31:d1:4f:8e:98:
87:50:6c:bf:a4:46:c3:09:62:f1:40:85:3f:d8:d7:
0d:2d:da:f9:c0:93:7d:4f:4e:b3:2b:92:64:e2:f0:
cc:2f:d0:c5:f6:95:96:a5:6c:47:82:ce:61:86:70:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:C9:5A:14:E3:B0:E4:EB:FF:57:77:51:61:56:BD:21:3A:52:4C
X509v3 Authority Key Identifier:
keyid:61:FB:82:0C:D9:2C:B4:8F:CB:EA:08:20:C0:6C:5B:6F:20:BA:93:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/61FB820CD92CB48FCBEA0820C06C5B6F20BA9344.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:95:59:6b:26:33:f3:56:c0:d9:06:dd:b3:91:02:de:8c:ef:
26:49:63:82:9c:fa:ff:25:e0:5b:2a:e5:9c:8e:e1:30:b5:04:
48:7f:9f:59:d8:6d:aa:0a:6f:47:56:86:0d:8f:21:d4:bc:9e:
61:a3:79:b7:fa:1e:40:1d:96:dd:0c:73:39:cb:32:57:2c:88:
72:f3:04:4e:37:da:d8:53:82:31:68:8c:95:51:c2:6f:8c:5f:
44:8a:fe:38:4e:7a:ea:05:ed:75:b8:3e:fb:64:a4:de:da:5c:
d7:66:3c:fc:03:5e:60:d8:29:39:2d:5d:6d:be:86:45:46:a0:
88:0f:85:88:92:71:8b:65:cc:fd:ce:c9:a7:1b:cc:ee:d5:4a:
46:ca:f6:e4:44:f3:e9:7d:1d:6e:46:68:6f:a6:1c:02:ec:19:
9a:a1:9e:e0:e0:86:9f:57:ee:7b:5b:66:68:00:ea:d4:3c:62:
9e:cd:e4:db:5b:be:43:dd:85:44:08:14:a3:6f:60:e1:fa:c4:
66:91:48:2b:80:d1:0f:dd:02:92:d7:f1:fa:83:af:dd:ff:c9:
31:3d:97:ce:bd:81:27:e2:2a:a8:d3:1f:02:e2:33:14:e2:41:
b3:0a:d4:a0:c4:38:3d:a6:39:cc:45:ec:d7:6a:05:07:ba:2c:
f8:94:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:14:57 2025 by rpki-client