
$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
File: 2124AAA7D0FC397516525A2092F690A62F40A18E.mft (raw, json)
Hash identifier: gcw3SBMutTGdrVA6DfDxOH1Tm8SWsYJhy5Ea8mnN9mA=
Subject key identifier: 73:8B:6B:84:0C:01:32:BB:B7:FB:D9:8C:7E:16:07:90:5D:3F:AB:1C
Authority key identifier: 21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E
Certificate issuer: /CN=2124AAA7D0FC397516525A2092F690A62F40A18E
Certificate serial: 7C4F1CFD2DD4CAE11AC8C75C837814ACEBAB7CB7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
Manifest number: 4A
Signing time: Mon 03 Nov 2025 10:45:16 +0000
Manifest this update: Mon 03 Nov 2025 10:40:16 +0000
Manifest next update: Tue 04 Nov 2025 13:37:16 +0000
Files and hashes: 1: 34352e3136362e34392e302f32342d3234203d3e20323637393532.roa (hash: e+c+spGvq5ml5zOAxeCQPs573+YdwAuCGZHjiVnlDjo=)
2: 2124AAA7D0FC397516525A2092F690A62F40A18E.crl (hash: b97aD4v4UPBaMwLb+E5/jTCmB9q5/XrYkICzKr5cMEU=)
3: 34352e3136362e34382e302f32342d3234203d3e20323637393532.roa (hash: 7Ci6mmrXE3sRkckpCJCIBy9M6/3SAiFHPZ3zklaj8jw=)
4: 34352e3136362e35302e302f32342d3234203d3e20323637393532.roa (hash: oyHVMXAiZuWDf/RH2Z+Kt6FhoEMcacKYYa8Vc00XTvw=)
5: 323830343a353562383a3a2f34302d3430203d3e20323637393532.roa (hash: bAtTMCYopyjSFGJ9NsVLbchEagaQNVS8++Fkn104qj8=)
6: 34352e3136362e35312e302f32342d3234203d3e20323637393532.roa (hash: z/ZfiJUmKoyMIx0RQp4AqQRGY4/fcDAN2Nnrb/lDboc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl
rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 13:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:4f:1c:fd:2d:d4:ca:e1:1a:c8:c7:5c:83:78:14:ac:eb:ab:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2124AAA7D0FC397516525A2092F690A62F40A18E
Validity
Not Before: Nov 3 10:40:16 2025 GMT
Not After : Nov 4 13:37:16 2025 GMT
Subject: CN=738B6B840C0132BBB7FBD98C7E1607905D3FAB1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:73:e1:b2:bb:79:7a:6c:b9:ad:39:32:48:
e8:5d:3d:4b:8f:7e:e3:0d:50:94:8d:50:6f:f9:44:
59:3d:7b:80:df:1c:f0:ed:cd:7e:cc:5b:3f:75:b7:
7d:0f:c0:49:9d:72:df:4c:25:7f:a2:bb:35:bc:13:
1c:38:0f:51:42:8e:3f:af:3e:4e:e0:a7:7a:61:cd:
cd:46:a0:56:e9:20:65:c3:a2:1b:96:b6:a5:3e:08:
56:f4:79:2d:f2:1e:90:7e:5f:eb:0f:81:3d:90:fc:
05:04:04:99:41:1b:2c:ec:9c:6f:bb:cf:79:2a:0a:
e5:ce:6a:b5:a6:5c:3d:dc:3d:c3:05:1b:2f:2b:ff:
9b:b9:02:8b:9f:10:b1:22:8b:f1:96:75:fb:f3:2a:
e6:7f:c8:e1:15:67:72:f1:a2:ff:53:33:47:de:89:
2f:4b:f0:dc:67:87:ee:fb:8f:96:ed:fc:ab:58:f8:
ff:12:12:16:38:5f:b3:88:a0:90:2c:49:5f:84:8a:
79:02:50:3f:0e:41:8c:25:3b:ff:38:2a:ee:bf:6e:
02:1b:65:68:e6:2e:87:0c:80:c0:b0:71:a1:13:c5:
57:3e:80:e1:44:4f:92:9c:72:4f:51:3f:36:8b:d1:
e2:c2:96:a9:1f:3b:e9:a3:b8:ef:dc:8b:df:56:35:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:6B:84:0C:01:32:BB:B7:FB:D9:8C:7E:16:07:90:5D:3F:AB:1C
X509v3 Authority Key Identifier:
keyid:21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:b1:06:6c:48:20:8f:23:a4:d6:53:69:0b:14:43:8e:ab:
b7:b1:d0:7c:fa:fb:26:d8:a6:e7:02:35:37:16:f0:9a:ad:17:
1b:8f:df:79:55:ed:e3:60:d7:db:a0:8b:c6:62:71:83:fa:4d:
a5:c3:63:79:67:2d:b6:56:21:62:70:37:9b:a4:d0:11:c2:93:
33:62:3b:e0:33:be:90:15:c5:8f:53:42:95:39:b6:0c:b7:0e:
4b:53:4d:d2:6e:a8:b5:fa:e4:b3:d2:8a:fc:c7:f0:14:8b:2e:
93:a2:4c:f6:86:43:18:04:0e:87:db:ac:e3:7a:84:6f:5e:5a:
84:16:68:d5:95:d4:67:f6:97:b1:4f:9e:22:05:f3:3d:6b:1f:
ad:81:03:fb:8b:db:e4:31:4d:8e:6c:0b:e7:14:4a:84:4a:74:
43:f0:66:0a:39:84:22:95:d6:e9:3b:87:90:11:b9:7d:20:98:
aa:6e:20:5e:fa:02:86:a3:58:2b:89:7f:1f:9b:9d:7e:6e:b7:
8f:3c:7e:a9:8d:38:fb:ff:60:0d:73:ff:09:a2:de:06:0a:3e:
09:77:bd:56:35:bd:2e:cb:bb:13:c8:3d:a3:45:9a:c6:fe:67:
b3:c1:9f:12:e6:38:7c:25:4c:36:db:1f:e5:28:bf:b9:4f:43:
93:77:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:40:01 2025 by rpki-client