
$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier: n6BffSATc3Wu6dTCb+nIOCeQJkGFzR7S4ovGzvCx2y4=
Subject key identifier: 91:C9:95:90:B1:AD:0B:98:FF:71:CF:AE:43:DF:5E:5F:0D:3D:3C:0C
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial: 23C8F40208E53DEE98022626E9D7D1C5CAD21AA6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number: 02FC
Signing time: Mon 03 Nov 2025 02:04:20 +0000
Manifest this update: Mon 03 Nov 2025 01:59:20 +0000
Manifest next update: Tue 04 Nov 2025 02:35:20 +0000
Files and hashes: 1: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=)
2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: rt3JWzR9BhpvhZqLQkVRVAxsrtAAcKWaKgtZ4I7gcsg=)
3: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 02:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c8:f4:02:08:e5:3d:ee:98:02:26:26:e9:d7:d1:c5:ca:d2:1a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Validity
Not Before: Nov 3 01:59:20 2025 GMT
Not After : Nov 4 02:35:20 2025 GMT
Subject: CN=91C99590B1AD0B98FF71CFAE43DF5E5F0D3D3C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:b2:7d:c3:f6:14:2c:76:91:c6:1b:18:8c:
ec:5d:f4:6a:f5:27:d1:48:28:a6:6d:57:e6:80:cb:
4f:32:18:6f:81:5d:f6:c9:20:73:ef:04:e3:c3:d4:
3c:ca:0a:4f:fa:f3:9b:14:0f:e5:2a:bc:5d:e1:f7:
f2:3f:f2:e2:49:ad:2f:40:8c:1b:b3:cd:ca:e6:d9:
95:54:7b:5a:9b:e3:99:69:b7:a5:b8:0b:fe:77:51:
55:11:70:88:90:d3:fb:7f:f2:68:b4:a9:26:c8:b3:
0b:96:77:ed:ac:fb:4b:13:e6:78:99:09:f7:29:95:
c3:d1:1f:73:31:be:8d:b8:34:70:d9:2a:1f:14:fc:
8a:e9:03:10:4f:d7:d0:2f:e8:d5:ac:71:50:fd:a2:
e0:13:95:d0:8e:e6:82:05:0e:f0:f7:23:62:bc:50:
bd:2d:7a:5f:d1:79:f3:05:f1:94:3a:40:bf:52:ec:
f2:4c:b2:82:41:ac:fd:2e:9d:51:02:ea:b3:7e:55:
c1:76:80:6d:6f:f3:90:c5:11:69:43:66:4c:27:77:
0d:52:06:d4:0d:5f:63:f9:c3:07:b8:7a:0b:c4:0e:
9f:22:59:a2:dc:df:a3:9a:66:03:28:d4:d1:d9:0a:
7c:bf:51:c3:9d:dd:b4:8b:9e:dd:06:68:df:5d:15:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:95:90:B1:AD:0B:98:FF:71:CF:AE:43:DF:5E:5F:0D:3D:3C:0C
X509v3 Authority Key Identifier:
keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:10:72:13:e9:47:f8:62:16:01:e7:5f:af:35:da:ba:90:60:
eb:50:5a:5e:eb:fb:09:aa:6e:d9:53:4f:3f:b3:13:3c:11:20:
fc:52:af:56:0f:4e:4e:a0:2a:cb:6f:34:2d:a4:58:fc:af:58:
e4:c3:d3:68:1a:7e:18:2d:bf:1d:9d:54:ea:ee:57:14:e4:f6:
d2:63:dd:cb:4d:04:25:f3:13:c9:d0:1c:4e:30:0d:da:f6:13:
e0:53:cf:39:4a:57:ea:40:98:23:f6:b9:d4:2b:96:ff:85:41:
a1:92:e4:d0:5a:a6:12:35:f4:19:bb:a1:b0:be:fd:5d:10:67:
3c:d1:8d:68:27:cd:bb:f5:24:69:c1:f7:aa:c4:fb:2b:25:21:
d1:5d:6e:89:78:3e:dc:ef:d0:49:53:b6:46:1b:2b:02:cd:8c:
92:3a:98:28:a4:f9:c4:d7:bc:20:5b:a5:f9:56:87:53:45:3d:
c4:ae:f7:09:3a:41:07:02:af:45:dd:6a:d3:8a:3d:d1:f8:14:
b0:81:86:c2:e5:fe:ca:64:b0:0e:57:74:9a:f1:04:02:2f:9b:
49:92:44:52:d2:f2:80:62:77:41:46:70:83:f9:80:c1:fe:e8:
e4:3d:d3:2b:76:03:2e:bf:1a:c7:84:1b:8a:3d:07:ad:e7:9a:
0b:74:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:08:50 2025 by rpki-client