
$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
File: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft (raw, json)
Hash identifier: 76lCs2v8ySnQWWKOywZZIlRYEVtGYjQ+GWB4ee6p59A=
Subject key identifier: 8C:2C:CE:F4:3F:8A:44:81:87:C1:A7:26:30:C3:BD:AA:5A:8D:03:B6
Authority key identifier: CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A
Certificate issuer: /CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A
Certificate serial: 6529FC2F2CDAD387ECDD1E21BD80965DD8732331
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
Manifest number: 12
Signing time: Mon 03 Nov 2025 04:04:50 +0000
Manifest this update: Mon 03 Nov 2025 03:59:50 +0000
Manifest next update: Tue 04 Nov 2025 07:15:50 +0000
Files and hashes: 1: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl (hash: F2a1nhFCMDuB0nYRW4j4+MFovuDkL/xUJEhMN2ljAxc=)
2: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: iSKt+O/N+iNmfjUfkl/1zsDgFZ6/Nhl0ym5tKlT/l5M=)
3: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: 5Br5hbvYBXoc32hzXjNMrP/gjwU0zbkYoTihpOwr6ok=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl
rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 07:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:29:fc:2f:2c:da:d3:87:ec:dd:1e:21:bd:80:96:5d:d8:73:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A
Validity
Not Before: Nov 3 03:59:50 2025 GMT
Not After : Nov 4 07:15:50 2025 GMT
Subject: CN=8C2CCEF43F8A448187C1A72630C3BDAA5A8D03B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:29:07:41:b6:72:20:00:af:68:cb:31:aa:
0f:7f:07:45:8d:f2:a1:c9:28:e3:3f:02:f0:be:b2:
9d:47:c9:b0:86:2c:4c:c8:58:f5:b1:bd:dc:85:c3:
1e:07:ef:7c:e8:96:33:db:44:62:40:3a:59:a0:5d:
3f:46:9b:00:f8:09:25:3a:0e:a9:61:cf:f0:ff:8d:
17:b6:7a:04:5c:2b:72:fa:2b:02:27:c1:9c:a6:ef:
d9:a9:5b:f0:8c:22:3f:c2:16:6f:9f:4d:7d:45:a7:
71:8d:11:14:7d:3f:55:0b:9b:8a:47:29:0b:5e:0f:
bc:0d:42:65:5c:c6:e1:3c:d1:0c:38:12:05:f6:db:
0b:5d:0e:4e:a4:13:4a:bb:9b:9d:6d:cf:78:0f:cb:
68:c4:e3:47:5d:0f:7b:74:61:b9:4b:55:ce:b6:0a:
22:17:4f:c6:44:25:c0:54:8c:e3:64:dd:9d:35:13:
ab:74:24:ec:b3:8b:9f:58:b3:78:1a:dc:45:6c:0e:
bd:57:13:de:e8:0e:52:39:7b:44:c6:47:e3:55:4b:
3b:31:01:42:89:e0:14:72:91:60:f6:65:4e:ff:b9:
95:98:17:6b:2a:8e:b3:26:06:9b:89:82:8f:1f:07:
5d:27:70:68:8c:2f:f4:2d:ca:5d:7c:aa:b2:64:ac:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:CE:F4:3F:8A:44:81:87:C1:A7:26:30:C3:BD:AA:5A:8D:03:B6
X509v3 Authority Key Identifier:
keyid:CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:88:f1:5c:34:e8:b1:b8:7a:1b:d0:6e:84:4b:db:a8:92:a6:
37:f5:37:71:0f:ce:ec:6b:a3:7e:04:99:f6:01:37:fa:f7:3e:
a5:1f:ef:07:be:65:8e:1f:66:d0:1c:a4:b6:9e:9b:ac:87:b6:
38:fc:02:14:a9:ca:0f:aa:0c:2a:a4:84:95:d5:ff:ea:9f:5f:
de:67:50:22:62:3b:c1:94:f4:fa:97:3d:1b:66:d8:28:29:d6:
02:d5:a2:16:ae:7a:e6:1f:cd:fc:7b:45:87:3d:05:14:56:07:
17:15:ea:41:24:ee:a6:90:60:33:f7:7f:df:c2:f7:38:92:19:
e6:a2:a4:ec:16:56:68:4a:72:d1:57:34:77:30:c0:8c:80:82:
4e:04:79:bb:81:12:55:36:d8:d5:11:79:0e:fe:01:0d:00:35:
66:b9:7e:a8:0a:d2:9f:12:54:70:d6:d6:eb:f8:14:01:89:39:
64:81:56:b5:8d:7c:ce:91:11:99:8b:46:8d:ba:64:c6:16:46:
64:ff:70:f1:5f:9d:55:47:11:95:41:eb:43:13:41:74:f0:39:
b8:c0:6c:94:68:71:4c:97:bf:26:6b:2c:d0:59:df:cf:fb:6d:
8f:d7:7b:f3:da:8c:94:31:c7:2d:6e:80:d8:6e:c7:8d:7b:58:
6a:58:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:15:37 2025 by rpki-client