
$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier: xHLcbuPHv8PmLQvtW8KSoP8tfccoCcVdGDQ17ay6CDM=
Subject key identifier: 90:B9:AB:78:59:E2:65:94:91:D8:46:C6:53:65:1A:14:6F:0F:87:93
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer: /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial: 165233E37CFA082979F080BDBA109B62C44E6D34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number: 01DC
Signing time: Mon 03 Nov 2025 04:06:19 +0000
Manifest this update: Mon 03 Nov 2025 04:01:19 +0000
Manifest next update: Wed 05 Nov 2025 07:42:19 +0000
Files and hashes: 1: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: KOOUWFaOXwXbzjs7WT6NvLyUy5a/lpuHhKsyFUu7u5o=)
2: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: dDZBFJTgy6uf7u/054EgmCGUT/tK/Ve2awhm8WyhgyI=)
3: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: B6OA/UtG4WpNu4nO8tjqIg/m7ZPmuNJg+/AraO2FdBw=)
4: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: PsRtW7mHTyutO0DxQQGdWmoyYKa6pQXrN/ynckkhhkg=)
5: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: VQxRN4syAFNsgoSkUbyGLUgM0m2Nj3rU72rimBNN8sU=)
6: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: 0STruXq+XIfTiYPW08Xb6Jj7cL9IQowr5jSbbyzxCMs=)
7: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: vyEuVko/frnMCelb6uKYiRTw431v8ZOguv+v05iqEi8=)
8: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: 3I72140Z3ulLl5k4dKLwv/elKHlGRjQ2O3o1AuO1vTs=)
9: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: 97Ca/q3JVe60Zw9Y/8oQJDrJblO8E1C0KYjkN87TcEQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:52:33:e3:7c:fa:08:29:79:f0:80:bd:ba:10:9b:62:c4:4e:6d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Validity
Not Before: Nov 3 04:01:19 2025 GMT
Not After : Nov 5 07:42:19 2025 GMT
Subject: CN=90B9AB7859E2659491D846C653651A146F0F8793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:c4:8c:f6:c1:85:3c:83:46:cd:c6:5f:5c:
04:cf:de:06:7d:5c:de:5d:71:98:4e:d9:88:c3:2b:
84:68:a2:ec:ef:0a:a8:52:16:73:f6:7b:95:91:78:
81:b2:3c:a4:a5:f2:e9:d1:e5:0c:14:7b:8c:8d:75:
77:99:a5:43:4c:55:af:f2:58:6a:30:1b:a8:47:e0:
d6:d0:84:40:e2:ca:63:f9:a3:01:0b:ab:fa:8e:53:
ee:2e:9c:1d:1d:29:f0:14:4d:24:d1:db:6d:1b:c6:
da:01:89:6b:55:b0:eb:5f:fe:63:d1:5c:37:78:f8:
8e:ce:ca:a4:e6:bb:d0:e0:f1:26:18:28:6c:b3:f9:
ad:f2:ec:9f:35:c1:9b:68:a9:6b:59:8f:09:63:58:
21:9c:a3:8e:12:ca:07:d3:6f:6a:a1:cf:b9:25:24:
87:49:57:e7:ab:b5:fa:2b:6b:94:35:c9:50:64:9e:
13:6a:bf:d1:ed:c1:7f:91:2e:2e:b6:38:13:59:b1:
aa:2b:3f:57:cf:08:b9:b4:4d:6c:24:4d:4c:03:e1:
1f:5d:d0:ec:5e:c5:84:e0:7e:56:3e:a3:74:5f:f3:
5b:a9:23:e8:b8:56:13:d5:0f:e0:79:dd:49:c3:15:
70:fc:da:ef:1c:7f:bc:ee:a5:da:5b:76:5c:04:d3:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:AB:78:59:E2:65:94:91:D8:46:C6:53:65:1A:14:6F:0F:87:93
X509v3 Authority Key Identifier:
keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f0:e6:ed:2c:a8:ef:3b:15:7e:84:e2:3d:94:56:29:21:14:
29:c2:f4:77:ac:5b:5e:b8:5a:0b:43:39:ab:04:42:de:36:c6:
83:16:b1:b7:a8:1d:e7:b0:cc:d4:36:bc:1f:e8:f7:b7:12:c5:
15:95:f0:81:64:9f:6e:1d:f2:13:59:60:4b:c6:b1:aa:c7:52:
44:3b:c2:46:4c:7c:b5:3a:21:bf:e2:bf:2a:bf:35:25:08:00:
56:91:f1:be:5d:f8:46:99:7a:01:90:c4:88:40:2e:f5:23:82:
63:3e:39:01:cf:66:8f:71:f1:d3:73:13:9a:d9:f3:52:16:e5:
35:e6:b0:61:02:58:2f:f7:0e:4e:9b:ba:19:7a:d0:b2:e5:9f:
e2:46:6c:c6:34:71:cb:12:a9:72:fc:69:57:c8:25:31:4f:45:
50:34:4c:70:fc:68:5d:bc:b2:1b:9b:48:33:a5:50:6b:fa:3d:
9a:29:54:82:e4:10:c8:0c:07:3a:87:b2:b2:96:8f:37:c7:86:
ae:07:bc:db:04:9a:00:66:f8:b0:9c:af:b5:b3:17:94:aa:c3:
bd:e3:50:17:1e:c1:d1:7b:05:5a:bc:08:cf:f6:34:26:cf:d2:
d9:7c:62:45:ce:41:59:2c:84:bc:e3:32:24:6f:ef:d8:35:da:
9b:7f:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:27:40 2025 by rpki-client