
$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
File: BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft (raw, json)
Hash identifier: MPgpPfbmnbllF0o1U12tciuAhxhTTwXtWm8PWR0+BnU=
Subject key identifier: 38:9E:03:80:DA:97:1F:63:A3:D5:26:F1:00:E4:5D:A7:A7:42:91:F9
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Certificate issuer: /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial: 214BFC049AAD89503C5A91AB87DA0F8D8B4C6578
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
Manifest number: 02D2
Signing time: Tue 04 Nov 2025 17:50:59 +0000
Manifest this update: Tue 04 Nov 2025 17:45:59 +0000
Manifest next update: Wed 05 Nov 2025 19:25:59 +0000
Files and hashes: 1: 34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa (hash: XUloOVfsOzPPxyik/iHPBmw4bQxk/7eIdcUdi8kEcuc=)
2: 323830343a363237343a3a2f33322d3438203d3e20323639323938.roa (hash: i3cBezF8IApSQaQqjUBcgOAnsqNsV9UdV/mGucW8iO4=)
3: BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl (hash: dbzVWZMdDS2sSoqS+pypaznB5fxwbqRAfI3NWblHdTg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl
rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4b:fc:04:9a:ad:89:50:3c:5a:91:ab:87:da:0f:8d:8b:4c:65:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Validity
Not Before: Nov 4 17:45:59 2025 GMT
Not After : Nov 5 19:25:59 2025 GMT
Subject: CN=389E0380DA971F63A3D526F100E45DA7A74291F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:d4:af:60:6f:db:5e:fc:1d:1e:51:49:6c:
11:3b:fd:36:43:ad:b0:0b:df:60:7f:3f:50:3b:84:
bf:25:ab:78:be:8e:a6:36:5b:86:a6:0b:3a:f8:2f:
d5:9a:f2:fc:75:74:af:dc:8a:31:99:e2:01:56:1d:
a1:7e:b9:df:f0:c6:19:ac:92:49:e1:e2:1a:7a:23:
fa:61:94:37:17:2b:b9:7b:ba:8c:6e:ab:33:9e:17:
df:85:a5:94:e5:df:55:b2:c6:92:72:ac:1d:92:43:
7e:70:58:a8:08:34:9c:89:34:09:b3:96:c2:b0:af:
ef:09:f2:c0:7e:04:24:c8:e5:00:fa:b9:4c:31:e8:
fd:5f:dc:19:b2:ac:40:3e:ed:62:ff:c8:fb:77:63:
ee:c6:94:37:5b:70:28:93:25:4d:f3:19:15:b5:53:
7f:32:9b:f3:40:4c:c3:8b:2d:e2:90:3f:27:f8:f1:
c1:bd:7b:3a:45:eb:32:b9:66:e9:ec:8f:00:6c:94:
83:e9:98:78:83:c7:fc:5c:d3:8b:a5:30:f9:3a:8d:
75:12:b3:24:a1:59:0b:dc:09:e8:c6:4f:59:90:d8:
e6:a7:f6:ab:fe:fd:d2:04:a2:48:92:95:f8:76:a6:
4a:1c:07:1b:03:63:2f:d6:09:cc:22:3b:10:c3:d9:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:03:80:DA:97:1F:63:A3:D5:26:F1:00:E4:5D:A7:A7:42:91:F9
X509v3 Authority Key Identifier:
keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d6:78:be:84:46:aa:29:e7:1c:3c:7b:33:48:ea:68:4e:7c:
a4:66:01:a2:45:0d:0d:a6:81:10:26:0a:ef:19:ea:3d:bb:9a:
35:97:73:60:e4:37:21:39:88:4b:53:63:3c:ab:ab:fe:2e:46:
2e:42:e2:15:d5:27:c3:22:27:19:bf:7c:97:c4:04:29:8e:4c:
f2:2e:b6:08:64:e3:76:99:90:c5:ce:2d:f9:df:39:d8:44:e2:
28:79:90:19:69:31:7b:22:b6:00:8a:84:29:98:1e:e0:03:b7:
22:59:2c:b1:a1:23:97:d2:ae:12:73:fc:f9:7c:f2:de:8c:6c:
a0:10:35:5b:cb:1a:99:e6:a0:8f:c2:f3:a4:bb:3d:56:d7:44:
ad:5c:f5:c1:cb:17:c9:7b:f5:86:79:7a:7c:6b:fb:fe:52:73:
80:95:a6:c2:03:ef:26:89:04:4a:bd:e1:d5:39:09:eb:93:9d:
73:bc:df:ba:1b:b2:53:39:c5:37:84:dc:21:d0:d0:c2:d3:e7:
1c:9b:ff:f7:e4:42:89:a5:f4:a2:9e:b6:01:7b:7c:1e:ab:d6:
ec:d3:9a:c6:f1:2e:b9:3b:a3:9f:56:3f:99:d3:d2:27:c2:9c:
08:5f:cf:4f:b6:57:08:ca:08:01:97:d9:7e:2b:85:82:00:0a:
62:91:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:44 2025 by rpki-client