
$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
File: FE287030880D0123AC89374793BF7EEEFC18D5AE.mft (raw, json)
Hash identifier: n3iV7LfK7eFz6x2PudLs5SjB67rsI8SMUKXRxJEAWnM=
Subject key identifier: 62:4E:AA:04:D9:6F:EA:04:51:53:B8:AA:87:61:D3:F4:B1:AC:70:73
Authority key identifier: FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE
Certificate issuer: /CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
Certificate serial: 24A37697E5F8EA67E59B46B4C1F10C57145D8BCF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
Manifest number: 0119
Signing time: Tue 04 Nov 2025 08:25:48 +0000
Manifest this update: Tue 04 Nov 2025 08:20:48 +0000
Manifest next update: Wed 05 Nov 2025 08:48:48 +0000
Files and hashes: 1: 3137302e38332e302e302f32322d3234203d3e20323636343534.roa (hash: 4TY68sdX+Mo5gHLGvqS9qr1JBZWuP4Ku2luvIw18w2s=)
2: FE287030880D0123AC89374793BF7EEEFC18D5AE.crl (hash: K7vigPIBrbKYcV/dn0bZHiF7dKYefXPEqWqgG9aRZJU=)
3: 323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (hash: O7R/lVZUvW+Vi4RO6lqsGeyEYmiPdFcPi2Zhc3vQX08=)
4: 3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (hash: ucu5o+cbrrcpLJVtgJQ2wcvE1yU3O/AilPSThMPOcU8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl
rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 08:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a3:76:97:e5:f8:ea:67:e5:9b:46:b4:c1:f1:0c:57:14:5d:8b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
Validity
Not Before: Nov 4 08:20:48 2025 GMT
Not After : Nov 5 08:48:48 2025 GMT
Subject: CN=624EAA04D96FEA045153B8AA8761D3F4B1AC7073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:c7:91:09:de:f2:34:1b:75:a3:4a:c6:ee:
e9:3a:9b:ad:6f:9c:3c:6e:36:c0:e4:87:af:78:76:
aa:f9:1d:35:4e:52:bc:54:c2:e2:e9:60:a1:5d:ba:
02:1f:c5:23:25:fc:28:d7:c7:84:c6:8d:19:b8:69:
1f:7e:b1:86:fd:a0:0b:81:ef:ff:4d:0d:ce:aa:64:
43:33:7a:fb:ac:5b:ba:b2:6e:00:2c:0f:f7:19:2c:
f7:21:97:c2:f1:a8:52:33:51:36:ca:d5:7d:af:b1:
c5:cf:ed:3e:72:c8:9d:09:f4:96:ec:fb:f3:9e:5f:
43:cc:76:90:eb:89:40:e6:c1:36:c2:8e:4e:54:db:
bd:a8:e5:d5:8b:d3:41:33:9a:8c:af:52:c7:38:1a:
69:c1:5b:cd:5f:fd:6e:3a:6f:fd:aa:de:dc:59:35:
e8:ea:bb:6a:d5:bb:6a:ff:d6:21:9f:9b:c7:8b:61:
29:e4:46:c3:5f:9e:a5:0d:2e:04:05:9b:2c:bf:b3:
1b:3a:cb:b0:0e:2f:0a:8d:89:9c:58:3c:f9:9d:4c:
51:3a:d5:f0:d4:d1:25:16:cd:cf:44:c8:47:b0:2c:
f8:f2:94:6a:16:5e:2b:45:94:5d:87:fe:59:81:a5:
ec:4e:8d:86:86:7f:c4:e7:ee:31:fc:47:d6:8d:e5:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4E:AA:04:D9:6F:EA:04:51:53:B8:AA:87:61:D3:F4:B1:AC:70:73
X509v3 Authority Key Identifier:
keyid:FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:22:14:2c:c3:93:ec:af:c8:9e:48:c9:69:70:3c:a1:36:1d:
c8:16:c4:73:d7:6c:b5:b8:d4:34:82:55:6c:07:50:cd:12:a8:
09:cd:15:3e:0f:70:a8:3a:5d:f2:6c:a8:22:b8:d0:87:91:5d:
7c:1b:14:65:ca:a4:c5:5b:2b:eb:fd:f6:98:bd:ae:75:63:88:
e3:44:04:45:2a:84:3e:2c:f8:5f:06:7a:c3:48:32:ab:e4:2c:
e5:9f:aa:2a:a2:d3:6b:0f:9b:66:79:67:f7:91:3f:df:06:95:
50:cc:96:eb:4b:49:96:3d:b9:12:5a:da:09:17:79:e0:6d:5d:
d2:a5:ae:be:22:fa:01:75:80:bd:b1:61:1d:25:7e:24:ee:89:
9a:e6:93:4c:31:95:d1:b2:61:6c:6f:c0:27:d4:e5:c7:25:4d:
07:ac:7a:5a:95:1b:db:f4:c8:73:74:e4:ae:71:25:eb:80:a2:
d3:83:4d:0e:14:c9:85:a0:46:af:86:c3:eb:fa:f7:9f:02:2a:
85:af:70:de:c2:b8:c2:b1:46:93:50:a9:69:87:fb:39:e9:70:
5d:ae:b2:61:b1:0a:07:14:4c:f1:c8:ff:53:f5:d6:ec:6e:eb:
1a:42:19:84:d2:6b:93:32:3d:72:e5:8d:d2:5b:2b:85:e3:f5:
15:b9:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:32 2025 by rpki-client