
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
File: 11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft (raw, json)
Hash identifier: kEQyG/Ft8GtiVbNkjO6Cks7IvSRlXBttF7VWbZgoNJs=
Subject key identifier: 6B:5D:51:9C:2C:1B:49:0D:1B:D7:02:77:26:2C:37:A3:42:F4:8C:B8
Authority key identifier: 11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
Certificate issuer: /CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Certificate serial: 38B5A5D42D2208365D122084E0CDDF3D5F835380
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
Manifest number: 0222
Signing time: Wed 05 Nov 2025 06:40:34 +0000
Manifest this update: Wed 05 Nov 2025 06:35:34 +0000
Manifest next update: Thu 06 Nov 2025 07:31:34 +0000
Files and hashes: 1: 11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl (hash: leAOyZGo6e1XLyO5OFVpKYGCvygPeXmCWBsRB8IUH+8=)
2: 3138362e3230392e38382e302f32322d3234203d3e203238363130.roa (hash: erwPIs079Jb+pBZ/FBTw9ATXWCpFu8317rjYpHh4NEc=)
3: 323830343a6463303a3a2f33322d3438203d3e203238363130.roa (hash: 1uK1TcoBEttuc84PLt/HB2cYVm5KEL5t/Y9F8GcQvFE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl
rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 07:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b5:a5:d4:2d:22:08:36:5d:12:20:84:e0:cd:df:3d:5f:83:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Validity
Not Before: Nov 5 06:35:34 2025 GMT
Not After : Nov 6 07:31:34 2025 GMT
Subject: CN=6B5D519C2C1B490D1BD70277262C37A342F48CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:53:99:8b:5d:99:5f:a5:85:1e:36:aa:9e:
77:39:99:6e:8f:92:f5:19:5f:47:4f:ff:08:38:63:
04:55:af:e2:4f:8b:e8:21:f6:87:17:d3:17:f6:5b:
cc:1a:86:51:0c:2a:47:6d:ad:a6:a5:65:4a:d6:35:
e3:ac:48:c9:cf:53:20:5b:ad:cd:15:cb:a8:99:35:
96:56:03:8f:79:8b:5f:8e:e9:97:9e:f3:17:f3:92:
e8:b1:1c:11:97:e5:7c:05:e1:a9:f2:de:9e:ec:81:
7f:1b:bf:53:24:b6:d3:1d:e0:68:36:49:8a:36:64:
56:02:01:27:f2:02:d8:02:c1:e0:c2:e5:52:a3:0a:
ba:2a:fe:17:fb:7c:4d:12:50:1f:d9:70:d5:f9:a5:
70:53:a8:e2:ad:d4:51:a1:58:72:ff:60:db:f8:50:
a5:6a:0a:79:af:2f:bf:e0:f7:ec:3e:b3:46:f6:31:
81:57:4b:88:43:b7:62:65:a9:8c:71:fd:41:16:06:
af:df:bc:2a:db:48:8d:90:fc:4a:e6:d8:96:d8:0d:
12:25:00:b8:f8:2b:ab:73:91:04:a2:2c:5d:df:bc:
fa:11:b0:27:cf:ad:58:18:b9:4e:a4:e1:4b:0c:c0:
2b:11:05:96:a5:b7:af:68:bd:b0:8b:ae:4a:37:fa:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:51:9C:2C:1B:49:0D:1B:D7:02:77:26:2C:37:A3:42:F4:8C:B8
X509v3 Authority Key Identifier:
keyid:11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:38:7c:dc:b3:3a:2a:d1:47:2b:08:a3:dd:2b:b0:46:fc:ba:
d4:8e:36:ef:f8:58:46:60:75:1d:43:32:b4:e7:6e:e9:05:e9:
67:c1:63:bb:e8:8c:27:0f:26:08:64:dd:f3:80:c3:93:34:45:
e4:04:e2:31:c7:2a:13:88:f5:87:a0:8d:ad:74:3d:9d:87:e4:
b8:01:e4:eb:5f:c4:70:65:f2:d0:ca:7d:33:7a:a0:d8:55:83:
99:05:68:20:00:a2:fb:28:34:ec:70:6d:f3:2a:da:2d:e6:de:
30:e3:d0:4a:b8:e5:a1:61:86:32:da:dc:7c:64:4a:3a:dc:ca:
5d:7a:33:fd:10:e0:6f:12:ee:1f:39:59:7b:37:18:0c:d7:d9:
40:47:2f:3c:7b:b5:16:4a:bf:5b:3a:c3:21:a3:69:7f:16:cf:
ea:60:ee:31:56:c4:35:ae:99:6b:f1:60:45:ac:35:a8:99:dd:
b7:48:70:a3:db:2e:6c:1b:17:8b:0d:3a:b2:84:1c:b5:75:73:
d3:e9:83:2c:f9:36:e9:31:44:b9:aa:94:c0:78:f9:d3:17:28:
02:2a:fe:ca:b7:37:3b:0a:53:be:25:e9:7b:c5:bd:cf:b4:91:
7b:66:5a:03:bb:28:38:f9:91:d6:7b:a9:4b:93:99:a0:b5:fa:
a3:23:5e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:51 2025 by rpki-client