
$ rpki-client -vvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
File: D2986464325E8FD5DF10CBFA8DD303EF12449774.mft (raw, json)
Hash identifier: +GGB+gP3kqFA5QaCJquFLda4+tTmYlCPE8H4HOo4U7M=
Subject key identifier: 37:D5:29:78:D6:D0:60:66:0C:0F:72:19:7E:82:F8:D6:DB:34:B2:54
Authority key identifier: D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Certificate issuer: /CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Certificate serial: 0A2622363140D7216A27289A9E7F67CE92667F1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
Manifest number: 0309
Signing time: Wed 05 Nov 2025 16:23:45 +0000
Manifest this update: Wed 05 Nov 2025 16:18:45 +0000
Manifest next update: Thu 06 Nov 2025 18:07:45 +0000
Files and hashes: 1: 34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (hash: 9rfSn4F2icHY0qkDkAbvjL4I+Ay9NbaG0pVo2oS6Vuk=)
2: 323830343a343439343a3a2f33322d3438203d3e20323637363430.roa (hash: h4ltmqTQTgqgbL5osFBqlAp89sJTKhfTS18W1+8QvGw=)
3: D2986464325E8FD5DF10CBFA8DD303EF12449774.crl (hash: QiNLZglaZlR9jvPnlUE2svddC9m/Jbv4U6TrX5nnGok=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 18:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:26:22:36:31:40:d7:21:6a:27:28:9a:9e:7f:67:ce:92:66:7f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
Validity
Not Before: Nov 5 16:18:45 2025 GMT
Not After : Nov 6 18:07:45 2025 GMT
Subject: CN=37D52978D6D060660C0F72197E82F8D6DB34B254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:22:53:a1:bc:27:37:ce:e9:d9:cc:41:e9:
a4:82:62:08:0b:8b:73:42:5a:23:bd:c1:18:b2:49:
08:3a:6f:89:71:90:2f:1d:d0:11:d1:c0:08:13:cd:
78:19:ce:00:83:07:9b:e1:bd:22:71:71:a2:b8:13:
20:69:8d:37:a9:65:e6:27:57:89:52:e8:6f:3b:7f:
0a:ee:ff:1f:33:92:d3:93:5d:ae:8d:da:5f:e5:58:
26:91:fc:32:ac:0d:66:36:f8:ab:6e:64:21:8a:ca:
2f:57:11:7b:cb:62:b7:6e:31:96:44:b0:c9:01:e3:
1e:d9:bc:b9:1b:fd:b7:15:7c:1b:32:81:10:65:22:
76:0f:f2:a2:5f:5c:41:58:a7:dd:6c:4c:d3:ec:54:
bb:c3:dd:83:f1:c3:17:fd:d2:28:ad:f3:ab:6f:fa:
de:82:b2:a8:47:9b:9a:5e:60:a6:26:4b:be:2f:49:
78:ec:bd:82:99:83:20:3a:bc:b8:4a:6a:01:d0:bf:
52:bf:53:df:72:60:ab:fd:bc:52:3f:d6:97:bd:15:
bb:a7:ec:ee:00:62:40:8b:56:ec:c6:38:14:ef:db:
1a:dd:5a:2a:a9:79:6a:e3:56:58:8b:3b:a9:65:7b:
2c:ad:e9:46:45:b0:9e:73:01:68:fe:52:d3:3f:84:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D5:29:78:D6:D0:60:66:0C:0F:72:19:7E:82:F8:D6:DB:34:B2:54
X509v3 Authority Key Identifier:
keyid:D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:48:2d:c8:04:cc:95:c4:b1:e0:0c:8d:ea:37:d2:01:77:
68:aa:87:05:19:de:45:b9:ef:8c:20:f9:d9:57:f7:3e:d1:12:
88:ed:ed:9a:b1:60:78:14:82:2c:5e:96:9a:09:43:cd:5c:9e:
94:27:f9:8c:73:21:c3:c0:8f:54:dc:6c:26:68:82:04:b3:be:
36:1c:50:c2:80:fb:53:49:ee:48:66:e3:63:fb:90:44:62:9e:
bc:48:14:0a:e2:ab:04:d6:0d:df:31:85:a1:09:ff:49:b6:7d:
c9:d3:c7:1b:c3:2b:c4:a8:cd:60:36:33:a8:26:4f:aa:5c:9e:
e4:82:aa:42:67:57:7a:71:53:b6:a4:92:f6:e4:90:28:78:6d:
ea:74:af:56:87:7b:06:9d:78:f0:df:75:20:99:6c:21:53:f4:
9d:c6:3f:a0:1e:cc:32:30:b7:62:f9:fa:d4:b1:a2:e6:14:32:
8b:3d:5d:50:0f:b1:b7:25:3c:8d:23:f2:eb:98:2c:cd:49:af:
25:c8:79:08:eb:df:22:93:d8:8a:21:63:a3:25:41:4f:95:5e:
37:32:22:b0:a7:df:33:26:61:1e:b3:29:87:51:af:6b:0d:16:
63:bc:7b:37:24:db:be:79:82:f2:fa:c0:34:8f:83:cf:97:20:
f7:40:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:18 2025 by rpki-client