
$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
File: 2601DE669734AEE0385101964D2ED4C0B8A927D4.mft (raw, json)
Hash identifier: THmKpBVHj3rWVXX1JbL5WNTZyKY0s1Nllgj3TrVOtps=
Subject key identifier: D8:05:13:F7:C8:0E:C0:37:2A:E1:7D:82:10:CA:0F:0B:FC:92:BC:98
Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
Certificate issuer: /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
Certificate serial: 12FF745B91361A19DD47881914A4489983D148A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
Manifest number: 0166
Signing time: Tue 04 Nov 2025 21:21:08 +0000
Manifest this update: Tue 04 Nov 2025 21:16:08 +0000
Manifest next update: Thu 06 Nov 2025 00:00:08 +0000
Files and hashes: 1: 323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (hash: pQviQjOONbuzn6pqxVPP7SoctO2grbtBArJUd8XQvF4=)
2: 2601DE669734AEE0385101964D2ED4C0B8A927D4.crl (hash: uGWrE3DnIaSxsCQbsKMAMfqy27osas2E4s8cRPOPmq8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl
rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ff:74:5b:91:36:1a:19:dd:47:88:19:14:a4:48:99:83:d1:48:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
Validity
Not Before: Nov 4 21:16:08 2025 GMT
Not After : Nov 6 00:00:08 2025 GMT
Subject: CN=D80513F7C80EC0372AE17D8210CA0F0BFC92BC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:6e:07:65:cb:b0:01:6a:40:60:8c:98:ed:
6a:ae:f4:f0:ba:e2:5c:3c:11:d6:3f:46:0d:ff:a6:
bb:5c:e8:fd:ad:da:71:2d:6d:11:cd:36:91:47:45:
37:07:89:c0:d9:f8:c7:de:b0:89:6c:10:84:b6:04:
c0:1a:55:d4:34:b3:4a:5f:ef:34:22:59:7c:1b:9c:
fc:97:1f:68:4d:b9:28:0a:69:4e:5f:80:02:b8:e2:
f3:cb:34:72:3d:90:b4:7d:ef:53:47:b6:ab:79:8e:
c5:60:d2:91:59:4c:c8:fb:e2:0f:dc:0c:4b:62:24:
ed:f9:6d:42:04:a1:9f:e0:28:b6:6a:68:38:f8:a3:
06:95:a6:81:eb:dd:83:04:c9:2b:7f:8d:9f:2c:23:
a8:45:7d:4b:4a:c0:92:d1:b0:b9:7b:1f:c1:a4:6c:
a7:a4:74:45:e2:e6:d0:b8:0a:c3:a1:79:5c:79:b5:
13:f8:ad:33:40:f3:8b:87:71:8f:59:39:53:33:2f:
3d:45:fc:aa:c3:39:e3:bd:3b:c6:9a:7e:2c:97:ab:
37:7b:60:e9:98:61:e9:1a:8f:ea:fc:48:3d:4e:81:
c4:7d:9f:4f:95:fe:eb:d3:cd:b5:4c:be:9f:f6:80:
49:f7:bc:2f:87:40:92:f7:1a:cf:96:96:d4:69:ef:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:13:F7:C8:0E:C0:37:2A:E1:7D:82:10:CA:0F:0B:FC:92:BC:98
X509v3 Authority Key Identifier:
keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:13:00:b0:b8:49:13:a8:cf:f7:39:da:5a:c0:66:c0:64:
bf:00:54:d8:80:ec:82:61:dc:c5:bd:14:c3:13:37:21:51:56:
64:ff:f7:34:0f:cc:ba:73:b1:f7:b3:f9:32:3e:e4:3e:c1:75:
38:bd:2a:67:7f:8a:51:c2:0d:06:0a:7c:6a:41:80:7e:a2:b9:
4c:44:df:94:ef:c9:d7:8a:24:f7:fd:cb:25:f3:66:2f:9b:be:
a6:23:77:4a:56:d0:6d:6c:e5:c1:47:88:d8:2b:f9:10:1e:48:
b3:0c:85:6c:d9:f4:ff:17:69:72:83:be:fb:2c:a6:de:eb:0f:
ab:23:ad:43:e9:f9:82:e3:9d:31:1f:5a:08:23:f7:74:5d:2b:
80:d2:be:04:da:29:74:ab:2a:d4:c8:8a:a6:14:71:03:bc:07:
de:f1:1b:aa:96:39:ee:43:6b:d9:58:8f:f8:5c:70:cb:58:1c:
92:8a:ac:dc:93:f4:7b:96:56:62:31:13:59:5c:3c:fa:90:37:
41:f7:bf:7d:61:5d:17:4a:6c:f1:42:68:d7:e0:41:3d:56:91:
7b:58:c4:e9:22:db:1f:f0:7a:2f:53:89:7f:16:29:04:cf:bd:
29:81:25:3f:b4:c8:74:80:a3:30:6f:7f:e6:c9:30:e5:37:04:
6f:7a:95:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEv90W5E2GhndR4gZFKRImYPRSKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwMURFNjY5NzM0QUVFMDM4NTEwMTk2NEQyRUQ0QzBC
OEE5MjdENDAeFw0yNTExMDQyMTE2MDhaFw0yNTExMDYwMDAwMDhaMDMxMTAvBgNV
BAMTKEQ4MDUxM0Y3QzgwRUMwMzcyQUUxN0Q4MjEwQ0EwRjBCRkM5MkJDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAs24HZcuwAWpAYIyY7Wqu9PC6
4lw8EdY/Rg3/prtc6P2t2nEtbRHNNpFHRTcHicDZ+MfesIlsEIS2BMAaVdQ0s0pf
7zQiWXwbnPyXH2hNuSgKaU5fgAK44vPLNHI9kLR971NHtqt5jsVg0pFZTMj74g/c
DEtiJO35bUIEoZ/gKLZqaDj4owaVpoHr3YMEySt/jZ8sI6hFfUtKwJLRsLl7H8Gk
bKekdEXi5tC4CsOheVx5tRP4rTNA84uHcY9ZOVMzLz1F/KrDOeO9O8aafiyXqzd7
YOmYYekaj+r8SD1OgcR9n0+V/uvTzbVMvp/2gEn3vC+HQJL3Gs+WltRp71oNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2AUT98gOwDcq4X2CEMoPC/ySvJgwHwYDVR0j
BBgwFoAUJgHeZpc0ruA4UQGWTS7UwLipJ9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlU
MXIvMC8yNjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2MDFERTY2OTczNEFFRTAz
ODUxMDE5NjREMkVENEMwQjhBOTI3RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlUMXIvMC8y
NjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeLwTALC4SROoz/c52lrAZsBkvwBU2IDsgmHcxb0UwxM3IVFWZP/3NA/MunOx
97P5Mj7kPsF1OL0qZ3+KUcINBgp8akGAfqK5TETflO/J14ok9/3LJfNmL5u+piN3
SlbQbWzlwUeI2Cv5EB5IswyFbNn0/xdpcoO++yym3usPqyOtQ+n5guOdMR9aCCP3
dF0rgNK+BNopdKsq1MiKphRxA7wH3vEbqpY57kNr2ViP+Fxwy1gckoqs3JP0e5ZW
YjETWVw8+pA3Qfe/fWFdF0ps8UJo1+BBPVaRe1jE6SLbH/B6L1OJfxYpBM+9KYEl
P7TIdICjMG9/5skw5TcEb3qVjw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:16:18 2025 by rpki-client