
$ rpki-client -vvf rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft
File: 8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft (raw, json)
Hash identifier: 6DekGy3PI5EXp0Ij/LTurnKclrgKtJ36iS0ABP5sZtQ=
Subject key identifier: 8A:0C:27:54:8E:98:11:81:1C:BE:15:14:15:D1:EE:72:8A:19:DD:CD
Authority key identifier: 8D:C5:70:3A:D0:32:4D:7A:37:7B:EF:20:81:9C:04:40:6F:A9:A8:1F
Certificate issuer: /CN=8DC5703AD0324D7A377BEF20819C04406FA9A81F
Certificate serial: 483D15006EFBDE718A32BFB7DA0B0BFB86ACAAA9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft
Manifest number: D8
Signing time: Tue 04 Nov 2025 21:25:15 +0000
Manifest this update: Tue 04 Nov 2025 21:20:15 +0000
Manifest next update: Wed 05 Nov 2025 22:48:15 +0000
Files and hashes: 1: 8DC5703AD0324D7A377BEF20819C04406FA9A81F.crl (hash: 5KKPrdOQhS/K6MTN6xw8ny9HlcX4SQk0yb2ZcsgPXHo=)
2: 323830343a383764383a3a2f33322d3333203d3e20323732373335.roa (hash: 0duWc6C36Y5WjHtRgB6dYok6/WWps+FWhLzYYTLcuMo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.crl
rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3d:15:00:6e:fb:de:71:8a:32:bf:b7:da:0b:0b:fb:86:ac:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DC5703AD0324D7A377BEF20819C04406FA9A81F
Validity
Not Before: Nov 4 21:20:15 2025 GMT
Not After : Nov 5 22:48:15 2025 GMT
Subject: CN=8A0C27548E9811811CBE151415D1EE728A19DDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:91:37:84:3a:39:d9:23:7f:57:83:89:14:
29:bd:b8:7a:85:12:82:19:bf:e7:17:43:98:81:99:
8b:59:c6:ab:2d:6a:3c:65:74:e1:8c:b9:43:0d:ee:
fd:c8:e9:24:12:ed:0e:09:29:77:33:82:a9:b3:f4:
21:03:f8:3e:c4:28:8a:6b:4e:46:c9:d4:64:4a:9b:
cc:7e:cd:e3:c2:9b:69:bd:81:3e:05:40:b6:23:bd:
11:3e:42:5d:f9:a0:6a:65:43:7b:4b:a3:f6:e7:35:
a3:bb:7e:c9:3f:58:0a:30:e4:29:a4:28:48:57:67:
00:17:c0:d2:54:4c:8e:ec:df:7b:f8:9c:2a:1f:34:
2d:4b:9f:c3:36:6d:3a:c4:ea:59:f6:35:3d:96:ab:
c0:6e:f8:e3:92:2d:69:b7:c3:0a:b2:4e:f8:10:e7:
65:9c:50:bc:31:24:f9:6e:47:09:5a:f4:72:34:00:
5d:2a:71:f6:e7:14:a0:27:c5:4a:5f:ba:ad:d1:71:
90:0b:5e:7f:42:b7:c0:c2:67:f7:f7:44:37:af:40:
79:63:e3:3e:e4:f5:85:8c:57:90:dd:2f:84:69:a9:
0c:68:1a:64:83:86:08:32:3d:da:7d:43:68:9d:77:
18:6a:35:48:69:4e:64:6b:15:3e:d1:0c:bd:63:ca:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0C:27:54:8E:98:11:81:1C:BE:15:14:15:D1:EE:72:8A:19:DD:CD
X509v3 Authority Key Identifier:
keyid:8D:C5:70:3A:D0:32:4D:7A:37:7B:EF:20:81:9C:04:40:6F:A9:A8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5703AD0324D7A377BEF20819C04406FA9A81F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vYbnxhumD7SfG7rez4FJDpTsHdSQZhbhcFfsecD1N5x/0/8DC5703AD0324D7A377BEF20819C04406FA9A81F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7d:c8:bd:37:1d:d2:25:c4:ad:28:d1:dc:a4:7b:0e:c1:66:
9c:65:64:d6:d9:1a:7a:90:5f:88:ff:e1:6b:b7:8d:40:a9:6a:
a7:c0:a0:e8:6a:5d:03:e6:8c:18:1e:3c:33:3c:56:d8:fb:0f:
53:5d:a1:8d:9b:2a:6c:7f:9a:23:14:bf:c9:15:0c:d9:d5:c7:
71:e3:59:ed:03:8c:4d:ee:6e:2d:f2:26:7e:f3:fa:47:40:a3:
eb:0f:9e:23:cc:e3:fd:a6:5a:10:c2:23:dd:ad:3a:20:3e:56:
13:46:78:42:de:4f:73:3a:22:c3:3e:cf:d7:a9:1e:4c:6c:b0:
9d:8f:61:bc:9f:0e:a7:bb:f8:18:e8:94:26:64:25:fa:76:ab:
7e:92:d3:1e:65:af:a0:f1:44:54:f6:73:f8:ff:9d:50:2b:3c:
62:ad:fa:2a:61:56:fc:0f:f7:c6:06:d7:76:18:e4:f2:5d:e6:
aa:13:59:a1:67:3d:82:42:a9:bf:1a:fd:71:4d:cc:d0:85:4b:
13:6b:c2:13:d2:6a:62:89:b4:05:1c:20:ec:27:fd:5c:e8:76:
14:32:aa:82:7c:90:c7:f7:38:5b:19:d6:72:f5:8c:89:bb:a4:
c6:df:23:0c:a7:37:45:65:a3:af:94:6c:a4:1d:ce:1b:e1:6a:
69:1b:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:00 2025 by rpki-client