
$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft
File: CAAC943455AAA15F91CE50FF2493F762682C2729.mft (raw, json)
Hash identifier: BRh0w+lg2vNMiNzPGYFclTlSKwQJigmW0kXlNvlU+Dw=
Subject key identifier: 92:89:F2:F0:DD:1C:00:17:1E:1B:A2:78:BA:9D:41:6C:C9:47:4F:D5
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial: 0FE5781D25A7A5B24E5B190D78D4F3DD6739FAC7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft
Manifest number: 030B
Signing time: Tue 04 Nov 2025 17:00:59 +0000
Manifest this update: Tue 04 Nov 2025 16:55:59 +0000
Manifest next update: Wed 05 Nov 2025 20:46:59 +0000
Files and hashes: 1: 3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa (hash: qrrQQPAmrbXv0WBE9xtoHoKBeLqUXodpmZjSti9EBaI=)
2: CAAC943455AAA15F91CE50FF2493F762682C2729.crl (hash: r5i4IarUjjqmj4PmDk3n/WKGSAm9TfdVrxnZzDQsy4k=)
3: 3137372e35322e34302e302f32322d3234203d3e20323632343337.roa (hash: E3nbOYHXA5sCh8uuqp16XW2886aMw7JwoLjFWeA2Urc=)
4: 3137302e38322e382e302f32322d3234203d3e20323632343337.roa (hash: JnXqPH2nriNBGIqM4gPPtYFvnJ7m1OEcCyNN4SMeflI=)
5: 323830343a3437633a3a2f33322d3438203d3e20323632343337.roa (hash: n6sYyIPIBbvhPsqtdp3i8l0Ppf9FFwjJIF3DL+P8GlE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e5:78:1d:25:a7:a5:b2:4e:5b:19:0d:78:d4:f3:dd:67:39:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Validity
Not Before: Nov 4 16:55:59 2025 GMT
Not After : Nov 5 20:46:59 2025 GMT
Subject: CN=9289F2F0DD1C00171E1BA278BA9D416CC9474FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:5e:44:cb:2b:d9:b1:ea:a1:7b:7c:31:37:
5e:f1:95:9e:43:5c:54:76:e4:0c:a0:8c:36:7c:f1:
22:57:53:22:22:c2:2e:72:e7:1d:c5:fe:5e:26:76:
0b:c5:30:31:e1:04:3a:fd:56:10:3b:c8:2b:dd:46:
64:ce:fc:ad:a0:22:3b:73:70:3a:09:6d:03:60:db:
60:96:e8:67:2e:49:2e:50:38:4b:da:bb:c1:72:4c:
e9:1c:2a:22:fc:45:74:6b:6b:70:7f:81:1a:e9:16:
ce:71:90:c1:ea:36:28:4d:4c:7f:b8:e0:40:31:a7:
81:b1:63:f9:7e:fc:ee:16:2e:d1:77:b1:95:97:29:
16:b5:d1:17:aa:3d:0e:d5:4c:f6:ab:76:45:d3:76:
2d:af:55:01:8e:bc:c9:3e:5e:44:ee:5f:0b:80:bd:
ac:94:b3:e9:5a:fe:88:4f:7d:c9:bd:db:bd:5a:28:
3a:08:34:45:6a:44:fa:f9:42:ce:e1:bf:f8:f1:c0:
1d:2e:6c:e9:c2:f0:ef:51:3d:8f:70:13:8e:4b:5b:
e1:46:8c:5f:ec:a6:a0:c5:80:95:cf:4d:ef:ab:6b:
28:76:01:0f:1b:4f:03:15:51:55:e7:a1:71:95:1a:
a6:0d:4c:65:c8:bb:f3:b5:74:52:8c:60:df:4c:fe:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:F2:F0:DD:1C:00:17:1E:1B:A2:78:BA:9D:41:6C:C9:47:4F:D5
X509v3 Authority Key Identifier:
keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:36:fd:f8:14:91:6d:d9:7d:14:36:10:2a:d9:0d:75:39:65:
66:34:11:ab:b0:7e:93:03:d0:07:c8:d7:28:45:74:96:03:12:
5e:c7:bc:d4:36:00:e9:d6:87:c3:c8:de:1c:80:83:33:2c:8b:
87:6d:d0:69:d7:e6:b3:2a:d2:34:50:59:5a:5f:47:44:dd:61:
d8:48:b2:bb:42:53:59:20:96:e7:80:71:0d:41:74:95:5f:8e:
b4:e1:0d:25:17:41:0a:25:0f:94:ec:6b:e2:6b:f9:34:9c:32:
91:45:9c:1b:5b:d9:6b:63:2d:aa:e3:46:b6:92:0e:e2:dd:f3:
8f:58:9b:8a:7e:ed:df:69:00:9d:fc:d4:67:d1:5d:90:9b:25:
8f:19:ec:01:ae:8a:cc:c5:b0:49:8c:4a:87:99:ef:16:e8:2a:
b0:a2:6e:f4:5c:e7:c1:bb:c6:52:75:47:c0:93:fc:56:dd:c6:
86:1c:fc:d4:6b:32:4f:88:0e:0f:f3:f0:69:e7:f4:1b:b5:d6:
9c:a6:76:b4:05:45:f0:f3:c8:bd:df:9b:3a:2b:aa:57:a1:b7:
73:fb:d6:26:61:6b:f2:58:0f:dd:43:61:ec:47:d4:09:69:42:
51:9b:0d:52:d3:fb:17:9c:f3:08:7e:06:ac:38:73:b7:7c:fb:
5e:d2:eb:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD+V4HSWnpbJOWxkNeNTz3Wc5+scwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBQzk0MzQ1NUFBQTE1RjkxQ0U1MEZGMjQ5M0Y3NjI2
ODJDMjcyOTAeFw0yNTExMDQxNjU1NTlaFw0yNTExMDUyMDQ2NTlaMDMxMTAvBgNV
BAMTKDkyODlGMkYwREQxQzAwMTcxRTFCQTI3OEJBOUQ0MTZDQzk0NzRGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZol5EyyvZseqhe3wxN17xlZ5D
XFR25AygjDZ88SJXUyIiwi5y5x3F/l4mdgvFMDHhBDr9VhA7yCvdRmTO/K2gIjtz
cDoJbQNg22CW6GcuSS5QOEvau8FyTOkcKiL8RXRra3B/gRrpFs5xkMHqNihNTH+4
4EAxp4GxY/l+/O4WLtF3sZWXKRa10ReqPQ7VTPardkXTdi2vVQGOvMk+XkTuXwuA
vayUs+la/ohPfcm9271aKDoINEVqRPr5Qs7hv/jxwB0ubOnC8O9RPY9wE45LW+FG
jF/spqDFgJXPTe+rayh2AQ8bTwMVUVXnoXGVGqYNTGXIu/O1dFKMYN9M/uPTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkony8N0cABceG6J4up1BbMlHT9UwHwYDVR0j
BBgwFoAUyqyUNFWqoV+RzlD/JJP3YmgsJykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1
NUwvMC9DQUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUM5NDM0NTVBQUExNUY5
MUNFNTBGRjI0OTNGNzYyNjgyQzI3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC9D
QUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjTb9+BSRbdl9FDYQKtkNdTllZjQRq7B+kwPQB8jXKEV0lgMSXse81DYA6daH
w8jeHICDMyyLh23QadfmsyrSNFBZWl9HRN1h2Eiyu0JTWSCW54BxDUF0lV+OtOEN
JRdBCiUPlOxr4mv5NJwykUWcG1vZa2MtquNGtpIO4t3zj1ibin7t32kAnfzUZ9Fd
kJsljxnsAa6KzMWwSYxKh5nvFugqsKJu9FznwbvGUnVHwJP8Vt3Ghhz81GsyT4gO
D/Pwaef0G7XWnKZ2tAVF8PPIvd+bOiuqV6G3c/vWJmFr8lgP3UNh7EfUCWlCUZsN
UtP7F5zzCH4GrDhzt3z7XtLr/A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:07 2025 by rpki-client