
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
File: 296C1957CA1EAD9BA9385FA528C36D900C425F48.mft (raw, json)
Hash identifier: wOKvxvFy6D8Ac8wKEFCvogBh23Y6Vch0tMoWRZGb5HU=
Subject key identifier: DD:C6:52:8F:EB:FA:85:DB:E7:4C:75:FC:6A:79:A4:B8:26:2D:5D:B9
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Certificate issuer: /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial: 3A88BDF4FD43F9F29718880DC01AAA4D99EE9677
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
Manifest number: 0115
Signing time: Wed 05 Nov 2025 04:29:10 +0000
Manifest this update: Wed 05 Nov 2025 04:24:10 +0000
Manifest next update: Thu 06 Nov 2025 06:56:10 +0000
Files and hashes: 1: 3138312e3232342e32352e302f32342d3234203d3e20323730353634.roa (hash: VrPL3TxiedADmI5FEdoZcrKGF4HcT0E4E0g6y1Z2Iok=)
2: 3137392e302e3137392e302f32342d3234203d3e20323730353634.roa (hash: z4tvoIY0Hh/hHU4Z4MuC98VYirdLEAUQGN2zlQtkOg8=)
3: 3138312e3232342e32342e302f32342d3234203d3e20323730353634.roa (hash: gi2TJpuh+msqZ1T3Ji3xFnrT9Cu+4du04Mo60K4LNqM=)
4: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (hash: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=)
5: 3137392e302e3137382e302f32342d3234203d3e20323730353634.roa (hash: W2be6dT5MbMfVP2psCvKFpY6oT+Pg4EtwumJbKoJYEM=)
6: 323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (hash: 5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=)
7: 3138312e3232342e32372e302f32342d3234203d3e20323730353634.roa (hash: K6v+BNgmcrA2NGGI4YpvsgF2J/sl4soIFWLeroEeeBQ=)
8: 32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (hash: /vDLq0zmn0A8Fu43Fs1L85absc3v5lAacCAsUIfqGgU=)
9: 3137392e302e3137372e302f32342d3234203d3e20323730353634.roa (hash: HookaH1xG+0uVNOahIxghiyPvCC1vruoOgkrrWcOjcQ=)
10: 3138312e3232342e32362e302f32342d3234203d3e20323730353634.roa (hash: xVEk1L81qX01xxW4IyS4YM+0De8Mti9s0l9YDGy2nP8=)
11: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (hash: s0+LY9NPez3OzzMtpOH0ZD9Jf83IGdXVOwgSYdJ/8Sw=)
12: 296C1957CA1EAD9BA9385FA528C36D900C425F48.crl (hash: dGy5aYBEb7S55iYY68nqC3fQxalMrW0iRBDJyJ/z/O8=)
13: 3137392e302e3137362e302f32342d3234203d3e20323730353634.roa (hash: NMbXwuMwhtT0ATTZ8U3lu3ihN4eGbajLgaaN0aFWB30=)
14: 32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (hash: j1m1dEZ5q1dJyi4OWRJR5pm8KOyuDxV2ubfApptV/NU=)
15: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (hash: JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:88:bd:f4:fd:43:f9:f2:97:18:88:0d:c0:1a:aa:4d:99:ee:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Validity
Not Before: Nov 5 04:24:10 2025 GMT
Not After : Nov 6 06:56:10 2025 GMT
Subject: CN=DDC6528FEBFA85DBE74C75FC6A79A4B8262D5DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:c5:c0:ff:c5:dd:a8:c8:a1:da:18:29:d2:
fa:0b:0b:f1:e3:ed:1a:e9:63:ff:17:06:cc:c1:28:
a8:3d:7b:91:18:06:3c:e8:46:f5:54:a3:48:11:6d:
2a:71:7d:87:da:19:4d:b3:f9:1f:a2:f6:8b:0e:e7:
8e:d3:44:9c:cc:ba:ad:bd:76:56:3b:3d:08:87:7c:
c3:29:9a:4e:70:10:06:f3:8d:fb:ed:10:01:47:33:
12:0a:4d:01:b9:02:69:49:0a:b5:e5:2e:ac:d2:4b:
d8:87:72:2a:5d:67:54:db:b4:0f:02:6d:c9:fe:de:
a7:cb:77:50:e4:57:71:e3:da:d9:fa:da:79:58:94:
b8:4a:78:93:e5:7e:b5:22:72:e6:7c:be:a4:8b:69:
5c:6f:0e:fc:53:b5:82:12:e5:a0:5d:1a:17:dc:6d:
5e:d9:7b:4e:2e:b1:5c:c2:09:c8:81:2d:f0:0c:9a:
c5:d6:23:72:48:0f:ed:60:15:bf:f6:3c:f5:a5:5a:
86:79:75:bd:7f:df:df:c5:2a:b7:c3:58:4d:41:e9:
ff:52:17:e0:50:72:39:3b:87:5f:db:35:07:69:75:
66:d8:3f:bb:5c:35:fc:ce:f8:f7:d7:45:73:d6:66:
ac:4d:f4:2e:58:65:d6:27:4a:28:b5:40:ed:67:12:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:52:8F:EB:FA:85:DB:E7:4C:75:FC:6A:79:A4:B8:26:2D:5D:B9
X509v3 Authority Key Identifier:
keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:14:ad:ac:ac:11:b2:87:4c:41:65:77:3f:fb:2f:3b:b2:74:
9b:2b:bb:89:2a:e0:f8:24:0d:94:1d:4b:84:9a:0a:41:81:63:
e5:c4:10:72:b8:ed:3d:bd:33:37:d6:9a:41:a9:be:f3:16:dc:
0b:ef:a8:90:77:07:d6:97:e2:43:0e:26:4e:2f:8d:a7:a9:2c:
cf:ef:9c:18:00:62:46:f4:b0:af:84:cc:78:15:b9:47:8c:ff:
11:cf:bb:1d:bf:e2:45:a1:8e:9f:46:33:77:2d:a2:7c:b1:09:
7b:ee:e5:81:e1:ac:76:67:de:04:56:ec:cb:23:09:e3:b2:3b:
95:17:1c:b1:7a:89:a7:3a:6b:b0:92:00:0d:f2:e4:58:59:67:
9e:d4:20:9f:f5:99:4c:99:95:7b:11:e6:18:10:be:a0:64:59:
15:78:61:d8:df:91:3d:be:67:dc:7b:43:95:de:49:82:93:72:
cf:23:af:8e:18:be:85:7c:e4:84:c7:85:a1:a7:25:bc:52:38:
68:0e:2c:27:f4:6b:9e:b7:8f:3d:f9:ce:3d:df:50:18:26:26:
e9:ba:c2:93:f7:d9:f6:11:49:4e:e4:fd:83:ec:66:39:91:9b:
cb:31:7b:dd:10:27:63:26:72:43:d1:f4:06:2c:08:ef:1d:20:
79:aa:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:14 2025 by rpki-client