
$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
File: CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft (raw, json)
Hash identifier: ZQbNCKD+Ya6fHcYLPa02UzEIEQLsp9WqX0pybC3CmK8=
Subject key identifier: 84:A9:8C:1A:6E:66:D9:E5:5E:9D:88:85:04:25:7C:5E:75:E5:6E:B4
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Certificate issuer: /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial: 0E4E222A32926C6FF8DE563AC04CD8EE8372474D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
Manifest number: 0302
Signing time: Wed 05 Nov 2025 06:20:57 +0000
Manifest this update: Wed 05 Nov 2025 06:15:57 +0000
Manifest next update: Thu 06 Nov 2025 07:24:57 +0000
Files and hashes: 1: 3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa (hash: P/n89x21ESG2SVevPApPz1Oye1wBCsgBzkkYYHUhqYI=)
2: 3137372e3135352e37362e302f32332d3234203d3e20323637333031.roa (hash: KIF5oG3Z3NCioqKOwvgn4mjxz5NvQLFRUDD7BbdLqLo=)
3: 3137372e3133372e3235322e302f32322d3234203d3e20323637333031.roa (hash: gCSgqMq5ydl+vbqBK1IW6bgeBhUUBf1Fyj2/DnjPsUA=)
4: 34352e3233322e32342e302f32322d3234203d3e20323637333031.roa (hash: JPT/kGrSGW9f5qAidh8PyParHuFO5VJ1GZWpxbV+mR0=)
5: 323830343a346235633a3a2f33322d3430203d3e20323637333031.roa (hash: lvEHl8lSuiWRMFdcjvzRJ8ZMNsCOLRVyi5xUxgioKQg=)
6: CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl (hash: qYlo362ECyn0d7+YI18e+/i6YZZFnRuLapO3xqfuiyM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 07:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4e:22:2a:32:92:6c:6f:f8:de:56:3a:c0:4c:d8:ee:83:72:47:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Validity
Not Before: Nov 5 06:15:57 2025 GMT
Not After : Nov 6 07:24:57 2025 GMT
Subject: CN=84A98C1A6E66D9E55E9D888504257C5E75E56EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:59:71:97:94:88:97:42:de:72:b2:c4:1f:
a5:59:46:ed:82:7c:af:7e:1f:e9:9f:18:18:22:33:
1b:b8:87:1c:3b:ec:d7:66:83:c5:7c:ba:0c:4e:00:
08:8f:9c:87:a3:e6:7e:5e:98:2e:90:15:a5:dc:d4:
3d:0b:2d:63:f4:29:af:f4:a9:5b:da:0b:bf:5f:bd:
a8:3b:ce:7c:f5:70:3c:8b:7d:2e:84:59:52:8f:3c:
7d:76:e1:50:85:67:ca:8f:21:78:44:9c:0f:e6:a1:
e2:ad:78:1d:07:5a:c7:55:e0:f8:81:eb:2e:25:5f:
c0:aa:69:62:42:d8:e7:98:bb:47:5b:0d:8a:98:cc:
e7:95:d5:fa:7f:5b:4c:76:08:52:3d:06:91:34:6c:
d4:fe:23:21:b6:59:f4:40:1b:5e:40:da:da:0d:2c:
07:ab:76:c5:01:d1:30:fa:20:e3:c7:4a:07:27:97:
cf:a8:2a:2d:cb:18:85:17:6f:06:d1:9c:8a:50:de:
44:bb:6d:2d:91:c4:50:79:a1:8a:0d:de:df:f4:40:
96:5d:0d:ba:66:a4:64:d2:8b:39:04:96:a2:8e:ff:
21:5f:71:dc:04:a3:e5:6d:d5:e0:b3:99:57:1b:fb:
ab:ed:b8:13:31:02:56:2b:5d:80:a3:c0:ed:31:42:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:8C:1A:6E:66:D9:E5:5E:9D:88:85:04:25:7C:5E:75:E5:6E:B4
X509v3 Authority Key Identifier:
keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:66:cc:d4:56:ef:6a:81:b9:0f:5b:7c:01:9a:35:7b:97:
76:81:5a:ef:50:ba:00:a9:ab:14:ae:bf:54:27:d8:56:07:38:
bf:4c:43:9b:1d:78:cd:6c:e5:41:72:a2:e0:1b:e2:15:e0:bb:
01:e0:0f:36:ff:ab:99:24:ca:e5:06:8e:3d:d7:1d:a8:a9:51:
91:45:10:c2:56:92:85:d8:01:5e:7a:35:bf:45:c5:99:0f:54:
ef:f9:32:41:77:4e:47:73:f5:bd:2c:e4:51:d1:32:1f:f4:5d:
84:ba:98:37:0d:cf:24:c5:c9:e0:a7:74:d4:f5:39:e6:0f:19:
fe:8b:93:d0:26:bc:b1:30:24:0d:11:47:d2:43:b5:71:a8:da:
fc:aa:b6:40:93:40:8f:4e:1a:e0:b1:4a:64:4e:a8:81:71:f2:
8f:dc:78:74:85:f7:0c:fe:a8:f9:0d:86:19:88:ae:b0:55:4f:
23:fd:d9:57:b7:2e:4e:1a:12:f1:59:17:4b:a8:3c:2a:73:68:
40:f8:f4:7e:10:4c:1d:34:38:cf:4a:be:6c:bf:a2:a0:59:89:
55:78:e7:e7:4f:30:d3:2b:26:9a:d5:d8:22:bf:e7:2f:f3:75:
70:0b:4a:28:ac:bb:49:e1:bd:72:3c:b8:a4:c3:f4:3c:f3:23:
c2:5b:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:39 2025 by rpki-client