
$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
File: 682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft (raw, json)
Hash identifier: e5eCRRdoQM9iSYm/2s6HlQhdhPmQAvIEJQMOWfhbulA=
Subject key identifier: AA:46:CE:1F:66:06:76:C8:DC:FC:65:76:1F:95:FB:54:CB:A8:09:2B
Authority key identifier: 68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
Certificate issuer: /CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Certificate serial: 11A760E40F0C5B81A5AC74DF3D4BE129BE0F2AC3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
Manifest number: 45
Signing time: Tue 04 Nov 2025 20:06:45 +0000
Manifest this update: Tue 04 Nov 2025 20:01:45 +0000
Manifest next update: Wed 05 Nov 2025 22:08:45 +0000
Files and hashes: 1: 34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (hash: PcSa1+6yDncpT/u+KksZP/rtvW86OdA00qI8FyD7PRU=)
2: 34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (hash: y/X9o5vIJn4KUTUrJhshDVklQMZk7ZRt7/ms4iIX8eQ=)
3: 323830343a356164633a3a2f33322d3332203d3e20323638383031.roa (hash: UuHh+gNtc+8lDWC/1l2ak+aLdz1059XQhtUTbhbizEc=)
4: 682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl (hash: 6IsjoR4V7KEt9wHu0QQV0TX3WNilgP7ApQUQwKaeSYI=)
5: 34352e3137332e37362e302f32342d3234203d3e20323638383031.roa (hash: KHZld2qFHMoL9CWwZszOmGwZWtFSonmkqWhUfRRAwO0=)
6: 34352e3137332e37372e302f32342d3234203d3e20323638383031.roa (hash: 7a67o+mENDIFROYW8r9W/RCasVJt/3+Bg4imlJqdii8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:a7:60:e4:0f:0c:5b:81:a5:ac:74:df:3d:4b:e1:29:be:0f:2a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682E4AE0042DFE5B96100F0B1864EF7625B1923A
Validity
Not Before: Nov 4 20:01:45 2025 GMT
Not After : Nov 5 22:08:45 2025 GMT
Subject: CN=AA46CE1F660676C8DCFC65761F95FB54CBA8092B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:1e:2d:b9:44:7e:f3:d0:05:ff:2a:ee:07:
9e:36:d1:c9:e6:30:dd:76:24:79:3d:b3:76:6e:61:
3c:53:a1:1e:1a:1f:30:2a:a8:ac:3c:37:c2:9e:18:
d3:82:c0:33:8b:3f:ed:73:13:a5:99:b2:fc:f9:5e:
7f:00:14:9b:f2:62:bf:68:ba:a1:ec:8c:d0:00:23:
dd:39:8d:09:06:04:f2:25:ae:3b:ef:10:6b:2e:63:
43:4a:d0:26:13:c0:a1:e2:56:bb:30:2f:3d:03:d2:
d5:69:6e:d5:c9:d6:5e:27:2b:57:90:09:1c:86:c2:
5f:1c:3f:c2:f6:19:0a:e2:2a:d2:37:8c:98:b4:e1:
23:fd:24:a0:f9:36:cf:20:3f:b2:e1:c3:72:6b:3f:
f0:8d:82:46:c0:63:a0:7e:65:e7:c1:66:ab:ac:63:
d4:38:a6:96:2e:07:22:ad:86:a1:f7:b0:9b:37:66:
fb:7f:8c:35:bc:19:e5:6c:5a:6d:90:a2:7e:87:76:
87:8a:28:bc:7e:74:ff:de:ba:45:bd:fe:7d:4a:b8:
06:22:53:30:23:d7:36:e8:71:45:75:26:9c:b5:8b:
14:f6:2a:48:aa:18:77:69:42:e6:f8:0a:f4:47:0a:
1a:85:c3:44:90:a9:a3:e4:be:60:cd:3d:62:06:7c:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:CE:1F:66:06:76:C8:DC:FC:65:76:1F:95:FB:54:CB:A8:09:2B
X509v3 Authority Key Identifier:
keyid:68:2E:4A:E0:04:2D:FE:5B:96:10:0F:0B:18:64:EF:76:25:B1:92:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/682E4AE0042DFE5B96100F0B1864EF7625B1923A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/682E4AE0042DFE5B96100F0B1864EF7625B1923A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2d:26:62:82:35:5f:5e:53:b9:86:d0:34:e5:f9:aa:32:92:
28:19:fc:d2:45:70:b0:80:5e:d0:df:3a:d3:52:62:7e:2e:f9:
e5:c4:13:7f:0d:23:eb:8b:82:62:ef:dd:2e:96:b4:cf:28:54:
34:88:d8:94:d1:b6:70:54:58:05:af:0a:62:56:cb:34:83:90:
7a:42:32:4f:8e:65:10:6a:5d:e7:ce:7a:ad:09:06:3b:d0:51:
b2:46:7b:91:60:c7:cc:ce:47:cc:48:4e:44:de:45:fd:c5:3f:
53:fb:6d:63:b2:e3:1a:c4:19:9c:ce:4f:71:fd:ce:1f:71:1f:
c4:1c:f1:03:df:4f:d0:65:c0:20:c1:b0:31:c1:96:35:74:f7:
a4:05:0d:d8:ab:e3:ca:1a:f0:2c:94:1a:ee:ea:c0:77:6f:59:
81:94:1f:5e:84:ee:b7:a5:90:30:4e:d5:49:0d:21:73:d0:6e:
26:91:fd:35:89:31:b9:32:db:65:4b:27:9f:69:82:63:ac:3d:
43:c4:45:61:a2:84:05:ae:e1:28:57:7c:7a:15:a6:5b:97:13:
43:96:18:23:62:f2:4d:ec:3a:32:af:c6:48:0f:30:16:90:e3:
bd:9c:16:36:25:ab:4f:9d:6e:ad:e1:a5:9d:b9:27:5c:9b:20:
cb:eb:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:16:07 2025 by rpki-client