
$ rpki-client -vvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
File: 0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft (raw, json)
Hash identifier: Skxm+AGQAtkhHungvInRRv10WQ8VEjO4CYytVE4NZI0=
Subject key identifier: D1:D4:02:5B:5B:A8:A1:DE:2D:4C:AF:DF:FA:0A:0E:7A:CB:70:C1:96
Authority key identifier: 0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
Certificate issuer: /CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Certificate serial: 34B48506735347D6E7ECB148423E6B6258AF72BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
Manifest number: 0278
Signing time: Wed 05 Nov 2025 08:17:39 +0000
Manifest this update: Wed 05 Nov 2025 08:12:39 +0000
Manifest next update: Thu 06 Nov 2025 12:11:39 +0000
Files and hashes: 1: 323830343a313839343a3a2f33322d313238203d3e203631393431.roa (hash: VmgBjkOJIbq0flG2n9FaZFQz/l5n2AqoV+CEF2ys42I=)
2: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: EoFW/iEX7EzH105TVdicQ7fapNw1Ahv9PHuyFSk5fY8=)
3: 0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl (hash: Dt+RQ/GjAqhiyrVY/iXtnoSJcsmxUDXjbHXokWD8DhM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl
rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b4:85:06:73:53:47:d6:e7:ec:b1:48:42:3e:6b:62:58:af:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FA221552193846F5AD22D6A3DABDDD6D48FB676
Validity
Not Before: Nov 5 08:12:39 2025 GMT
Not After : Nov 6 12:11:39 2025 GMT
Subject: CN=D1D4025B5BA8A1DE2D4CAFDFFA0A0E7ACB70C196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:72:91:8f:65:79:ff:1f:dd:40:74:a1:83:
88:f5:6f:36:ba:fb:a3:5a:21:84:6d:ad:44:26:6e:
57:c0:0c:5b:bf:1e:21:9e:fc:46:6e:a5:69:4c:f8:
e0:c3:b7:de:18:a8:38:44:26:e7:a7:eb:ec:a0:09:
bb:0a:0e:da:af:c8:eb:8b:74:a1:e1:4c:74:33:d7:
d2:02:4a:66:df:68:5e:d6:92:a5:ad:84:e5:88:f3:
1a:20:ab:e0:bd:75:15:55:8d:d7:dc:67:d5:48:46:
f4:35:04:73:f8:8d:62:50:24:b3:1b:e5:6b:4b:95:
97:0f:6b:4b:be:ff:c7:7f:57:4e:6b:1e:17:d1:46:
da:94:f8:87:9d:ac:f4:1d:8e:89:05:bc:a2:b2:1d:
55:5e:be:82:51:2b:e2:37:59:90:9c:fb:4a:47:4c:
1d:58:61:4f:24:b3:0d:49:a4:b3:55:bd:38:df:0c:
53:fb:19:00:0f:66:2c:7e:2b:7b:a5:6f:f1:46:b5:
17:e8:72:16:90:de:75:21:dc:37:5d:32:ac:c8:aa:
e6:30:28:25:6f:fc:f1:a4:10:f5:aa:f3:3c:b5:b3:
42:7c:59:46:3e:93:9c:ac:d8:75:ae:71:7c:34:00:
2f:62:93:8f:57:b6:8d:b3:85:cb:5d:ca:ca:1d:25:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:02:5B:5B:A8:A1:DE:2D:4C:AF:DF:FA:0A:0E:7A:CB:70:C1:96
X509v3 Authority Key Identifier:
keyid:0F:A2:21:55:21:93:84:6F:5A:D2:2D:6A:3D:AB:DD:D6:D4:8F:B6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FA221552193846F5AD22D6A3DABDDD6D48FB676.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/0/0FA221552193846F5AD22D6A3DABDDD6D48FB676.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b2:ef:41:0c:bd:dd:a0:af:a8:c4:2a:27:a2:b1:b4:ab:e5:
60:d2:8e:54:e6:74:39:a4:bd:52:3e:89:a2:66:4c:5e:a2:2e:
fb:7a:6d:98:15:59:62:06:9f:98:be:96:e0:71:8d:25:f3:73:
aa:0a:de:b0:c3:4a:da:29:a5:22:66:f3:d6:41:f9:26:e2:ac:
f1:df:5f:97:62:2c:62:c1:10:e0:5b:f2:04:51:5e:0c:22:fd:
36:5b:37:bd:4f:5f:fb:6e:a2:45:2d:d4:1e:94:f8:7a:39:ca:
e3:43:4e:71:03:c7:5a:26:03:1e:7c:de:0a:ef:c8:b0:ab:3c:
80:64:70:8c:cf:02:60:f0:dc:ff:5c:fd:e7:c2:13:0c:d2:36:
45:af:96:ca:59:a7:4e:ca:a6:4f:03:54:f1:3c:d2:9a:ea:60:
c5:a6:30:67:36:7f:61:45:48:22:5f:78:05:fc:29:a8:0d:38:
c1:8c:23:1f:b5:76:99:57:17:a4:84:56:3c:c7:5c:29:3c:db:
01:44:c5:82:de:86:ca:12:3b:ed:5c:f5:d6:99:6b:f1:61:2f:
4f:8a:44:3f:d3:d3:13:df:89:11:1e:60:5c:0a:ed:c2:72:62:
90:d2:9b:f2:bb:02:5c:50:54:80:ff:74:5e:ee:d9:62:3a:36:
17:14:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:42 2025 by rpki-client