
$ rpki-client -vvf rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
File: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft (raw, json)
Hash identifier: L07DFwiglJ5E9PiQ4loKKt+2jmXyeJp0PlvckaoYL7U=
Subject key identifier: F9:26:6C:96:8B:19:01:14:53:1D:CC:23:29:3A:C5:9C:82:78:15:C2
Authority key identifier: 4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Certificate issuer: /CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Certificate serial: 41EC03E85FCEC6F785866BD8EAE7BB458D5BCB74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
Manifest number: 021D
Signing time: Wed 05 Nov 2025 16:50:09 +0000
Manifest this update: Wed 05 Nov 2025 16:45:09 +0000
Manifest next update: Fri 07 Nov 2025 08:34:09 +0000
Files and hashes: 1: 4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl (hash: mah31uuUkrdxD+Cj4Mrz+uu7vyGHR6WZuyuW+4grdiM=)
2: 323830343a386635383a3a2f33322d3334203d3e20323733343835.roa (hash: sWCWC2blugwDA5GjLHplzoTjJrDf4ml2mn5K8bTAaT8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 20:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ec:03:e8:5f:ce:c6:f7:85:86:6b:d8:ea:e7:bb:45:8d:5b:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
Validity
Not Before: Nov 5 16:45:09 2025 GMT
Not After : Nov 7 08:34:09 2025 GMT
Subject: CN=F9266C968B190114531DCC23293AC59C827815C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:68:9d:78:68:0c:e4:81:7d:f0:62:4d:9a:
20:0a:5a:cc:e5:9c:60:4d:75:98:50:91:66:f2:8f:
56:72:4d:f8:9c:7d:c6:06:49:38:f5:af:9a:b6:3f:
ca:70:43:6c:20:30:be:ee:88:53:51:9a:d8:3c:d1:
45:3b:8e:3b:82:7a:d1:dc:7e:cb:c7:19:67:2b:a4:
0c:85:60:05:1a:c1:0b:f4:08:14:88:d7:71:d5:83:
f9:52:a1:86:0a:6a:e9:de:55:a2:35:af:11:e8:f2:
91:4e:51:40:14:57:6c:79:0d:c8:b4:94:8e:a3:62:
6b:af:49:a8:55:9a:3a:e0:ec:10:5b:58:2e:f0:bc:
22:53:71:b5:f0:f9:17:6c:f6:1c:82:70:41:9d:f4:
42:ce:52:13:26:44:10:c6:23:6f:07:5d:2c:76:7f:
35:71:1d:df:c8:a5:96:37:5c:47:12:39:fc:a7:5f:
2f:f9:4e:0d:57:67:84:ba:d6:2c:66:38:b0:1f:29:
44:08:4b:90:32:c6:14:e0:13:50:c6:ce:f6:e6:72:
2f:cf:c8:ab:a2:21:b3:4b:66:05:6b:95:43:25:9b:
d5:01:c6:29:97:00:70:62:30:aa:68:d3:75:9f:a9:
c9:42:44:33:6b:41:5a:b7:08:11:89:af:44:19:07:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:6C:96:8B:19:01:14:53:1D:CC:23:29:3A:C5:9C:82:78:15:C2
X509v3 Authority Key Identifier:
keyid:4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:80:7c:94:84:bf:e4:cb:54:a8:7e:15:bf:3e:f9:6b:af:
07:59:8b:f0:ec:61:a5:1e:c2:de:6a:5f:aa:9c:d8:2c:eb:89:
85:47:9d:8a:ee:fa:6f:6d:bd:e4:b9:78:24:4d:f8:e1:5d:5b:
84:29:55:5e:44:7b:40:55:85:f6:f8:be:d4:ef:f3:9b:54:07:
59:44:92:d5:44:c0:45:5c:df:83:09:cb:a3:bd:d5:c6:36:90:
5e:6f:6b:27:67:40:07:fb:eb:11:4f:58:84:8b:1b:04:50:21:
eb:c0:bf:79:d8:59:5f:5b:d3:eb:dd:bf:23:4f:43:28:eb:cc:
27:f4:69:d4:96:ea:7a:69:83:4f:2e:ba:18:f9:a5:72:43:10:
88:63:ed:08:73:38:54:36:b2:53:8e:2a:79:64:4b:20:30:78:
bf:76:24:4b:9c:1b:92:c0:58:52:0c:14:cc:09:41:ef:9b:35:
69:17:44:59:89:f2:9e:d1:f0:6f:d3:e3:df:5b:b7:42:e5:ef:
7e:b7:9d:0d:0c:a3:99:ce:38:e0:9f:e7:46:bd:e9:dd:8c:da:
f2:d4:40:54:2b:15:7c:70:4f:a1:82:15:d7:34:39:05:1e:08:
51:46:23:28:50:91:d5:e5:d8:70:71:c7:25:8b:40:7d:35:ff:
26:14:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:51:19 2025 by rpki-client