
$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
File: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft (raw, json)
Hash identifier: Zovc5iB1FJCX9SV/Q0U4NZPzY8E0B+bxSIIOR/pjtmU=
Subject key identifier: 1C:9D:CC:6B:D9:3D:67:E6:39:96:30:57:62:78:46:BD:37:D5:0C:60
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Certificate issuer: /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial: 1331B4D907F119BA6EE4771578714094A54F7FC8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
Manifest number: 023F
Signing time: Tue 04 Nov 2025 04:58:36 +0000
Manifest this update: Tue 04 Nov 2025 04:53:36 +0000
Manifest next update: Wed 05 Nov 2025 08:20:36 +0000
Files and hashes: 1: 34352e3232372e3130302e302f32322d3234203d3e20323731303234.roa (hash: hAS2i1VbX4dRq2s74k6OVSbnzXxGnFNj+kSSmNb1v0Y=)
2: 323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (hash: kdiCLIBPgvx03r4z0/coVpN45suCV5e0imm5xVT80tc=)
3: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl (hash: DFnJtklJuGQ47Qo1PFAMsoFm6Tv0ydBUXU4ckgtqgLs=)
4: 34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa (hash: 5EjfMf4KxyWlNsMGlJvu26qX/Qos07VTS7AOE6/ZL6E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 08:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:31:b4:d9:07:f1:19:ba:6e:e4:77:15:78:71:40:94:a5:4f:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Validity
Not Before: Nov 4 04:53:36 2025 GMT
Not After : Nov 5 08:20:36 2025 GMT
Subject: CN=1C9DCC6BD93D67E639963057627846BD37D50C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:27:37:b4:85:44:75:5c:e4:bf:13:08:47:
03:96:d3:78:c8:2a:66:60:5a:65:93:e6:8a:e6:82:
7f:9d:af:66:d9:1e:04:fe:23:46:55:b2:88:42:37:
dd:56:9e:86:51:06:1d:e8:dc:8d:e6:53:0e:ba:e2:
80:e0:00:63:fb:e8:16:70:52:6b:03:8d:23:a4:ae:
ed:2f:c0:a1:ba:39:78:19:ef:7d:dc:37:d7:bc:5b:
b5:ae:33:a1:43:4f:aa:fa:97:46:bc:b1:90:82:26:
0d:93:fe:bd:36:c8:f5:d1:27:86:0b:04:11:c0:00:
9c:b3:54:07:2c:f6:04:95:1a:95:75:75:c4:f0:ab:
c0:47:6a:ac:63:20:1b:9e:af:71:44:9d:77:ee:bd:
96:ee:22:e4:fd:ae:70:5e:df:8f:c6:5c:56:44:67:
13:7d:9f:a3:77:4c:11:34:6d:e2:d4:94:fb:7e:7a:
03:e9:40:1e:f5:25:d6:fe:24:54:b1:74:e7:1c:44:
f7:b9:f1:62:e8:b6:cb:be:d1:2a:83:66:e6:f9:82:
55:15:8b:4a:83:c1:b0:2e:6b:a7:6b:75:98:07:f1:
6b:e1:9f:bb:8e:fa:2a:35:d7:e3:93:76:fd:9f:47:
7d:14:a8:2d:79:f8:69:3a:88:83:69:a7:37:33:54:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9D:CC:6B:D9:3D:67:E6:39:96:30:57:62:78:46:BD:37:D5:0C:60
X509v3 Authority Key Identifier:
keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fa:de:c3:35:b6:6e:83:c8:b9:4c:8d:9f:ac:f8:a3:9b:cb:
88:64:fe:dd:87:8a:46:55:7b:21:81:61:d2:14:4a:d7:0f:ff:
d7:b5:62:ed:4d:3a:86:92:f3:4c:cc:08:63:f0:4d:e1:b0:06:
30:68:d5:31:24:ee:d2:ae:4e:9a:61:53:5b:e3:04:e4:12:03:
68:63:85:f5:54:4e:25:25:00:73:77:8b:b2:66:84:43:cf:af:
96:78:54:72:53:96:94:92:ee:de:46:d8:e2:e6:6b:b0:8a:ac:
80:0e:04:ea:86:ca:d5:29:4c:53:d1:00:f8:c3:ac:0e:73:a8:
b8:11:c8:06:e4:c9:82:1a:81:eb:6c:cf:5b:55:b3:c6:c3:45:
f1:d2:b2:f5:91:4a:b1:70:3d:5e:ce:e4:30:4f:73:61:ba:a8:
c4:f7:5b:7a:93:5d:58:66:5a:8a:d9:be:3b:7f:16:49:15:2c:
78:d2:01:65:e9:4e:82:03:20:b7:7b:3d:d4:47:66:26:99:25:
3a:a3:da:c9:dc:8c:59:7b:32:b5:e6:36:e4:f3:d8:16:9b:58:
b9:56:3c:11:3c:1b:66:c0:79:35:b5:63:8e:68:f8:51:f0:66:
cb:1a:81:36:b0:b6:c8:24:11:a0:b6:05:08:cb:7b:aa:0f:73:
10:46:5e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:23:21 2025 by rpki-client