
$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
File: B8BF0367B559121777A21A84D953A717D6E82AEA.mft (raw, json)
Hash identifier: E3ulqr3730BgaCocEoFKxp00cLHXHqJrmnAks8n7+QM=
Subject key identifier: D0:7F:3B:25:DD:30:26:49:6F:3E:57:9C:52:F1:4B:16:22:3E:44:59
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Certificate issuer: /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial: 5528DA03B0AAF207F338654A428091ED03910012
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
Manifest number: 0317
Signing time: Wed 05 Nov 2025 08:18:07 +0000
Manifest this update: Wed 05 Nov 2025 08:13:07 +0000
Manifest next update: Thu 06 Nov 2025 08:32:07 +0000
Files and hashes: 1: 323830343a313434303a3a2f33322d3334203d3e20323633333231.roa (hash: SKkd6T2FtnRBoMRG1gHzLFRqFIiv+vR6d5EwAbC7wyg=)
2: 3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (hash: jq33KYU9CFhSabj7FQHib1ORj2LmOp7hWFRBMmOuUz0=)
3: 3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (hash: +ECSCCH5YRr7klkx2vh85cYXAGDn1UwvbvGNUzVuOHs=)
4: 3136382e39302e32342e302f32322d3234203d3e20323633333231.roa (hash: TbL6gt6S4GcpxH/TvwBKa6RqSOcFFh/GBfAIBHH9uRE=)
5: B8BF0367B559121777A21A84D953A717D6E82AEA.crl (hash: YBdzu0VlGwq83nnYXvJBNj4KZDNBVMc4Nb0ZCEdQKQ0=)
6: 323830343a313434303a3a2f33322d3430203d3e20323633333231.roa (hash: Jt5yBCDcazFPmlm99bqKiSoVaSE8qVxER5l9g5ESP5I=)
7: 3137302e3233332e3230342e302f32322d3234203d3e20323633333231.roa (hash: yvz0bncSCI+UJpzByY5mfGy18dE6DAJkqBravnlAWrY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 08:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:28:da:03:b0:aa:f2:07:f3:38:65:4a:42:80:91:ed:03:91:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Validity
Not Before: Nov 5 08:13:07 2025 GMT
Not After : Nov 6 08:32:07 2025 GMT
Subject: CN=D07F3B25DD3026496F3E579C52F14B16223E4459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:41:27:f7:71:ca:86:ee:f4:08:47:28:4f:
c3:b2:f1:94:09:d5:f1:aa:fc:a0:4f:38:f5:c7:b6:
6d:0f:ce:af:3a:4d:1f:75:6c:f5:4e:71:f3:ae:f2:
0e:bb:22:d0:54:a7:62:db:40:9e:cb:28:c0:ef:98:
62:6c:88:a4:70:96:5c:bb:ce:f4:b0:8a:d6:57:ef:
d3:7e:10:5e:63:34:af:c1:8c:77:26:7c:ab:f1:fe:
bf:ce:1c:09:f5:af:83:b6:cd:84:a2:1b:a0:5f:60:
62:b8:f1:73:80:2a:bd:5b:e2:56:4d:71:2c:f6:97:
07:9e:25:94:6a:5d:db:63:56:07:be:62:2a:26:f7:
75:12:74:76:72:57:3c:4e:06:fc:0b:a2:40:b7:87:
8e:db:6e:da:42:ff:db:ac:68:a6:bc:db:93:8d:52:
76:31:b7:7f:cd:85:9d:9b:ad:a0:d6:ef:b4:7f:52:
f6:cd:d0:d6:1a:92:dc:09:1e:ad:1e:e6:f5:1d:64:
f9:a1:3e:59:ce:57:f2:ea:84:a9:ff:89:b9:f3:6f:
7f:83:23:7e:ee:63:17:5b:bf:d7:3f:80:ca:70:74:
df:32:7a:1c:eb:cb:40:d8:7d:2c:46:ee:3d:eb:64:
1d:03:78:91:4b:49:0a:2b:53:8b:d0:1a:97:4f:cc:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:3B:25:DD:30:26:49:6F:3E:57:9C:52:F1:4B:16:22:3E:44:59
X509v3 Authority Key Identifier:
keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5c:86:97:a1:95:f8:ee:d9:4e:d3:0a:c8:e0:4b:0b:3f:45:
24:7f:b7:61:c5:46:e3:58:a0:91:49:5c:c7:1f:f6:49:a9:b6:
f6:62:e2:d2:2f:5d:84:5e:98:be:ef:d6:dc:2f:51:e7:70:70:
4f:e2:55:8f:9c:c2:c3:40:12:95:ab:48:a3:3b:e4:90:87:64:
77:84:70:29:d4:9a:64:c0:c0:b5:7c:2a:a3:2b:70:6e:16:be:
06:d0:d2:8c:de:c6:4b:8a:c1:00:62:bc:c4:2f:4a:65:67:31:
9b:07:b0:02:5a:f3:8a:14:17:f9:02:1e:af:fd:a6:22:54:c0:
47:81:05:46:72:a4:42:47:7b:8d:d6:b6:97:e0:99:b2:c0:e3:
68:7b:f1:02:82:fb:3a:43:fd:07:e5:db:13:8a:5c:5b:2f:d7:
28:6f:46:c4:8f:05:13:96:e9:d9:52:57:ea:40:3f:39:86:f9:
ee:a8:6f:4d:72:c0:ed:2e:a3:fe:bf:91:86:24:84:e5:e4:59:
6a:51:df:ee:a7:6b:ff:dc:d3:91:87:4e:65:36:51:61:be:56:
df:9b:07:fe:9b:06:f7:d3:bd:d2:e3:c9:42:31:fe:c9:1d:de:
0a:1f:88:67:0d:a0:1e:08:e6:cf:56:f8:8a:83:6e:9b:59:a2:
57:1a:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:00 2025 by rpki-client