
$ rpki-client -vvf rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
File: DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft (raw, json)
Hash identifier: jdyy8asCBDUUsEOmbFsoTgMpLS+imReZ2eGNFeIz1EY=
Subject key identifier: 9D:71:DC:06:36:B9:31:12:5B:D2:22:65:12:21:1B:FF:41:5C:AF:1E
Authority key identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
Certificate issuer: /CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Certificate serial: 1C0B859AB9ABBB5B3818D1ECF16E912B01BF5E4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
Manifest number: 03
Signing time: Wed 05 Nov 2025 05:08:09 +0000
Manifest this update: Wed 05 Nov 2025 05:03:09 +0000
Manifest next update: Thu 06 Nov 2025 07:44:09 +0000
Files and hashes: 1: DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl (hash: MA/4L/f4TD9rfe7NJ6gJlY/iNRFXIDy/vSR0jGByZAc=)
2: 323830343a363233383a3a2f33332d3333203d3e20323639323833.roa (hash: qb3IvRRLcnVoafA0oGYnQkK9IWDY28AWxqENBNhbJkU=)
3: 34352e3138332e3135322e302f32342d3234203d3e20323639323833.roa (hash: kdiSF39Nw7xgMVBoDVNhLxtQmf9tJkbhnJtdozrXgoM=)
4: 34352e3138332e3135342e302f32342d3234203d3e20323639323833.roa (hash: w5PrJejwSZWOpT0KWE/Gml3ndnD860WgV5oJajBx4co=)
5: 34352e3138332e3135352e302f32342d3234203d3e20323639323833.roa (hash: nTqtvXF3Fcg18sjdgJTv4aUpErpsDYdIP9lLZ5V1L90=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 07:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0b:85:9a:b9:ab:bb:5b:38:18:d1:ec:f1:6e:91:2b:01:bf:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Validity
Not Before: Nov 5 05:03:09 2025 GMT
Not After : Nov 6 07:44:09 2025 GMT
Subject: CN=9D71DC0636B931125BD2226512211BFF415CAF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:bd:c0:06:8b:cf:69:96:1e:cd:63:08:8a:
fb:8d:26:d1:88:a8:43:e1:65:2b:77:d7:46:47:6f:
3c:13:a4:97:28:1d:24:c1:9b:b8:6b:c1:4b:ca:50:
34:33:95:de:cb:cc:88:8d:23:a5:e1:9a:d5:d2:83:
92:09:d8:3b:35:6c:36:fc:62:6f:32:15:60:79:5b:
03:2f:2f:d7:71:10:8b:0b:ae:b7:07:39:65:33:28:
85:4c:c7:55:e2:fd:b6:b9:df:ad:ad:34:ca:db:05:
e8:84:67:89:c7:c4:f2:ac:1b:bb:ef:0c:d9:ca:df:
5c:df:cd:4b:6c:3d:5c:ac:d1:88:fd:bf:74:6c:42:
75:50:66:87:e1:55:c2:f2:65:85:85:72:de:b6:a8:
7b:73:d2:89:c2:61:c4:02:51:3a:86:84:cf:9e:9a:
a2:41:c7:47:fb:31:5a:53:cf:94:14:af:35:06:ac:
35:6b:e7:37:8b:0d:d7:c6:54:1f:23:53:e6:7c:db:
bd:2c:d0:05:39:aa:b9:d4:75:67:c2:32:47:d6:ea:
eb:2d:de:fc:c6:96:e1:2b:b0:de:f3:07:72:7f:0e:
39:08:bf:1a:03:7c:fd:6b:6d:d7:84:37:3f:dc:01:
4c:ac:62:8b:93:0b:2b:8d:09:1a:94:59:e7:0b:11:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:DC:06:36:B9:31:12:5B:D2:22:65:12:21:1B:FF:41:5C:AF:1E
X509v3 Authority Key Identifier:
keyid:DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:25:51:5e:18:58:73:e9:6b:19:97:af:c6:7a:21:ba:7e:b2:
39:5e:51:d7:d7:5f:4c:f5:d3:0e:de:78:38:7c:f0:07:7b:92:
e9:76:8c:3d:f2:9f:46:21:f8:f5:0c:91:4d:fb:57:47:08:81:
40:1b:95:94:0e:f2:1a:3a:e5:09:49:6a:11:d1:08:b6:a1:07:
25:44:d4:35:34:8e:9b:cd:b3:10:2f:51:32:41:4b:45:7e:20:
2b:c9:aa:39:42:0e:34:a6:14:c7:ad:dd:7e:39:15:ed:2a:d5:
ec:35:7d:6a:e5:77:13:39:db:e0:18:2b:22:f5:37:d2:42:59:
21:6f:8c:eb:e6:71:db:a6:32:46:49:ae:95:fb:f4:b8:3d:dc:
ed:a0:63:7f:fc:38:d8:11:45:bc:a1:db:51:00:5a:54:56:ad:
c9:93:e6:04:18:09:58:b4:3f:99:04:54:b2:82:45:e7:c8:dd:
ea:1a:be:5f:f5:27:f0:88:5f:d7:09:ee:8e:22:f8:ad:8a:5b:
65:a0:b9:e2:7a:79:9f:21:ef:86:4a:d8:8d:65:36:ae:79:52:
13:be:ee:07:7c:50:d3:ab:73:2a:e2:c2:f3:8b:28:6d:c3:62:
86:2d:07:bc:b0:78:39:79:91:64:98:63:43:be:c8:6d:24:f5:
82:bd:53:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:44 2025 by rpki-client