
$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
File: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft (raw, json)
Hash identifier: osY3mU+hmHZ+bP4EHIi+w3Qro9B8Ucv0eTJXARQExqU=
Subject key identifier: A1:C3:DC:D6:39:6B:C4:35:41:00:BD:6D:4D:93:F9:DD:4A:22:17:E2
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Certificate issuer: /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial: 7F9E494836901FB528DC630A53015A211C221C4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
Manifest number: 0304
Signing time: Wed 05 Nov 2025 06:07:52 +0000
Manifest this update: Wed 05 Nov 2025 06:02:52 +0000
Manifest next update: Thu 06 Nov 2025 08:44:52 +0000
Files and hashes: 1: B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl (hash: U/rD1Tf7RRJHPsA1oT2v4ghXWnEVGdLF4F62ZU4Y5GU=)
2: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (hash: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=)
3: 323830343a353239303a3a2f33322d3438203d3e20323638353236.roa (hash: 89H6sqhwLq+OwyjFapd3XLt468pjg8feq8CkL0sljBs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 08:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9e:49:48:36:90:1f:b5:28:dc:63:0a:53:01:5a:21:1c:22:1c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Validity
Not Before: Nov 5 06:02:52 2025 GMT
Not After : Nov 6 08:44:52 2025 GMT
Subject: CN=A1C3DCD6396BC4354100BD6D4D93F9DD4A2217E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:f1:80:2d:92:48:8c:de:3e:71:e8:07:0f:
71:54:a8:22:78:e1:87:0f:a2:af:9a:58:27:6f:7e:
3e:0e:6e:8c:60:f8:d9:2b:33:3d:a6:1b:31:21:1a:
9a:77:08:e7:48:3c:88:50:aa:8a:b0:0f:af:90:79:
3d:a2:ba:00:dc:fe:f8:43:6f:13:12:6f:e9:9f:ea:
18:da:39:67:cd:2f:e4:79:f3:59:5c:eb:85:6e:ee:
60:ba:cb:46:06:0e:fa:25:cb:ae:2a:d9:5a:10:ec:
a0:2f:60:45:1f:f6:d1:e1:b3:ca:cb:e2:5f:58:c8:
82:7c:c5:8d:be:9f:36:2e:32:0f:15:14:65:8a:90:
b6:12:7d:cf:2b:28:e8:c4:4b:4e:7d:5e:54:93:9e:
cb:91:5f:7c:13:aa:ad:60:cf:23:71:19:6c:21:22:
c6:e9:93:96:bf:6d:17:56:3b:68:47:aa:20:77:93:
29:d7:d7:c4:71:56:f6:db:fe:f1:84:be:cc:fc:4d:
a8:ae:9d:ac:84:4b:2d:12:bc:ab:d8:64:aa:50:34:
2b:1c:36:4e:cd:be:f9:71:4f:44:1e:be:3e:2d:0c:
dc:20:09:c2:66:56:e7:b8:63:95:5c:75:77:8c:aa:
59:cc:4c:72:9a:fb:ce:d7:9b:a4:c1:95:84:ca:a5:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:DC:D6:39:6B:C4:35:41:00:BD:6D:4D:93:F9:DD:4A:22:17:E2
X509v3 Authority Key Identifier:
keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:88:96:45:9a:73:86:e5:c1:78:f8:3d:f9:02:70:de:1a:
94:26:8e:d7:7b:2d:2f:ba:50:a0:8e:01:fa:f0:d3:e8:a1:45:
bf:02:53:61:db:52:82:6d:06:58:be:8b:1c:80:d5:19:ae:73:
ad:0b:cf:f1:d1:63:84:c5:ca:55:09:09:db:95:03:9b:7d:24:
b4:e3:a7:7c:97:03:e7:e0:d6:57:b8:62:a5:e7:04:e0:74:eb:
25:e6:f0:54:4a:13:98:dd:2f:ee:c2:26:1a:69:59:81:1d:5c:
ac:6b:bf:04:eb:4d:ac:bf:92:e7:f9:4e:90:73:c2:ac:8c:0c:
42:13:71:c8:c0:cc:c5:7f:de:c5:d7:f9:55:83:2e:04:01:48:
1c:a9:7c:b9:56:fd:3c:19:71:c0:4a:89:e9:f7:33:99:13:de:
a5:98:7e:03:a6:5a:0f:bd:8b:7a:a2:94:1d:d4:89:f7:f4:5c:
83:e5:84:04:d3:bf:c4:c4:b3:6d:60:36:0b:e8:f3:64:c6:1c:
01:e7:89:d1:1a:9a:10:13:54:3d:e2:69:6e:90:53:5c:91:2a:
ff:03:64:3f:6f:ea:f4:fb:70:ca:c1:44:93:02:94:1d:b7:48:
20:78:b4:a5:3a:37:0e:94:12:11:2f:e8:bb:b2:58:6b:70:1c:
aa:08:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:39 2025 by rpki-client