
$ rpki-client -vvf rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft
File: 4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft (raw, json)
Hash identifier: EfxRhumq/R3sgYQmCBXmVj8j2s1vMTMUkezU/JYst8M=
Subject key identifier: 1B:2E:0D:2E:72:8A:F8:08:BA:75:EC:BB:B9:6A:B0:8E:5C:F9:AE:BF
Authority key identifier: 4C:53:9A:68:EC:E2:E8:F0:BE:8E:15:5A:0E:78:00:50:44:89:0A:EC
Certificate issuer: /CN=4C539A68ECE2E8F0BE8E155A0E78005044890AEC
Certificate serial: 47B81F9C40E6E6A6B318FEFEFD2063BE58345B06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft
Manifest number: B9
Signing time: Wed 05 Nov 2025 16:20:44 +0000
Manifest this update: Wed 05 Nov 2025 16:15:44 +0000
Manifest next update: Thu 06 Nov 2025 17:27:44 +0000
Files and hashes: 1: 34352e3137322e35362e302f32322d3234203d3e20323638373632.roa (hash: EKOgHj4yxNdz9Y4XxGUayWrsOgR16imBpcDtkHU6BWw=)
2: 4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl (hash: srwmBVR/+dylNOUqq2/uhheVVKJuoqQPSu1VcAtIFz8=)
3: 323830343a356134383a3a2f33322d3438203d3e20323638373632.roa (hash: 8oqKgl6goVmJi8wxd0B4s477NzXKy7+81b3yRyfursc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl
rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 17:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b8:1f:9c:40:e6:e6:a6:b3:18:fe:fe:fd:20:63:be:58:34:5b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C539A68ECE2E8F0BE8E155A0E78005044890AEC
Validity
Not Before: Nov 5 16:15:44 2025 GMT
Not After : Nov 6 17:27:44 2025 GMT
Subject: CN=1B2E0D2E728AF808BA75ECBBB96AB08E5CF9AEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:e3:53:76:29:2f:ff:b0:2e:c6:c2:c1:fa:
34:00:71:62:15:79:d5:0f:59:f7:e7:76:2d:35:f1:
0f:54:fc:42:71:93:95:d9:fc:1f:ed:9f:5e:40:08:
2a:60:77:c0:c0:bb:5e:a0:58:94:1f:ac:56:17:70:
80:a0:a4:2f:a8:17:4f:16:3b:68:68:5c:24:f4:3d:
1d:76:c9:96:a9:bf:bd:4c:8e:ac:16:62:c5:f4:ac:
e9:5e:bd:c6:ba:96:e2:81:20:06:00:6a:67:25:15:
97:00:a8:c2:aa:68:e8:eb:ca:63:07:d0:5a:8a:0e:
86:37:69:b0:6b:7d:56:58:f1:02:c7:f6:bb:0f:e9:
d4:15:4f:b8:c9:96:c9:45:fe:f8:ea:63:6e:86:98:
df:3d:e8:b9:c0:63:c7:59:15:36:ab:a8:82:9a:85:
ec:e1:73:54:7f:d6:e3:fc:7c:3e:12:de:8f:4f:dc:
6b:80:18:23:04:0b:c7:31:e0:62:3e:9f:88:cf:7e:
36:74:19:fd:79:40:ce:e1:34:3a:33:59:5d:62:98:
00:75:ed:13:33:86:32:0a:c8:e6:16:0b:7e:69:95:
e6:e3:e6:32:0b:84:0b:3d:62:c8:67:51:58:56:8b:
f3:19:9e:9b:24:51:fb:90:7f:0a:ca:d5:3f:93:e9:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:0D:2E:72:8A:F8:08:BA:75:EC:BB:B9:6A:B0:8E:5C:F9:AE:BF
X509v3 Authority Key Identifier:
keyid:4C:53:9A:68:EC:E2:E8:F0:BE:8E:15:5A:0E:78:00:50:44:89:0A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gWgmn6XysfngtU6tTRRfoX3Mg3iXrKESCnF8m6m2yxa/0/4C539A68ECE2E8F0BE8E155A0E78005044890AEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:51:e9:cb:47:31:cb:2e:2b:95:0c:c5:eb:f7:35:40:94:6f:
a9:82:40:78:67:39:ee:05:a8:ac:5a:0d:c1:66:a2:81:04:62:
09:91:38:eb:ed:18:26:ca:85:a5:c4:30:a8:e1:9d:75:38:4e:
cf:74:32:84:72:ed:a4:05:5a:89:06:61:ad:e0:a1:52:03:da:
ea:37:76:c2:e2:c5:6b:c7:ab:4e:9c:54:cf:61:14:67:3d:81:
8e:2d:da:03:e1:9b:34:c4:50:83:ed:e6:77:84:9f:77:65:62:
9f:a7:61:f0:2b:bd:be:18:70:c5:a0:0c:3f:35:05:8f:88:22:
65:fe:76:b3:e8:7a:bc:16:97:2c:1b:c0:bb:0b:67:86:0a:39:
b5:d3:cc:ea:b9:8e:3f:c0:1c:24:66:64:47:ce:ab:1e:d6:01:
61:4b:e1:1b:39:34:37:84:d3:aa:54:28:97:65:48:c2:04:5c:
1c:98:b3:f2:77:0c:c6:66:11:54:67:9a:6e:c6:58:59:3c:8f:
eb:b8:b1:db:7e:86:94:6d:64:e8:41:63:3a:45:82:bd:a8:28:
24:5c:5d:d2:f3:be:0b:44:61:f8:d9:15:cf:0d:06:38:83:5f:
95:8e:36:24:93:d0:61:8c:40:f1:39:95:e7:d0:88:5a:60:94:
1c:24:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:47 2025 by rpki-client