
$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
File: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft (raw, json)
Hash identifier: NZktzBXp1+/gtsj6ZT9Tmua74ZnSxDiCtOGgwlhQa0Q=
Subject key identifier: 84:58:67:D4:E3:A7:3B:36:85:59:6C:43:64:08:C7:6D:22:9D:FE:97
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Certificate issuer: /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial: 4351A40B46C46B83E48B4BCC15F10439EEF4570C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
Manifest number: 0338
Signing time: Tue 04 Nov 2025 23:00:00 +0000
Manifest this update: Tue 04 Nov 2025 22:55:00 +0000
Manifest next update: Wed 05 Nov 2025 23:00:00 +0000
Files and hashes: 1: 323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (hash: N77OEG9pmlHUj8lD205/hv715RlaC7sqCWqYTtfKTMM=)
2: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl (hash: Mp5s8P6opJMOEqQBs6Fdr0NC2lxg03vLBg+aQ1iFn8Y=)
3: 3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (hash: WnxFkjgBAQRKMZZDYpAUe7BwDntsek7X2KvX4VwASxA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:51:a4:0b:46:c4:6b:83:e4:8b:4b:cc:15:f1:04:39:ee:f4:57:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Validity
Not Before: Nov 4 22:55:00 2025 GMT
Not After : Nov 11 23:00:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:a3:aa:c2:af:b0:1a:e2:49:54:77:b3:47:
af:fc:46:92:7d:23:c0:80:33:6b:1f:85:69:61:66:
90:00:f5:d2:a1:92:eb:78:26:a1:e8:6e:09:8d:83:
26:40:84:61:b1:b3:c7:3c:1e:a1:e8:c0:fc:6d:e4:
1d:7e:7b:0b:2b:8f:4e:b8:76:fc:f5:d8:c6:b0:a4:
dc:fe:61:1b:6c:f5:fb:8d:f2:bd:ba:1b:20:f3:69:
57:31:ab:27:94:ef:50:8f:35:8e:69:5e:bf:9c:09:
e5:32:33:fb:bb:cd:15:d5:11:24:4f:58:b4:95:94:
8f:95:02:d0:8c:96:ab:71:8b:8d:f5:4f:2c:12:ea:
cc:90:46:9b:74:d3:4f:ee:fe:ca:49:36:db:e1:e7:
b0:c8:a3:a7:d7:1d:2e:ef:d3:7c:e1:be:96:87:19:
fe:0d:bc:8c:ff:42:c4:a4:e1:8a:2b:e2:42:a3:21:
e5:cb:fe:48:98:9c:e2:86:07:6b:cb:a3:96:0a:b4:
8a:42:26:f8:86:73:e5:ef:2b:c0:74:84:81:33:13:
72:5e:bc:fc:d4:7d:57:f2:79:88:3d:8e:23:b4:57:
62:26:9a:20:fb:d6:45:25:1a:da:e9:b3:28:87:f9:
ce:dd:ca:aa:12:33:37:17:92:7d:81:2f:0d:29:2d:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:67:D4:E3:A7:3B:36:85:59:6C:43:64:08:C7:6D:22:9D:FE:97
X509v3 Authority Key Identifier:
keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:99:01:18:eb:94:3e:96:11:db:16:92:9d:f7:8f:4f:20:47:
be:2d:60:df:f3:49:ec:f1:08:af:ee:4d:bc:20:80:62:3f:f0:
e8:05:12:15:ce:59:35:91:ac:23:65:2d:ee:1d:d7:3d:16:42:
e1:0c:c5:28:14:3f:39:cf:1b:ba:83:cb:cd:5f:be:35:54:1b:
7d:3e:f0:ce:89:ef:84:0e:df:bf:00:44:92:5b:df:fb:c1:06:
73:ca:6a:49:cc:51:79:79:a6:b1:9b:e7:d7:6e:b1:2b:a3:1e:
eb:13:27:39:1f:57:38:88:e1:d1:28:7a:38:3c:6b:6a:67:d2:
79:75:e3:ad:fd:d7:4e:ed:2a:dd:e5:92:4c:cf:47:ef:23:cd:
a2:7d:94:a1:3a:6d:8e:69:30:34:07:3b:f0:15:35:ea:d1:a6:
92:f5:cc:fc:10:ca:4b:c3:e6:75:cd:55:bd:39:18:66:be:3a:
5b:79:de:e6:69:53:39:a4:67:1a:1c:70:3c:74:5d:04:dc:18:
08:f1:6f:94:d4:b4:c6:d0:10:eb:67:17:63:be:ea:db:84:8b:
77:58:73:7d:93:14:27:18:71:f6:77:0b:d3:d6:2b:db:e5:7b:
ce:b1:9e:2d:cc:bc:7c:b2:ab:b4:a6:af:67:1b:90:4b:78:8b:
a1:4e:52:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:06 2025 by rpki-client