
$ rpki-client -vvf rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft
File: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft (raw, json)
Hash identifier: W4yIKM0X5+JzfQ2sZKBqjUwIuoOGWpViTspqpQ5djB8=
Subject key identifier: B4:AB:1F:2C:A5:77:D3:76:B1:74:0F:E6:68:66:E2:CF:F5:67:F6:AB
Authority key identifier: D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D
Certificate issuer: /CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D
Certificate serial: 1A0FB940BC2C116F13FDDDE43DF139E744CC4B27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft
Manifest number: B7
Signing time: Tue 04 Nov 2025 07:44:22 +0000
Manifest this update: Tue 04 Nov 2025 07:39:22 +0000
Manifest next update: Wed 05 Nov 2025 10:15:22 +0000
Files and hashes: 1: 323830343a346237343a3a2f33322d313238203d3e20323637333037.roa (hash: dUZNvF/89BKD0mmyDTVw/iy7hWhShcuVbo/kVaXn0wc=)
2: 34352e3233332e3130342e302f32322d3332203d3e20323637333037.roa (hash: 9GALASwvDqxvBvCAHp51gmtuAoBU3cDGHtT6KouQUqs=)
3: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl (hash: itOd/ycEHc67qrtzXRLKbrmNVdqrl/oR8zK2+1MTPUg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl
rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 10:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0f:b9:40:bc:2c:11:6f:13:fd:dd:e4:3d:f1:39:e7:44:cc:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D
Validity
Not Before: Nov 4 07:39:22 2025 GMT
Not After : Nov 5 10:15:22 2025 GMT
Subject: CN=B4AB1F2CA577D376B1740FE66866E2CFF567F6AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:76:e9:d7:ea:7e:1a:80:46:5f:43:30:d9:
6b:0d:c0:1b:d3:16:f3:d6:bb:81:da:eb:c7:05:af:
3b:af:50:b2:43:a4:fb:44:89:f9:9d:17:d9:99:2f:
ca:a7:b4:b2:9e:11:11:77:3e:20:7b:af:ac:cb:03:
c4:16:0b:25:2f:ce:09:a7:fc:d4:d7:62:18:29:a4:
b0:a5:3c:5f:5c:5c:8b:6f:2d:dc:b9:03:3c:f5:bf:
e4:7a:ae:d8:7c:a0:e8:31:cb:dc:00:84:45:a0:00:
0b:80:6a:de:1e:11:98:1c:21:12:60:35:63:45:a5:
44:0c:c7:2a:b1:dc:16:7e:fc:10:7a:48:1b:33:f4:
33:8a:a7:63:43:d2:e6:a4:07:d7:de:6a:58:62:94:
bc:73:bc:e7:2c:61:fb:1d:6e:3f:d3:a1:a6:76:55:
00:8e:93:c8:31:7b:5c:b1:20:84:1c:29:5a:ac:a2:
ad:aa:1b:9d:a9:91:d7:be:9d:7b:e0:d8:af:64:c4:
f9:a1:f7:58:99:fc:48:43:22:d5:25:05:34:c1:fb:
0d:76:d4:3e:e3:a1:ac:69:f1:62:79:3a:68:ea:39:
f6:86:36:25:a4:e5:a4:bd:c8:88:e6:8c:de:d9:87:
4a:7d:6d:d7:9f:a3:f5:96:e4:28:db:b7:8c:17:80:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AB:1F:2C:A5:77:D3:76:B1:74:0F:E6:68:66:E2:CF:F5:67:F6:AB
X509v3 Authority Key Identifier:
keyid:D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:52:30:ca:7c:3b:ea:0d:8a:7a:27:da:d7:a6:67:65:62:
04:de:41:ae:61:ee:d0:69:58:f8:e5:17:a7:00:04:47:1c:9e:
ba:04:b9:86:73:5c:0a:84:96:73:0a:f7:97:ac:e2:bb:3c:3b:
d4:17:e9:cf:7d:08:6a:43:e2:28:4d:12:51:e4:be:c8:b4:c4:
cc:bf:8d:29:9b:47:47:a9:99:f7:42:38:3a:6a:e5:b5:aa:c6:
d7:82:64:c5:7a:de:37:3f:77:91:b3:1d:bf:de:43:2b:16:a9:
09:4f:55:ba:bd:a6:ad:1e:e8:91:db:26:6e:c8:5f:46:37:89:
ff:6e:e8:48:18:0b:1f:7e:31:05:0d:05:86:77:72:e1:49:0c:
20:98:f6:63:9b:6b:9f:65:9a:95:16:37:9a:73:06:c8:f2:12:
ac:56:f0:81:81:b0:3a:c6:a5:48:a4:6e:ed:7b:0f:c7:1d:9b:
d2:a5:6f:3a:ae:c6:5f:81:71:08:df:7f:53:8d:3b:30:18:4e:
14:c8:4d:99:16:e8:77:2f:3d:0b:c4:be:2c:a1:d7:23:07:6e:
5e:b2:87:c1:32:d2:89:02:29:9f:aa:76:d9:0a:df:be:32:73:
23:65:e9:f6:47:40:4e:5c:81:5e:47:f2:b3:67:4b:06:e0:ef:
cc:5a:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:42:29 2025 by rpki-client