
$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json)
Hash identifier: o3X30MHmMtX1DiID7Bgkfq5KRElJ+NWQbDTPv7sxRME=
Subject key identifier: A9:2D:DA:23:38:96:B4:CF:E6:49:8C:38:F3:89:0E:79:39:05:0A:53
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial: 7BAAC75ADB3385B44A5FCF5EE59542BC35A06142
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
Manifest number: 0309
Signing time: Wed 05 Nov 2025 05:48:17 +0000
Manifest this update: Wed 05 Nov 2025 05:43:17 +0000
Manifest next update: Thu 06 Nov 2025 09:46:17 +0000
Files and hashes: 1: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=)
2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: veCQOr2YUKR34gtwlKfUPPhZAAa9Pk6FZ55zTxXiUJg=)
3: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:aa:c7:5a:db:33:85:b4:4a:5f:cf:5e:e5:95:42:bc:35:a0:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Validity
Not Before: Nov 5 05:43:17 2025 GMT
Not After : Nov 6 09:46:17 2025 GMT
Subject: CN=A92DDA233896B4CFE6498C38F3890E7939050A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cc:36:31:f0:09:cc:da:c4:59:2d:9d:b2:e5:
0a:36:62:e4:cc:03:0d:da:22:dd:b7:b5:71:e7:be:
c6:10:54:49:36:63:d0:5d:7d:cd:a8:4a:ae:9b:a1:
28:fe:e7:21:b7:e8:ba:bb:36:60:c4:49:57:34:1b:
80:e7:91:64:b5:9a:07:c7:2f:6f:97:b1:3f:09:2a:
df:6c:1e:c7:08:df:0d:4f:f4:42:ad:4a:5b:c6:e8:
87:8c:40:4d:56:68:a1:6a:21:79:d5:0a:36:18:2d:
ba:48:d1:1b:12:a3:35:be:e1:47:aa:40:7a:8d:69:
77:76:cf:49:60:5e:e3:ab:d4:84:17:c9:e8:6e:e9:
f7:c1:59:3e:0a:a5:15:6d:0d:45:10:fd:4e:26:4b:
24:c3:90:df:a9:f6:99:a4:ad:a7:c3:bf:31:70:15:
9d:f4:4d:40:0b:92:dc:3e:e6:9b:05:67:63:fd:45:
54:6e:3c:4f:ac:2f:12:55:7c:b4:b2:cd:02:7d:53:
57:8f:16:ed:03:d8:b4:23:ad:0b:2b:65:58:09:61:
a7:e0:a2:5b:8c:77:77:5d:70:27:c9:e7:24:de:3c:
3f:fc:aa:5b:49:83:58:17:34:d0:ef:53:aa:10:89:
a7:8d:95:cf:38:41:06:f2:15:99:92:0f:1d:45:18:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:DA:23:38:96:B4:CF:E6:49:8C:38:F3:89:0E:79:39:05:0A:53
X509v3 Authority Key Identifier:
keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9c:b9:31:49:f8:16:0f:cc:d6:b1:ee:16:8f:57:ca:7a:7e:
84:07:c5:c6:9a:18:d9:6c:22:a6:72:2b:ef:7e:2b:ef:2c:96:
6b:f4:e1:93:c2:65:9e:81:08:33:3c:eb:19:82:37:df:9d:8a:
d5:eb:b1:bf:cb:f8:69:61:be:d5:87:5b:87:71:60:9a:f8:f1:
4e:ca:b9:56:43:6c:8f:28:c0:25:07:53:29:45:e8:bb:9e:b5:
1f:2c:82:08:5c:02:30:1a:4c:ba:d5:40:63:ad:56:f1:eb:76:
d3:c6:33:05:ce:74:6e:6e:43:ae:ed:21:73:05:17:45:5c:ed:
6a:fa:2e:be:03:72:7c:31:21:50:23:62:3f:61:2a:90:ec:c2:
6d:8e:46:d7:02:37:96:72:0e:bc:6d:65:da:da:04:b3:37:7e:
8c:92:9d:5d:bd:d0:4c:02:a3:d6:ff:d4:f7:00:04:30:16:5a:
6a:1f:2f:23:a4:a6:3a:b3:e2:17:c6:4f:80:69:16:9b:59:93:
ad:5d:2a:bc:ff:b5:66:b3:17:36:8e:22:b5:08:c1:6f:63:95:
0f:29:c4:6e:a6:e4:6e:97:10:f5:34:27:34:bf:a9:66:d0:d3:
93:f3:ba:1d:95:5e:ff:4c:24:c4:f3:77:95:d0:46:3f:62:0b:
c0:51:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:01 2025 by rpki-client