
$ rpki-client -vvf rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
File: 8FBA71A8DD4044953FA3772B55E18831A51A7141.mft (raw, json)
Hash identifier: K/mUsvnLjp8WCcfTdEZPJfU5xMv9BJkkJZoQSxwPDXo=
Subject key identifier: 54:D4:53:8E:7F:55:96:E0:D6:56:D4:B8:39:C5:B8:5E:50:F1:A1:00
Authority key identifier: 8F:BA:71:A8:DD:40:44:95:3F:A3:77:2B:55:E1:88:31:A5:1A:71:41
Certificate issuer: /CN=8FBA71A8DD4044953FA3772B55E18831A51A7141
Certificate serial: 0988F6C4A7FCCB75A7E391295280DA4961E1C0B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
Manifest number: B0
Signing time: Wed 05 Nov 2025 08:12:15 +0000
Manifest this update: Wed 05 Nov 2025 08:07:15 +0000
Manifest next update: Thu 06 Nov 2025 09:58:15 +0000
Files and hashes: 1: 8FBA71A8DD4044953FA3772B55E18831A51A7141.crl (hash: 0gltuBxwZgVgGIBoADjknLYeKa7ffkbrnxDq7eKf3n0=)
2: 323830343a376131383a3a2f33322d313238203d3e20323731333437.roa (hash: RiT+Jr/qWk/mKEE5Yn7Gn/093I92rwAI8YyPWCFq+rM=)
3: 3230302e35332e39322e302f32322d3332203d3e20323731333437.roa (hash: BhaKMGiMRINJbaGhZ3UAep4X1IaToSKNjiFwtH7hrIM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.crl
rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:88:f6:c4:a7:fc:cb:75:a7:e3:91:29:52:80:da:49:61:e1:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FBA71A8DD4044953FA3772B55E18831A51A7141
Validity
Not Before: Nov 5 08:07:15 2025 GMT
Not After : Nov 6 09:58:15 2025 GMT
Subject: CN=54D4538E7F5596E0D656D4B839C5B85E50F1A100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:5d:b1:1b:99:5e:b0:a7:b4:c6:2b:3d:0b:
65:04:51:c3:7c:3f:1e:42:f4:87:fd:9f:85:0e:74:
f8:f1:f5:ce:37:a6:ee:01:37:b3:19:26:d4:7c:6b:
d2:c3:f3:d5:73:92:69:d0:68:da:bb:80:2f:c8:8b:
3b:b2:3c:b1:ad:37:06:43:63:51:91:ba:bf:59:21:
98:4d:2a:fe:28:e5:19:08:a5:4a:b0:41:ee:bc:11:
2e:02:df:41:1b:69:94:b7:d6:25:9c:70:63:54:f6:
a5:5e:13:a2:0f:8a:cb:1f:83:2d:dd:7b:cf:bb:46:
0c:eb:e5:e6:9e:4e:08:8e:5a:79:5f:4f:5e:a0:13:
53:f5:56:33:57:95:da:0a:77:87:90:59:55:e6:06:
57:f0:0f:b3:67:8d:df:a0:98:f1:1b:d8:a0:57:14:
19:61:17:b1:c7:75:95:f2:80:f7:bf:05:76:1f:ad:
e1:75:56:c8:b7:cf:10:a1:2d:cd:fd:5b:4e:65:51:
14:58:93:c2:28:91:41:01:22:2d:68:3a:c8:8d:1c:
64:69:b0:aa:dd:69:69:83:77:55:4c:00:4c:5d:3b:
55:7a:4b:fb:f2:9c:0f:e2:12:d3:d9:07:98:07:06:
74:63:ee:b9:3d:ab:1b:03:30:24:89:31:bc:d7:42:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D4:53:8E:7F:55:96:E0:D6:56:D4:B8:39:C5:B8:5E:50:F1:A1:00
X509v3 Authority Key Identifier:
keyid:8F:BA:71:A8:DD:40:44:95:3F:A3:77:2B:55:E1:88:31:A5:1A:71:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FBA71A8DD4044953FA3772B55E18831A51A7141.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/8FBA71A8DD4044953FA3772B55E18831A51A7141.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1e:ae:6c:02:50:a1:66:44:1d:33:8a:e2:62:50:30:26:ea:
be:49:75:02:0f:a4:a6:df:99:04:87:bb:80:1c:c4:2f:19:84:
e3:70:bc:71:bf:bb:45:61:ab:88:11:ef:85:ac:4c:f8:b1:b7:
37:fa:2b:b7:ce:ed:d8:90:a7:eb:da:a1:ce:1b:4a:fd:73:4e:
a8:82:2d:45:77:93:58:a9:28:c4:9b:71:f5:f5:98:76:07:5c:
19:eb:06:5b:03:fd:79:4a:3e:06:c8:12:b7:d4:0e:54:17:5c:
dc:61:78:e9:40:39:18:98:b1:18:9a:8d:e4:32:3a:05:38:b4:
a6:4e:cf:85:c3:67:4f:40:09:b7:62:f1:93:04:f4:78:71:a5:
bf:9e:07:30:9d:31:85:18:3e:19:7b:55:f6:47:21:09:e9:60:
b8:91:9a:cf:95:3f:7d:4e:3d:0b:4b:68:63:85:14:71:9c:fd:
66:33:11:d8:d6:90:fb:6b:8c:28:c1:37:35:78:31:d4:14:b4:
9c:a3:df:1d:6d:3e:aa:a1:fc:34:6f:d9:9d:12:d1:62:88:0b:
71:36:64:62:1c:67:50:c8:5c:bc:79:1d:a3:86:d7:1a:f3:ff:
3e:85:b3:33:90:64:79:c2:98:a1:b8:df:2e:30:fb:ff:9e:ce:
97:c5:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:28 2025 by rpki-client