
$ rpki-client -vvf rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft
File: 2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft (raw, json)
Hash identifier: nPi9aLFlui+eq21ICDqANkhRdRIzx5xxzrlasQFLB5Y=
Subject key identifier: D0:AB:D8:E1:D2:50:4D:30:AB:AE:DE:1F:D0:EE:16:D8:C6:19:0F:FC
Authority key identifier: 2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF
Certificate issuer: /CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF
Certificate serial: 1A3CDC417F8BEB5BAE79A7B0D4850DF6A3DBBAEC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft
Manifest number: 0D
Signing time: Tue 04 Nov 2025 19:33:33 +0000
Manifest this update: Tue 04 Nov 2025 19:28:33 +0000
Manifest next update: Wed 05 Nov 2025 20:03:33 +0000
Files and hashes: 1: 2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl (hash: P4QES696ZfLN2B5dwjAP8Ku/83yjPFcF3JaIIYWRpK4=)
2: 3136382e3139352e34342e302f32322d3332203d3e20323635343038.roa (hash: MK0u1J0qHracVd3QCLPP497bdJP46gdfgqWbqN0UK1o=)
3: 323830343a333361303a3a2f33322d313238203d3e20323635343038.roa (hash: Kp/b8Wyk12Q+ELS2bZBR7kZz/oKY/oUsXFFo2MBDT0Y=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl
rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3c:dc:41:7f:8b:eb:5b:ae:79:a7:b0:d4:85:0d:f6:a3:db:ba:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF
Validity
Not Before: Nov 4 19:28:33 2025 GMT
Not After : Nov 5 20:03:33 2025 GMT
Subject: CN=D0ABD8E1D2504D30ABAEDE1FD0EE16D8C6190FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:b7:73:56:5b:48:cd:a2:34:2a:37:0a:65:
f9:1c:a0:5e:8b:08:a2:4c:9b:03:e1:4d:72:02:c7:
9c:83:a4:9e:17:52:03:b8:86:ff:4a:c7:06:8a:d5:
7f:b3:55:38:4a:90:84:5b:67:80:77:1a:cf:1d:46:
8e:f7:0c:70:a0:7c:33:b9:f5:87:9f:db:02:46:6a:
97:d6:71:0d:40:4c:dd:7a:a3:d4:73:0f:79:c6:ed:
3c:c8:3c:90:7c:c0:86:2a:9f:9a:55:55:8f:b1:ce:
c7:b6:57:06:85:12:ca:14:0e:0b:24:6c:19:c2:1d:
df:6e:0e:98:57:fe:19:1b:be:25:64:ff:ae:0d:f1:
0e:74:52:6c:06:87:34:ed:46:dc:46:f6:2f:9e:d2:
9d:88:f9:a1:ff:85:c1:a7:2c:ae:b5:6d:65:2c:08:
bd:ce:16:1d:ae:a5:f9:de:69:6b:19:28:eb:92:03:
48:1b:c5:ba:8f:bc:85:e6:65:17:70:d0:08:2a:f3:
e8:25:8b:d5:b0:aa:1d:7f:6d:a9:39:10:4b:86:73:
a8:76:8b:e9:1d:b8:07:28:7f:d7:90:03:1f:55:2c:
b0:63:20:0c:f9:4f:ff:90:05:fe:a9:e0:45:8e:e0:
76:9d:fa:0d:a0:19:92:51:9c:e3:8a:cf:fd:0c:46:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:D8:E1:D2:50:4D:30:AB:AE:DE:1F:D0:EE:16:D8:C6:19:0F:FC
X509v3 Authority Key Identifier:
keyid:2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:24:64:79:91:ac:84:f7:da:a8:51:15:01:d2:6d:be:a2:4d:
24:a9:77:78:6b:a9:85:48:71:30:d3:61:fa:4e:eb:d6:4b:c9:
54:90:50:a9:2f:76:c2:06:71:31:96:ee:73:5f:d1:ad:d9:76:
75:77:0d:c7:de:61:44:48:e1:f0:b3:0a:be:fb:9e:7a:2a:de:
4f:2b:4d:96:3f:de:4e:b0:12:51:cc:be:d3:00:1d:be:78:5d:
a5:42:77:2d:1e:53:78:f8:6c:d4:b9:fd:0c:f3:f9:bb:8b:6e:
29:94:23:1f:c7:10:a6:d1:41:23:62:5e:14:0d:89:0b:a1:05:
af:1a:17:4d:41:e2:97:a0:b8:fd:94:8a:74:20:3a:a1:89:9c:
a4:4b:1c:e2:4a:82:0f:84:da:80:c8:a1:7e:41:6d:19:f7:70:
6d:5a:01:2e:a4:bc:aa:b6:02:31:2e:09:e1:7f:f5:ab:5b:0d:
ea:4f:40:b0:d9:b7:1b:69:07:4f:5f:cd:29:63:1f:c6:d3:aa:
71:91:0a:3a:42:d0:86:70:3d:8c:1e:57:f1:ad:db:ab:ab:00:
49:a7:f6:36:eb:c4:c1:e0:61:e1:e6:e0:0f:13:ba:d6:79:aa:
ab:d2:25:33:96:13:fe:6d:92:3c:a3:fe:2c:c1:1e:50:3d:1e:
49:95:95:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGjzcQX+L61uueaew1IUN9qPbuuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY2RTNBODc4QTEyNUI3NEJCMjkyQ0U1NDEyQTUyM0Y0
QjFEQ0JBRjAeFw0yNTExMDQxOTI4MzNaFw0yNTExMDUyMDAzMzNaMDMxMTAvBgNV
BAMTKEQwQUJEOEUxRDI1MDREMzBBQkFFREUxRkQwRUUxNkQ4QzYxOTBGRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HrdzVltIzaI0KjcKZfkcoF6L
CKJMmwPhTXICx5yDpJ4XUgO4hv9KxwaK1X+zVThKkIRbZ4B3Gs8dRo73DHCgfDO5
9Yef2wJGapfWcQ1ATN16o9RzD3nG7TzIPJB8wIYqn5pVVY+xzse2VwaFEsoUDgsk
bBnCHd9uDphX/hkbviVk/64N8Q50UmwGhzTtRtxG9i+e0p2I+aH/hcGnLK61bWUs
CL3OFh2upfneaWsZKOuSA0gbxbqPvIXmZRdw0Agq8+gli9Wwqh1/bak5EEuGc6h2
i+kduAcof9eQAx9VLLBjIAz5T/+QBf6p4EWO4Had+g2gGZJRnOOKz/0MRttBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0KvY4dJQTTCrrt4f0O4W2MYZD/wwHwYDVR0j
BBgwFoAUL246h4oSW3S7KSzlQSpSP0sdy68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWtuSDFBZXFkWFQ2R0xtdUpzWnNNcGJKUktXZWtEZUNTcmNYc3lMUERq
c2YvMC8yRjZFM0E4NzhBMTI1Qjc0QkIyOTJDRTU0MTJBNTIzRjRCMURDQkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNkUzQTg3OEExMjVCNzRC
QjI5MkNFNTQxMkE1MjNGNEIxRENCQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OWtuSDFBZXFkWFQ2R0xtdUpzWnNNcGJKUktXZWtEZUNTcmNYc3lMUERqc2YvMC8y
RjZFM0E4NzhBMTI1Qjc0QkIyOTJDRTU0MTJBNTIzRjRCMURDQkFGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWiRkeZGshPfaqFEVAdJtvqJNJKl3eGuphUhxMNNh+k7r1kvJVJBQqS92wgZx
MZbuc1/Rrdl2dXcNx95hREjh8LMKvvueeireTytNlj/eTrASUcy+0wAdvnhdpUJ3
LR5TePhs1Ln9DPP5u4tuKZQjH8cQptFBI2JeFA2JC6EFrxoXTUHil6C4/ZSKdCA6
oYmcpEsc4kqCD4TagMihfkFtGfdwbVoBLqS8qrYCMS4J4X/1q1sN6k9AsNm3G2kH
T1/NKWMfxtOqcZEKOkLQhnA9jB5X8a3bq6sASaf2NuvEweBh4ebgDxO61nmqq9Il
M5YT/m2SPKP+LMEeUD0eSZWVPQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:24 2025 by rpki-client