
$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
File: 88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft (raw, json)
Hash identifier: BdsN06197DMCiD+jXh6bXSvZjCDZQgFR6Fse0xC+6C0=
Subject key identifier: 0F:84:90:AB:65:A7:45:70:FE:38:1E:D2:C5:48:5D:85:25:9C:82:3F
Authority key identifier: 88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9
Certificate issuer: /CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9
Certificate serial: 04B49B29DB5FAE6F74DAC182DC64E916DF8B0A04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
Manifest number: 05
Signing time: Wed 05 Nov 2025 08:03:23 +0000
Manifest this update: Wed 05 Nov 2025 07:58:23 +0000
Manifest next update: Thu 06 Nov 2025 08:42:23 +0000
Files and hashes: 1: 88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl (hash: A8EwOaSpf5D3XuskOldwICyu6ypSZZ+q/zZ2YSfFEnY=)
2: 323830343a373938343a3a2f33322d3438203d3e20323731333130.roa (hash: Ff92MSPuBGea0tOgQwPZyiajCiSgWi2swur7ZJvCo3E=)
3: 3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (hash: cro6hIVcjeEeiAcnH5fnwHU14NKf7FT3DtgKoOW8ojg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl
rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 08:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b4:9b:29:db:5f:ae:6f:74:da:c1:82:dc:64:e9:16:df:8b:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88D55FAA7B5E1E71D137476BA24267E7BDBD54A9
Validity
Not Before: Nov 5 07:58:23 2025 GMT
Not After : Nov 6 08:42:23 2025 GMT
Subject: CN=0F8490AB65A74570FE381ED2C5485D85259C823F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:55:a0:a3:f9:66:c5:24:54:e2:a2:ef:b1:
c9:6b:ee:a1:49:4d:1a:6c:8e:ef:89:ac:93:f2:1e:
0b:95:38:35:68:0d:7c:de:23:7d:54:a3:69:a3:25:
6f:dc:ac:68:92:60:71:75:b6:d7:7e:a2:54:23:6c:
97:55:8a:f2:27:45:b0:ad:25:14:d5:07:ce:46:3b:
27:02:c6:ca:15:a8:79:3b:fe:41:0a:8d:df:2a:79:
18:08:8a:a6:61:aa:9a:4e:0d:41:89:f1:69:2f:43:
4c:b2:3a:5f:8d:87:96:71:40:65:73:1c:de:a5:c7:
7f:5c:81:f6:8b:e6:70:a0:2b:8a:76:57:14:96:14:
65:66:e3:11:22:c4:45:b5:0f:18:78:13:c3:4d:c0:
fc:b3:88:9b:c4:8d:c0:79:07:78:3c:73:69:1b:b7:
9e:a8:79:06:35:8a:1f:5b:13:94:34:57:b7:32:4e:
96:d1:ea:c8:90:de:0d:44:14:bc:89:82:e5:26:09:
3d:dd:c0:c4:c5:17:7c:ac:0d:4c:41:a5:c6:3b:9d:
02:48:ce:2e:5d:10:ff:66:7f:6c:5b:e1:2b:da:2d:
8a:c5:8f:2a:35:36:30:bc:94:7c:c5:2a:70:07:fc:
90:30:9e:d8:ae:e7:72:6a:ed:9a:9e:b1:a1:c0:79:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:90:AB:65:A7:45:70:FE:38:1E:D2:C5:48:5D:85:25:9C:82:3F
X509v3 Authority Key Identifier:
keyid:88:D5:5F:AA:7B:5E:1E:71:D1:37:47:6B:A2:42:67:E7:BD:BD:54:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/88D55FAA7B5E1E71D137476BA24267E7BDBD54A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:2f:82:40:56:ff:35:6b:d7:08:ca:52:82:6e:3f:85:dc:
78:a1:6c:a3:93:0a:3e:97:c6:a0:d2:a6:48:2d:d2:14:53:71:
65:f2:e2:f5:e8:75:9f:b1:12:0b:ce:c1:20:28:cc:4f:5e:bc:
59:fe:61:30:94:d9:7a:b2:0e:3c:26:21:98:d1:ff:76:86:57:
34:22:81:d1:97:70:4d:18:81:41:c5:60:38:b5:37:78:72:22:
c1:41:ab:1f:f0:59:46:4c:36:45:8c:ab:60:a8:8e:75:24:35:
7e:dc:75:7f:e2:78:41:ad:9b:ac:a0:7f:ce:be:52:53:08:95:
a8:a4:7f:8d:a5:e9:d1:c5:19:2e:49:e2:00:56:4b:b6:3c:14:
c6:01:1b:31:dc:14:3f:8d:a5:0f:8d:8f:9a:84:34:63:f8:fd:
80:ff:61:cd:e3:a2:6a:2b:45:72:99:4e:69:cf:64:4a:b8:a7:
6a:87:3d:7c:0b:e8:fe:29:06:6b:63:3b:08:24:2f:fd:be:10:
7d:fb:cc:88:8e:9a:3d:b6:00:23:ba:7c:51:84:8c:ea:a8:cc:
37:7c:6b:a5:c1:0a:fd:65:66:0c:fc:35:d2:d9:49:6b:54:b2:
bb:f7:b5:2c:77:dc:3c:8f:e6:95:03:1b:30:7b:44:44:1b:dd:
3a:87:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:18:49 2025 by rpki-client