
$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
File: CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json)
Hash identifier: SfUq+8wZGqtyqGpukUbsvCO+INgXZLfkpPvfDI0lVdI=
Subject key identifier: 11:68:18:BD:23:8B:90:DF:62:CA:EE:1C:45:13:08:7E:A6:E0:AA:24
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Certificate issuer: /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial: 5C37C912035035ACCBC1F98D4FA2354F44C901A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
Manifest number: 0308
Signing time: Wed 05 Nov 2025 04:30:00 +0000
Manifest this update: Wed 05 Nov 2025 04:25:00 +0000
Manifest next update: Thu 06 Nov 2025 08:05:00 +0000
Files and hashes: 1: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: Jb8dY49wYo6iafXyuS/44VHg9v3tOUVi3cX4Ku3W4CI=)
2: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: P2xrOWpHLY6EnnxO2vbmZAQg+LiKo7wZq6AG1cS/2u4=)
3: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: zYfkxrKkqL3tYrhKgo7C4mfgls0J10QOQdD+qfnFkqw=)
4: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: amplB2JLDJJAckH9IaBBkn+qJzqilzpjHxaNCTaCWYQ=)
5: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: YF8aSn8ZrakqqHsGkJ+aJMpg3UM2WIjA8ryfsST1/NQ=)
6: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: PVZgZ80ec1MnnTWZFJhH3Pekch5EzlVCo00ByHvruS8=)
7: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: t4980+rUmsxpFvMPiI7I8jUd83zOqWinNqdfWWIlnEA=)
8: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: smiarjDG+OGsbjcVsk86Au5AndvkklCegjiEmQy0Xdw=)
9: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: eJBkgue2M5PeX7HA+TZbr9kyv+9Hqw6VsgHSqBR6XUE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:37:c9:12:03:50:35:ac:cb:c1:f9:8d:4f:a2:35:4f:44:c9:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Validity
Not Before: Nov 5 04:25:00 2025 GMT
Not After : Nov 6 08:05:00 2025 GMT
Subject: CN=116818BD238B90DF62CAEE1C4513087EA6E0AA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:28:16:62:0d:e2:34:7a:8d:77:35:36:5b:65:
0a:43:ab:57:61:29:f8:9a:3c:47:8c:78:32:78:ae:
ae:26:01:27:dd:f7:94:9f:3e:4e:37:84:74:63:fc:
bf:6a:b2:63:ad:c7:0f:b8:8b:0c:93:0a:bf:0e:9b:
f2:b7:54:67:a3:e3:68:bf:ce:2d:84:ec:b3:e4:de:
69:72:df:bb:ec:fb:f0:4e:57:74:cd:01:ab:a8:15:
1d:b4:f3:7f:69:78:14:ca:1b:34:ca:6c:d7:24:5c:
d3:2f:55:82:55:74:ee:46:3f:3e:b1:55:f5:91:18:
d3:c5:b6:29:84:07:28:37:3f:d4:8b:a3:ad:51:39:
48:f9:3e:99:2a:b3:6e:33:e9:5e:52:b8:60:85:48:
62:c4:b1:e4:6e:92:ba:15:3d:13:3f:28:fd:87:c4:
44:6e:18:3f:c8:12:f4:99:01:81:7f:72:7e:04:c1:
c4:f9:41:3f:e9:e1:ce:27:62:f3:54:fb:bb:5c:8b:
16:ba:e4:dc:1e:30:e7:0d:92:8e:19:91:aa:21:0c:
bd:49:24:3c:61:1f:98:d4:4c:35:3b:c7:7a:13:3b:
21:2b:23:be:7e:d9:fa:58:ad:b0:72:e3:50:91:3b:
4c:ab:e6:0b:5f:56:57:01:94:8e:d3:fb:51:60:98:
66:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:18:BD:23:8B:90:DF:62:CA:EE:1C:45:13:08:7E:A6:E0:AA:24
X509v3 Authority Key Identifier:
keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:24:88:99:ca:6a:cb:94:09:2d:81:e3:82:f5:57:62:07:74:
f1:fa:75:01:df:de:83:f1:e5:66:a6:57:a9:61:3a:c4:15:94:
29:1b:2f:50:ff:b0:b5:2f:23:0d:08:7b:22:84:9c:16:cd:36:
0e:c4:4e:1b:f5:23:10:0b:51:b3:c3:f5:92:b5:53:bd:2c:0c:
e2:42:dd:8b:a1:78:5e:8c:3f:f6:8c:f7:a7:5c:ac:22:51:12:
a7:4c:8b:95:d5:27:e9:57:23:20:95:36:70:45:66:c8:d5:c4:
ff:7b:6c:7e:97:c6:0e:ba:a9:01:b4:c8:65:6c:0e:1e:88:34:
a7:55:67:6a:25:77:69:88:67:a9:a5:7d:5a:2a:4b:6f:ab:a9:
da:6d:d5:33:37:f4:13:c7:0b:51:1c:b4:fc:6e:e7:ed:02:8e:
4c:f8:36:2b:8c:e3:6f:c8:d9:84:82:8c:a2:ac:89:a0:72:7f:
fa:c9:34:87:b1:5c:c1:9b:49:49:01:20:79:ee:98:9f:e2:f8:
db:0b:77:4d:2f:38:3b:ba:ab:f0:06:bd:fd:88:7f:90:de:3f:
ab:7b:8e:0d:32:6f:b9:ef:3c:1d:6e:6b:83:22:9d:19:4c:7b:
e5:5e:3c:3f:c7:94:af:8a:0a:74:44:ab:de:be:7b:fa:9c:79:
39:b5:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:22 2025 by rpki-client