
$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
File: 687D5F008B520395E4289191144220E2C472A669.mft (raw, json)
Hash identifier: Qv3JCUhGOW29CN49Hdo8JccPZDKz8+CcVHozJyHnqAc=
Subject key identifier: 28:05:45:66:10:0C:58:48:79:57:77:A9:B4:1E:B9:AE:41:F1:9D:1B
Authority key identifier: 68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69
Certificate issuer: /CN=687D5F008B520395E4289191144220E2C472A669
Certificate serial: 64600BE05D1D48272B158D345D25EE1D54692861
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
Manifest number: 3C
Signing time: Tue 04 Nov 2025 17:31:36 +0000
Manifest this update: Tue 04 Nov 2025 17:26:36 +0000
Manifest next update: Wed 05 Nov 2025 19:38:36 +0000
Files and hashes: 1: 323830343a326232343a3a2f33322d3438203d3e20323635313337.roa (hash: ijEr3f7j1DppUG1sCN5o0v9QuT/FdCpQy+KDTJiXd6E=)
2: 687D5F008B520395E4289191144220E2C472A669.crl (hash: rU+UGvQ82aZGhhbWp4wvg/2zLkBYqc5awxk/01WC+qY=)
3: 3134332e3230382e3234342e302f32322d3234203d3e20323635313337.roa (hash: kdjvMgt4WKFDG11VUvvzllBV2iitiEy2lt7hQDUlrNU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl
rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:60:0b:e0:5d:1d:48:27:2b:15:8d:34:5d:25:ee:1d:54:69:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687D5F008B520395E4289191144220E2C472A669
Validity
Not Before: Nov 4 17:26:36 2025 GMT
Not After : Nov 5 19:38:36 2025 GMT
Subject: CN=28054566100C5848795777A9B41EB9AE41F19D1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:71:d8:58:87:91:ce:7c:34:c0:a6:ad:89:
ba:98:ec:e3:df:c8:d0:13:ed:f8:b3:92:4a:ff:e1:
74:02:f7:cf:09:a7:bb:90:b1:f3:0e:46:8c:c0:63:
5c:dd:b5:d4:d3:98:38:f7:36:c2:a8:8b:c5:cc:2b:
8d:4e:31:83:3e:02:6c:64:c8:d2:d3:f8:ea:06:28:
dd:e6:ba:60:41:fd:30:f2:ad:a2:87:9b:61:b4:0c:
03:71:aa:1f:4b:e0:70:fd:88:31:d3:55:0b:d7:d4:
e1:7c:e9:ec:38:36:4c:e9:52:85:bc:45:4d:99:3e:
b3:c3:84:9d:34:d6:74:31:7a:37:87:01:6e:ee:57:
e3:21:de:40:c9:a7:c0:86:04:84:b0:3f:93:81:30:
00:82:b6:74:4b:ef:7e:69:dd:12:13:04:87:2b:e7:
58:32:9a:b7:f4:59:83:f3:45:b1:1e:b9:c8:f5:3e:
01:2b:16:85:be:10:0e:e7:9d:53:7f:2e:d8:2e:f0:
85:f9:49:9d:0e:59:ed:bb:56:01:f5:19:fb:86:ad:
56:d3:11:35:e4:3d:9a:47:7b:13:d9:04:3c:53:93:
df:7a:e8:ac:59:d5:5c:6e:97:7b:57:0d:cc:af:c5:
b9:c5:47:42:5f:dd:98:86:7f:ea:14:5f:96:a7:77:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:45:66:10:0C:58:48:79:57:77:A9:B4:1E:B9:AE:41:F1:9D:1B
X509v3 Authority Key Identifier:
keyid:68:7D:5F:00:8B:52:03:95:E4:28:91:91:14:42:20:E2:C4:72:A6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D5F008B520395E4289191144220E2C472A669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/0/687D5F008B520395E4289191144220E2C472A669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:2a:18:61:16:62:0f:86:18:ef:0c:c7:d8:5c:9c:ce:ac:
97:54:53:c4:f9:bc:22:e7:2e:c1:68:8e:fc:98:66:81:47:aa:
07:43:97:8b:44:f1:e4:9c:70:7f:d8:dc:2d:2d:02:d9:15:ff:
56:e8:ed:71:ae:c1:d0:2a:97:7b:73:8b:fc:f4:3c:a6:ab:02:
8d:6b:00:6b:c1:53:1c:c0:9a:44:7b:7b:d8:f3:ec:fe:71:77:
dc:b0:0c:c7:9c:ef:60:fb:19:e7:0a:f3:3a:3a:88:96:77:4a:
fc:d4:dc:a0:f8:d3:34:b8:91:fd:01:4e:9f:5e:85:5c:13:3f:
c0:9a:c7:c1:f0:32:48:4b:4b:6a:76:1f:04:38:5d:07:33:a2:
22:bb:02:17:a9:5d:4a:24:e4:94:f1:11:df:da:13:7a:8e:dd:
9b:f3:2b:17:6c:b0:d3:64:70:a7:a5:17:dc:d4:7e:90:37:49:
a0:d8:a9:15:84:61:77:f0:35:7a:16:99:ea:96:a4:15:46:26:
35:dd:fc:20:ca:4d:95:af:b2:75:84:1d:3b:65:35:e4:eb:b5:
c0:3d:d4:07:5d:00:c3:1d:dc:47:e9:db:b5:c5:ba:c8:0d:69:
0a:49:2a:aa:ef:2b:b4:37:b9:06:ef:f5:22:14:b0:1e:f3:05:
ff:15:f3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:31 2025 by rpki-client