
$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
File: D7845391014F7F9470788EC727561382C9EE8439.mft (raw, json)
Hash identifier: gzQRTy7cV610n6AoJftssk+mf3AYGcW8qyieXJUKilM=
Subject key identifier: 60:FA:E5:F0:D0:11:BE:89:C4:5F:E2:86:7C:66:B6:93:62:6B:ED:5C
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Certificate issuer: /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial: 71445F57150C554825BCC9F715E4F97225C69113
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
Manifest number: 011D
Signing time: Tue 04 Nov 2025 16:30:01 +0000
Manifest this update: Tue 04 Nov 2025 16:25:01 +0000
Manifest next update: Wed 05 Nov 2025 18:07:01 +0000
Files and hashes: 1: D7845391014F7F9470788EC727561382C9EE8439.crl (hash: STUpH0G2ZObjQwFDfKmPtTllMLz4eLsWUrhY4llLbmk=)
2: 323830343a383336343a3a2f33322d3332203d3e20323732313935.roa (hash: rgvbKpGGOBBwQiU4IYW5VEIzyEidbzoZXS4wrkDPyRQ=)
3: 323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa (hash: hMS/g2zUJ8tEuCLfr1w0Pne2zylTOnyo12ThqYKt5gY=)
4: 323830343a383336343a3a2f33342d3334203d3e20323732313935.roa (hash: OVa1a5v+QoZlIYGiHT9SrqRCIw87bhwKdHhHZ59h0Vw=)
5: 323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (hash: R7pr90YgpFFP5Nc7qri0o39IOqCfCC6qNNTtfKj76zk=)
6: 323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (hash: GHlEJYoOK3UZfIQkY3Z0DdCy5FiSdSOVhsz6I91euIc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 18:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:44:5f:57:15:0c:55:48:25:bc:c9:f7:15:e4:f9:72:25:c6:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
Validity
Not Before: Nov 4 16:25:01 2025 GMT
Not After : Nov 5 18:07:01 2025 GMT
Subject: CN=60FAE5F0D011BE89C45FE2867C66B693626BED5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:5d:53:0b:a0:2e:10:d1:f9:d9:1a:c5:fd:
97:71:dc:fb:ca:d5:e3:a8:3e:63:47:9c:be:2a:e8:
16:98:a4:7a:05:44:ca:03:ec:17:4f:e5:b3:f2:07:
95:8f:16:e4:d5:f8:f0:72:c4:98:39:59:a3:bc:47:
54:9f:4c:5b:48:ad:bf:c7:2b:78:83:33:30:6e:e7:
be:c5:41:c5:8a:c8:5a:39:99:06:db:5e:7a:b7:ef:
b3:14:a6:28:e0:28:48:c8:8a:c4:c0:bc:b6:ca:01:
22:6d:02:91:44:ec:17:1a:25:51:6b:08:2a:c3:70:
04:8d:20:77:2b:36:98:78:56:66:83:ba:e5:6b:11:
c4:d7:35:16:31:27:de:aa:06:c7:c8:cb:2c:9c:45:
db:e6:84:2f:37:2f:55:c4:b6:8b:b5:ec:79:e1:df:
73:0f:de:bb:98:09:1c:96:81:73:8f:dc:77:aa:13:
fc:0d:ac:fe:3f:ed:13:f5:7a:6e:d7:ec:8b:24:53:
8e:1b:a9:00:39:24:85:de:8d:8e:b4:c0:fd:fb:21:
29:f6:c0:3b:3c:87:8e:1c:55:af:f5:c4:21:63:5f:
49:cc:41:63:1b:7d:31:36:46:f8:31:7b:04:d8:a9:
b4:b8:e5:4f:25:ba:c5:2e:e1:83:1a:5b:53:43:41:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:E5:F0:D0:11:BE:89:C4:5F:E2:86:7C:66:B6:93:62:6B:ED:5C
X509v3 Authority Key Identifier:
keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f9:f3:0f:e9:94:97:dc:f8:57:58:72:d1:3b:6d:9c:a0:45:
ad:c0:94:63:14:93:52:b7:e0:9f:f9:1b:7b:e4:1a:8a:21:d9:
96:59:51:8c:45:7d:e3:43:6e:92:e2:17:a5:6a:e3:c7:59:b2:
31:c1:94:b1:e8:00:f9:dd:b4:e9:93:65:a9:29:cc:c8:c8:4a:
ab:19:f3:ee:41:b8:56:73:3f:e3:3b:86:78:b3:37:b9:bc:fa:
d8:2f:4f:34:95:42:14:66:2d:dd:4a:6b:15:8c:98:ff:37:7c:
46:74:17:17:2e:cd:2f:ee:b7:ff:80:fb:da:ca:ec:96:32:d8:
9d:f4:4f:d4:fb:89:e0:fb:5a:42:db:60:05:0b:9a:fa:60:83:
52:b0:fc:32:ed:48:11:0c:53:fd:93:8c:6c:eb:1f:fb:7c:44:
ab:dd:26:1c:2d:c4:d6:a2:a5:86:65:62:10:b8:ce:4a:ef:6b:
b9:80:7c:c3:b3:1a:3e:24:42:1e:00:db:11:84:e2:d2:bb:a7:
2d:3a:e5:20:0a:7d:c1:29:5f:06:71:54:8b:dd:b9:b5:4c:d9:
9c:98:b2:1a:aa:21:84:ce:51:65:66:d6:27:c0:a5:30:9a:35:
d6:09:99:ec:8e:2d:ba:d7:b5:d0:b5:4e:78:2f:da:47:00:cb:
24:c2:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:10:05 2025 by rpki-client