
$ rpki-client -vvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
File: 82564553AE299B22FAC12CA23483B4453FF22D0A.mft (raw, json)
Hash identifier: A+8GDWJOFsPv/1AzeEX9fU3iRT3BKQPcBY9yPa1Cu8Y=
Subject key identifier: 91:96:C4:D6:EA:BF:79:DB:19:DC:51:8A:E0:AC:5D:F5:6B:57:81:6A
Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
Certificate issuer: /CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Certificate serial: 4C9BE2B9D359AAE1F55D743B7AC2C4D236032DD9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
Manifest number: 0309
Signing time: Tue 04 Nov 2025 23:20:21 +0000
Manifest this update: Tue 04 Nov 2025 23:15:21 +0000
Manifest next update: Wed 05 Nov 2025 23:29:21 +0000
Files and hashes: 1: 34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (hash: b0LZdlSohkN/k9m+7iroz2wXa+A98i0ckfYU8mjVKRI=)
2: 323830343a346534343a3a2f33322d3438203d3e20323638323530.roa (hash: rnBtBtw8dRR3PHifJZfpt/2LJwnMPKg26paI1h0nEEo=)
3: 82564553AE299B22FAC12CA23483B4453FF22D0A.crl (hash: 8eeyP3FQjlwk+5ohvnDl4/oEfJT1qdcqx4TKEMxcTDg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9b:e2:b9:d3:59:aa:e1:f5:5d:74:3b:7a:c2:c4:d2:36:03:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Validity
Not Before: Nov 4 23:15:21 2025 GMT
Not After : Nov 5 23:29:21 2025 GMT
Subject: CN=9196C4D6EABF79DB19DC518AE0AC5DF56B57816A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:87:74:d6:a2:1a:f5:0a:4b:e7:a2:14:ed:
2e:d3:0e:48:b2:03:a7:04:f5:67:fe:da:7e:7f:87:
b1:2a:89:53:50:a1:db:2b:b3:2b:c6:d7:07:03:53:
e0:98:e6:b4:f6:31:87:aa:c5:1c:d4:11:ce:20:32:
34:82:d9:0d:16:0c:ab:92:0a:b6:1a:78:2e:83:70:
2f:be:7f:6f:c6:a0:98:cd:49:76:f5:44:e2:ad:c8:
48:a6:d9:e2:00:24:95:0d:62:b2:67:b8:22:96:dc:
46:19:71:9c:90:f6:db:7d:eb:15:06:ad:8f:17:d2:
33:03:3f:86:e8:e6:32:f1:40:21:b3:36:8a:1a:0b:
db:f6:f9:b2:ed:28:5d:a2:55:21:25:ee:86:d7:ce:
fc:d8:ff:6e:60:1f:26:68:82:05:85:c7:77:b7:8a:
33:84:aa:e8:d3:20:5d:70:76:de:b2:fb:bf:21:20:
d4:3d:59:74:0f:b8:e3:b9:3d:0e:f0:b1:75:a4:20:
9c:2f:54:d6:5b:38:37:ec:51:75:17:b8:28:f0:76:
8c:a7:52:41:57:ce:82:77:c2:2e:ec:d1:0f:ec:97:
2f:8f:73:73:41:68:df:c6:bf:77:3b:ed:3a:1f:6d:
27:05:2b:88:6d:58:51:5a:4a:99:95:18:b9:43:fd:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:C4:D6:EA:BF:79:DB:19:DC:51:8A:E0:AC:5D:F5:6B:57:81:6A
X509v3 Authority Key Identifier:
keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:97:90:78:7f:89:f9:28:68:f2:36:31:ce:6c:22:6c:31:9f:
56:26:3c:84:9c:ab:8a:49:db:93:e5:fd:35:88:09:10:92:91:
54:48:cc:c1:bb:5e:32:4e:38:fc:79:81:cb:fe:e6:db:58:b0:
90:0a:89:f0:26:ef:cf:56:58:4e:40:c9:a5:59:fb:8c:ad:d6:
7d:e5:cc:f1:46:8e:dc:67:89:7f:c1:75:40:92:ab:da:0a:47:
e9:1e:f7:c1:72:9f:ee:27:d6:20:23:8d:76:e6:f7:df:cc:d3:
03:b6:14:36:1b:b6:9e:bf:a2:0e:20:be:57:7c:3f:f3:3e:f6:
b5:6e:7d:ee:eb:a8:54:3c:cf:0e:9c:86:98:87:85:67:bc:c5:
66:ca:f5:7d:0e:71:7f:6e:03:d5:d9:6b:0a:d9:d9:c2:a8:a7:
13:3d:cf:a5:72:47:54:93:86:1f:fe:33:b0:53:6f:5e:c3:e6:
82:28:3f:45:6e:49:5b:84:18:25:11:f6:5a:91:d5:38:b7:6d:
fd:a4:cf:f9:19:b4:e4:53:2d:34:94:75:51:8b:8c:39:f5:57:
70:f7:7e:4d:b1:08:e5:47:7d:1d:ee:ef:2e:2f:9c:c3:cb:60:
fd:ed:b2:3c:e3:ed:f1:ff:51:15:1d:62:6a:87:8e:22:0c:c4:
36:0f:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:17 2025 by rpki-client