
$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
File: 9BAD7480D68EE59406D3FBBE7F30557285587474.mft (raw, json)
Hash identifier: wV+dX3F+j2zvaxggZEuDZT37sLwKrVHATz8ub0uKfOE=
Subject key identifier: 2A:EA:88:E6:E4:F9:1A:59:91:FD:D1:9A:C8:70:96:B9:0A:D8:CB:12
Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
Certificate issuer: /CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Certificate serial: 4290A484BCAE375BF14AA409618D991BE34E9AF6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
Manifest number: 0308
Signing time: Tue 04 Nov 2025 22:48:34 +0000
Manifest this update: Tue 04 Nov 2025 22:43:34 +0000
Manifest next update: Thu 06 Nov 2025 02:07:34 +0000
Files and hashes: 1: 3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (hash: 3Bhf53UxlegeRmPK19xaYrMRnKpA/2NUddq4Nia28JA=)
2: 323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (hash: L06efUO1+vC2w7zP0ypGVVsEcp/3D2fU1pOY4umhEf4=)
3: 3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (hash: nePLrI7joRrgQbt2fVsGs3GZCbneiBCFymjlsXZNuSI=)
4: 9BAD7480D68EE59406D3FBBE7F30557285587474.crl (hash: znuqZLK86KPOZVYmX1Ikr0bK/BhpUqUxFta7I+SxwVw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl
rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 02:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:90:a4:84:bc:ae:37:5b:f1:4a:a4:09:61:8d:99:1b:e3:4e:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Validity
Not Before: Nov 4 22:43:34 2025 GMT
Not After : Nov 6 02:07:34 2025 GMT
Subject: CN=2AEA88E6E4F91A5991FDD19AC87096B90AD8CB12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:56:14:80:b0:1f:dc:29:c7:e9:c3:75:20:
ac:c3:a3:e6:6f:c9:1f:7b:61:d0:97:07:87:56:47:
1e:9d:07:db:a2:50:2e:be:db:3a:9d:67:95:83:5b:
24:2c:3d:12:2c:a7:24:81:68:c1:03:31:ef:f9:53:
c9:a3:b0:d7:52:a9:b6:f5:d7:35:62:51:7f:b5:4a:
42:a5:c7:c2:c3:55:87:6c:f7:47:91:2b:08:7c:e2:
80:45:a2:29:de:65:ff:08:33:0c:0e:68:44:94:84:
53:da:53:70:13:d6:2d:b9:8d:b7:13:e4:5b:b8:fb:
3d:b5:3d:de:81:10:a3:3c:86:07:3b:af:b4:28:97:
3d:04:b8:0e:4d:87:f0:fd:61:0e:8c:88:65:b4:85:
90:24:9e:08:2f:df:62:66:18:96:eb:91:f6:6f:f7:
59:37:e9:d1:86:ab:5b:2f:d3:23:9a:18:bc:d3:0f:
23:7b:75:93:5c:fe:e8:f9:d5:25:cd:7b:b1:4e:e4:
f3:b3:51:7a:77:d3:28:aa:02:cf:b1:dc:6c:3e:74:
05:44:34:f0:42:04:7a:c9:dc:4c:a4:0d:ff:34:99:
63:71:bb:d1:b5:96:75:6e:ba:f5:02:61:fd:64:6e:
5c:95:fb:b3:1a:51:1c:cf:6d:48:56:a2:a2:c4:40:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EA:88:E6:E4:F9:1A:59:91:FD:D1:9A:C8:70:96:B9:0A:D8:CB:12
X509v3 Authority Key Identifier:
keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:13:99:d4:8a:0b:36:80:1b:40:cc:59:09:69:43:1a:57:
87:23:8a:8d:32:a1:3f:2f:09:81:5d:9d:36:2a:aa:c2:1b:bf:
1c:3f:4d:6b:05:fa:58:db:35:f0:82:cf:5b:70:0a:c9:ba:b0:
8c:e1:33:55:84:ff:19:fa:5f:b4:5e:37:01:ee:87:6d:b7:d3:
e6:38:c9:03:41:fb:75:55:91:08:16:b5:06:e9:c7:37:26:22:
86:63:69:cc:66:8a:c2:a8:be:ee:4e:a5:45:ed:65:2c:79:50:
5e:7e:a9:39:59:e9:07:27:0a:de:97:6a:41:3b:d9:b6:82:95:
a0:f9:76:3a:48:3a:81:20:99:38:9e:11:77:23:d7:d1:fd:a6:
80:2a:4e:ab:0d:bc:cb:e1:fc:9b:89:68:6b:18:7f:f1:3a:6b:
b3:e8:07:bd:13:14:32:49:0b:11:9c:a1:32:7c:67:a0:b3:80:
8e:f1:e1:f1:38:e3:47:9e:84:8d:be:10:eb:d6:d1:f5:6e:8a:
1b:77:b7:25:0a:45:26:bd:bb:f1:55:5a:29:a8:e4:5c:e2:8a:
47:d1:b2:11:a2:69:58:cc:e0:ce:31:7d:bd:26:04:ee:e3:5b:
1d:ac:6a:fd:1e:3e:13:26:0a:4d:df:e4:e0:e9:71:da:3f:7e:
b4:62:ea:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:17 2025 by rpki-client