
$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.mft
File: C9850FF27349373256297F63FF910624053FB89A.mft (raw, json)
Hash identifier: 88Y6rcN0Fi8wJooNjHU5hNMK2v7czfZtomIZSBfWusI=
Subject key identifier: 10:79:D2:75:FA:2F:06:E1:C8:B5:22:3B:B2:F3:B8:1E:19:3F:7E:5F
Authority key identifier: C9:85:0F:F2:73:49:37:32:56:29:7F:63:FF:91:06:24:05:3F:B8:9A
Certificate issuer: /CN=C9850FF27349373256297F63FF910624053FB89A
Certificate serial: 07AE48AF88D613818206089D7EB36FD1483B55A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9850FF27349373256297F63FF910624053FB89A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.mft
Manifest number: 030B
Signing time: Tue 04 Nov 2025 19:53:29 +0000
Manifest this update: Tue 04 Nov 2025 19:48:29 +0000
Manifest next update: Wed 05 Nov 2025 23:44:29 +0000
Files and hashes: 1: 34352e3136322e382e302f32322d3234203d3e20323638343835.roa (hash: ViWwpqSiB3hdJedARI1ZTgLV3rxiDkzBy8ngBDMXzDg=)
2: C9850FF27349373256297F63FF910624053FB89A.crl (hash: OYsiTgOrM+fM9WBMkmslEw99BHpwO7AbFEEGAmf1S0g=)
3: 323830343a353165633a3a2f33322d3336203d3e20323638343835.roa (hash: zyMlQScr6mgq/6XhlExsS2XfY6wJa7LEEWvlQmFwAJY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.crl
rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9850FF27349373256297F63FF910624053FB89A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ae:48:af:88:d6:13:81:82:06:08:9d:7e:b3:6f:d1:48:3b:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9850FF27349373256297F63FF910624053FB89A
Validity
Not Before: Nov 4 19:48:29 2025 GMT
Not After : Nov 5 23:44:29 2025 GMT
Subject: CN=1079D275FA2F06E1C8B5223BB2F3B81E193F7E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:b6:5a:4c:b7:e7:d7:9a:04:94:7d:cb:49:
92:a5:86:99:d8:dd:77:3d:f0:e6:21:5a:62:2b:06:
96:b6:19:d7:58:35:b8:30:1f:b8:c7:0d:0c:25:71:
47:de:e8:e6:5c:03:f1:4a:8e:b1:4e:37:0b:27:9b:
45:e7:40:c7:a2:6c:7a:52:b3:ea:91:e4:1c:5d:f3:
8d:9c:9f:f8:de:f0:6c:41:50:06:bc:7a:6e:0f:bb:
bb:85:dd:65:0e:11:f9:26:31:0d:df:35:7b:ee:50:
02:11:5e:aa:3d:0b:86:dc:3e:8f:09:59:05:6b:7f:
8d:40:9a:65:61:72:0d:a7:8e:7a:a4:a2:7d:15:71:
df:bd:86:7b:e1:88:50:b1:fc:0e:56:ee:c4:1f:61:
2b:e3:80:9e:5b:07:3b:4f:cc:cf:1f:69:a9:5e:59:
bb:18:0d:7b:6b:6b:9b:8b:c8:8b:f3:d5:e0:49:cf:
33:01:d4:f6:4c:7a:a7:44:86:e2:c0:30:20:82:63:
bd:99:17:2b:88:f7:af:22:55:23:4c:e9:48:d7:85:
38:b2:21:76:a2:af:e8:3d:97:4d:67:e1:31:b7:7a:
b2:41:37:00:13:c6:ff:aa:9b:23:e6:99:f4:1f:9f:
4b:d0:8e:d2:1a:68:7c:84:11:14:15:61:eb:97:e3:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:D2:75:FA:2F:06:E1:C8:B5:22:3B:B2:F3:B8:1E:19:3F:7E:5F
X509v3 Authority Key Identifier:
keyid:C9:85:0F:F2:73:49:37:32:56:29:7F:63:FF:91:06:24:05:3F:B8:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9850FF27349373256297F63FF910624053FB89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ac:e6:c9:f9:f2:4f:c6:25:76:0f:d9:59:ce:f9:13:4c:e7:
54:c1:7f:29:0c:17:13:8d:a7:31:f2:83:50:19:96:d4:66:61:
84:12:c8:b3:8b:cd:48:0a:33:ca:cf:43:44:7a:ac:fa:fd:bb:
5e:69:10:da:f4:56:ea:10:5b:6b:c2:09:15:41:76:35:59:d2:
5a:99:dd:06:c4:63:7b:ab:82:f4:97:33:15:fa:d3:bd:50:3d:
0f:87:78:93:ab:06:c9:46:76:ce:df:59:e4:4e:5a:1f:b7:2f:
37:a4:32:bd:64:59:c4:41:8f:b2:27:1e:d1:dd:6e:c4:a9:90:
1a:8b:aa:a4:64:da:d9:01:f9:78:b7:48:91:94:ec:84:e5:fc:
71:df:4d:5a:33:a2:87:41:71:c2:08:ae:5f:d5:89:b7:91:c4:
0b:8b:38:fb:9e:0e:54:5d:e3:57:cc:3a:58:ce:c7:cf:93:2a:
28:54:47:f3:79:ef:f2:42:38:4c:ee:9a:25:30:cf:ac:20:35:
35:f8:03:03:54:8a:04:68:3d:22:f6:f8:3d:fd:02:9d:74:ad:
bc:e8:4b:1d:19:28:b5:43:19:3a:37:c7:a0:76:d9:6e:fe:75:
d9:20:50:42:54:38:d8:9e:da:f1:00:d6:1a:aa:bf:b0:8b:96:
60:db:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:38:13 2025 by rpki-client