
$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
File: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft (raw, json)
Hash identifier: kjqqRSppW8I+5igoMpVJGQwo4Vw/3SLfJBhSCQuIKyo=
Subject key identifier: 20:AD:84:09:18:C3:90:DB:8C:04:A0:20:7B:11:CE:F5:21:6F:55:81
Authority key identifier: 39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86
Certificate issuer: /CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86
Certificate serial: 5F759BA9735AEA4C02CC15F7049191637E51E415
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
Manifest number: 13
Signing time: Tue 04 Nov 2025 21:36:22 +0000
Manifest this update: Tue 04 Nov 2025 21:31:22 +0000
Manifest next update: Wed 05 Nov 2025 23:35:22 +0000
Files and hashes: 1: 3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl (hash: S8/OkDX+cMWwiL0b5L0V6zkKQswgJ5pfTbh9swb/rwc=)
2: 34352e3138372e39362e302f32322d3332203d3e20323639343632.roa (hash: NaiFTgXjlXyLcqdW+W3yI7vIOFQqkj4gTIl4hxoKefI=)
3: 323830343a363530303a3a2f33322d313238203d3e20323639343632.roa (hash: dYFJ+TK53yUSuiBuIq6FGVmH+goh9YSou9bovn9JMV8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl
rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:75:9b:a9:73:5a:ea:4c:02:cc:15:f7:04:91:91:63:7e:51:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3935A5CB90CDC5E4162CA9E632CE43CE6917ED86
Validity
Not Before: Nov 4 21:31:22 2025 GMT
Not After : Nov 5 23:35:22 2025 GMT
Subject: CN=20AD840918C390DB8C04A0207B11CEF5216F5581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:aa:06:a9:d3:ce:e2:d1:e9:39:93:c4:72:
c7:93:52:6c:2a:b4:fc:fb:c4:9d:31:cc:04:8a:71:
b3:ba:48:e6:54:84:77:ca:90:23:b6:10:c2:c6:ef:
67:c1:8d:2d:69:c4:19:e6:cf:2f:a6:66:43:37:dc:
1f:67:19:da:3b:d1:90:c9:1f:54:72:64:38:9c:b4:
cf:66:9d:8c:6d:a0:80:0c:a0:ab:48:1a:ab:3c:2c:
f5:00:ae:82:a1:57:a1:b1:d3:c7:77:52:67:e0:93:
fd:49:0f:fa:3f:da:d8:bf:48:5a:3c:d0:0d:23:2d:
79:5e:d5:f3:9d:f5:57:26:4d:9d:b8:da:10:8e:19:
31:07:be:7c:b2:49:35:57:aa:19:b5:31:80:ad:49:
27:8a:79:14:62:66:6a:35:ad:d2:a0:14:2c:c6:75:
25:24:1d:ae:81:8d:e0:7d:3f:eb:d2:48:cd:19:6a:
c4:43:02:a3:12:04:8d:9f:f2:a2:b4:93:c1:b6:d1:
20:bc:94:64:ef:97:54:23:88:41:6d:8b:fd:0f:3f:
80:b3:8e:36:bb:93:1c:43:c5:88:19:b9:cb:39:cb:
33:c1:90:ed:f5:e0:6e:21:f7:c8:ad:01:d3:36:97:
c0:25:25:f9:7c:90:49:b3:7b:ec:6a:aa:0d:2f:c3:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:84:09:18:C3:90:DB:8C:04:A0:20:7B:11:CE:F5:21:6F:55:81
X509v3 Authority Key Identifier:
keyid:39:35:A5:CB:90:CD:C5:E4:16:2C:A9:E6:32:CE:43:CE:69:17:ED:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/3935A5CB90CDC5E4162CA9E632CE43CE6917ED86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2e:81:cb:be:69:6f:47:34:70:68:21:c3:44:04:ee:f3:03:
16:ff:ea:a4:92:25:50:82:4f:f8:a0:6a:03:2f:63:1a:f6:8e:
d0:3e:57:92:c1:98:8f:46:97:85:b3:f2:8d:36:09:4d:c2:ef:
b0:51:d4:f7:50:87:4c:8e:db:2c:ba:06:10:75:ea:12:28:5f:
94:2c:86:08:2e:91:1e:7f:56:fb:a5:16:1c:7c:af:7e:1d:49:
38:c2:6b:71:b4:42:72:15:70:22:d5:71:ef:e0:7d:93:ad:79:
78:d8:5c:16:f5:4e:d3:79:57:33:22:0c:6f:c8:22:bf:e0:ea:
46:26:fa:40:e9:4a:86:77:4b:63:f7:ed:fc:6c:d7:f2:b2:8f:
fc:17:41:0d:bc:52:1f:66:2f:da:6f:06:4d:34:9f:ad:ae:3f:
ff:79:91:25:df:b6:28:8d:07:b7:4c:a8:b6:e7:9c:b8:f6:43:
33:7d:a9:bf:72:cf:37:f1:fc:59:4d:15:da:2a:dd:7a:26:36:
5a:c0:14:fa:2c:16:24:81:aa:08:0a:7e:71:71:84:51:1c:a7:
c6:13:62:e8:23:80:d2:99:58:77:11:e9:84:78:d1:92:8e:56:
27:38:08:23:7d:9d:1b:7a:93:66:8b:cc:77:48:01:50:d1:02:
5a:ff:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:03 2025 by rpki-client