
$ rpki-client -vvf rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
File: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft (raw, json)
Hash identifier: nvolur8cIrfUGYQpIOFoFk0AKIr3K5u5davZ0bSsjqQ=
Subject key identifier: 95:DC:83:6E:AF:27:39:8D:75:CA:98:BF:99:75:94:80:6D:AD:77:12
Authority key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
Certificate issuer: /CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Certificate serial: 5DE964EE682AC98C9582844047C3852741343F90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
Manifest number: 0305
Signing time: Wed 05 Nov 2025 08:03:21 +0000
Manifest this update: Wed 05 Nov 2025 07:58:21 +0000
Manifest next update: Thu 06 Nov 2025 10:09:21 +0000
Files and hashes: 1: 3137302e37392e3232382e302f32322d3234203d3e20323636333131.roa (hash: P911MJb8bo8zJ2j5fIGU+UADWHGgL9jZ2aBW0Bz91k4=)
2: 323830343a333564633a3a2f33322d3334203d3e20323636333131.roa (hash: wcI0ieNyQdQrVcqiR6SjIzVgQugca+WqF9vNkOhZw68=)
3: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl (hash: tI/2DoRPWlo0pyrqXt9w7hNQt46b3heBf6tioMA2/gA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 10:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e9:64:ee:68:2a:c9:8c:95:82:84:40:47:c3:85:27:41:34:3f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB
Validity
Not Before: Nov 5 07:58:21 2025 GMT
Not After : Nov 6 10:09:21 2025 GMT
Subject: CN=95DC836EAF27398D75CA98BF997594806DAD7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:01:fd:6a:e5:c0:12:b4:29:d8:0c:9b:17:
07:3d:ff:8b:c2:73:fb:a8:95:39:b5:d9:4b:65:5c:
25:f0:55:32:f3:e5:48:be:29:d6:98:ad:8a:21:b8:
5d:63:ee:78:b2:ad:2e:8b:04:6e:21:79:0f:3c:cc:
a3:36:47:07:90:46:a0:d0:0e:24:81:ef:db:97:62:
b4:79:50:67:1c:ca:b5:bf:82:54:18:0e:db:11:02:
a7:55:28:e3:b0:aa:73:01:3c:f1:fd:63:62:44:48:
ed:ff:b6:24:f9:36:79:f8:82:06:92:02:b2:73:ec:
94:b2:33:13:c1:29:9b:27:36:10:47:c2:cf:6e:cd:
cd:14:75:6b:10:b5:ac:e9:8c:e3:a4:c7:35:a7:85:
51:ce:fb:1a:51:c0:09:e1:a5:d8:d1:fe:37:7b:cc:
af:20:f2:d3:57:39:24:6a:b6:93:9a:aa:23:0a:97:
59:7a:0a:02:5f:eb:51:a9:52:cf:2d:11:e9:2f:47:
7a:2c:5a:98:dc:80:b0:73:09:70:8f:df:7d:15:1f:
2c:45:aa:17:41:d3:db:07:33:15:46:fd:bd:62:1d:
54:5e:f8:3e:32:26:bb:ee:0f:e8:33:52:7b:1b:92:
29:40:49:2f:7c:c6:3d:44:bf:7d:eb:f7:3e:f7:81:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DC:83:6E:AF:27:39:8D:75:CA:98:BF:99:75:94:80:6D:AD:77:12
X509v3 Authority Key Identifier:
keyid:37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0e:f1:30:ab:66:71:f4:73:0c:0f:d3:46:a8:b8:2b:76:6a:
ab:74:72:5c:53:63:82:d7:47:f2:c0:a0:19:cf:4f:65:a0:c6:
a3:8c:66:9a:32:ef:63:5c:b9:4d:a1:76:05:41:e9:2f:67:d0:
d6:86:1f:28:1d:5a:f8:a9:74:c2:c3:cd:25:99:74:d9:52:eb:
6c:44:00:2f:ae:83:29:26:02:3e:1f:ee:37:4b:c4:f4:49:8b:
2d:d9:4f:0d:19:2c:40:b6:46:b3:57:b5:4c:1a:d7:1e:67:09:
ac:e6:15:ef:4f:8e:1b:8e:c9:fd:0d:e0:52:f3:2a:39:18:98:
0e:00:95:ff:74:45:fb:d7:b1:b3:97:0c:34:b8:6a:f6:fe:5b:
8e:19:15:4b:bb:9c:6f:78:43:2b:16:a3:56:07:a7:af:6b:58:
a6:2c:da:75:41:80:77:7a:82:90:f3:2b:1b:77:29:26:de:93:
12:69:03:40:3b:c6:1f:50:2e:fb:09:b2:c7:98:2f:eb:08:a6:
57:e5:32:2f:c1:3a:b6:3b:65:76:f0:45:ff:65:03:c6:82:f9:
d4:19:9d:94:44:fa:92:75:b1:00:3e:ed:3f:7e:fa:39:e6:86:
ed:a6:4f:b5:7d:4e:f7:a5:b0:36:24:3a:16:ed:03:80:36:d4:
3a:41:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:16 2025 by rpki-client