
$ rpki-client -vvf rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
File: 964DA9AAC4C916D348B028DBC19BD5C08E437560.mft (raw, json)
Hash identifier: qSiwu2GebGDj2J7O2RJybWKDiNOpDKggB53litvhq1s=
Subject key identifier: 9F:DF:C5:69:79:A7:B3:BB:F2:EB:FB:7B:9D:B6:E7:AA:9C:DA:25:0D
Authority key identifier: 96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60
Certificate issuer: /CN=964DA9AAC4C916D348B028DBC19BD5C08E437560
Certificate serial: 7A0755B0B1036ABB737BEEBF5C5887BCA8B09ED4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
Manifest number: 27
Signing time: Wed 05 Nov 2025 10:19:11 +0000
Manifest this update: Wed 05 Nov 2025 10:14:11 +0000
Manifest next update: Thu 06 Nov 2025 13:49:11 +0000
Files and hashes: 1: 34352e3138342e3230342e302f32322d3234203d3e20323732343539.roa (hash: mA2x0qV3KIplcTlRhrF70yJUuAie/XmNs1/bE1FVb5M=)
2: 323830343a383138343a3a2f33322d3438203d3e20323732343539.roa (hash: nV+YnLkMXJ7NLvIA4eiIiwEhwUO0vMdc2CE6F8m39Pw=)
3: 964DA9AAC4C916D348B028DBC19BD5C08E437560.crl (hash: v9I6LWL69LbL1qf1PcXVZf0ITt1wCjOjcdrfK3uAFPc=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl
rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 13:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:07:55:b0:b1:03:6a:bb:73:7b:ee:bf:5c:58:87:bc:a8:b0:9e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964DA9AAC4C916D348B028DBC19BD5C08E437560
Validity
Not Before: Nov 5 10:14:11 2025 GMT
Not After : Nov 6 13:49:11 2025 GMT
Subject: CN=9FDFC56979A7B3BBF2EBFB7B9DB6E7AA9CDA250D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:d1:7b:56:7a:45:69:f5:56:25:36:89:f6:
21:4d:59:5a:e3:97:b7:8a:e0:c1:d6:2e:87:20:e2:
8e:3a:69:66:11:e6:9a:f1:b8:d5:26:26:53:2c:0c:
b0:20:46:dc:9a:bf:d8:dd:6e:6a:20:57:b1:69:4b:
77:44:82:12:9c:c4:6b:d8:3d:16:90:b4:eb:2b:9c:
fc:cc:e1:74:3a:0b:85:97:40:05:20:39:05:54:d4:
9e:ed:72:3a:cd:a5:a3:7f:99:9d:e5:8f:93:f8:1f:
27:98:a6:85:07:fb:a8:8a:43:f1:56:01:73:2d:a0:
b1:de:1a:ac:67:03:f4:cb:62:00:9f:ee:dd:15:62:
cd:dc:e8:30:d9:80:34:54:f2:0c:17:b7:b7:57:9b:
d9:2c:3d:91:99:df:29:2b:30:44:61:c9:52:c9:9b:
2f:ff:2f:7e:64:f2:d2:44:ab:ca:7d:06:3f:b6:8d:
64:48:d8:17:39:87:60:aa:8d:0d:24:37:78:b2:95:
33:19:2e:0e:81:05:3b:03:bf:ae:36:97:dd:f6:44:
d8:29:83:3e:28:5b:58:28:8a:b5:57:1c:7d:17:d6:
63:69:ad:67:d7:38:78:a2:ae:1f:72:58:c2:46:d1:
cb:a9:00:04:37:09:d5:cd:b2:7d:a1:a4:34:13:dd:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:C5:69:79:A7:B3:BB:F2:EB:FB:7B:9D:B6:E7:AA:9C:DA:25:0D
X509v3 Authority Key Identifier:
keyid:96:4D:A9:AA:C4:C9:16:D3:48:B0:28:DB:C1:9B:D5:C0:8E:43:75:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/964DA9AAC4C916D348B028DBC19BD5C08E437560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCXivgHhrbnT3LZEymLhJGkKcFgKbwNHDiX2ujyNxALD/0/964DA9AAC4C916D348B028DBC19BD5C08E437560.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:63:a1:87:1b:6f:67:20:16:f3:83:2c:53:fc:0b:27:0d:52:
f0:25:0d:de:ff:67:46:3d:1c:72:66:8f:e6:36:57:ee:f0:9d:
ff:fe:9d:14:d2:f2:b2:cb:a7:53:41:64:7a:dc:94:8c:14:49:
fe:21:d1:cd:25:33:d1:28:f4:53:3c:21:70:0b:b4:75:3e:7a:
32:69:d6:e9:37:d8:48:e8:36:3b:f0:2c:95:41:91:50:5b:d6:
87:7b:e4:5b:43:77:a0:03:ab:ad:ac:ee:9c:46:18:85:41:c0:
f6:34:c2:b8:16:2c:31:7e:47:e1:9c:41:5c:39:d2:f2:1e:f8:
60:e0:33:80:e9:bd:81:34:8a:85:d9:39:54:e6:bc:7f:1e:ff:
10:a5:30:4e:fd:8e:2a:35:3d:eb:cf:29:42:5c:b6:3f:17:02:
4b:5a:85:8d:6d:ce:a5:84:f1:ed:26:5d:fd:75:3d:97:e4:27:
70:30:08:cb:18:69:14:1b:f7:ac:b4:7b:b4:90:de:fb:99:34:
f6:d5:d4:51:7d:13:7f:6c:3f:11:5e:f4:dd:c5:a4:d0:9d:da:
94:c0:92:31:aa:fb:28:11:ed:bf:3b:63:8d:18:16:bc:9b:86:
0a:61:c0:cf:3f:ad:fa:b4:b4:8e:15:88:1c:f9:84:79:56:2f:
08:cf:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:03:53 2025 by rpki-client