
$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
File: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json)
Hash identifier: VPGEEVEvEZlCNPTKjKoXBaG9bTdfbUGtEuvsqS3/3sA=
Subject key identifier: E8:82:5D:E3:92:41:8E:FF:F8:11:EA:20:61:5D:10:6D:64:D9:7F:2D
Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
Certificate issuer: /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Certificate serial: 6E3E1F20F92C484F3E3FA39498D9B74DC4B48588
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
Manifest number: 70
Signing time: Wed 05 Nov 2025 19:58:51 +0000
Manifest this update: Wed 05 Nov 2025 19:53:51 +0000
Manifest next update: Thu 06 Nov 2025 21:54:51 +0000
Files and hashes: 1: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: O80xQT9wV/ukPMi9yfnPx9aapAnZtVbJa9D9Ch+KzcU=)
2: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl
rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 21:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3e:1f:20:f9:2c:48:4f:3e:3f:a3:94:98:d9:b7:4d:c4:b4:85:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0
Validity
Not Before: Nov 5 19:53:51 2025 GMT
Not After : Nov 6 21:54:51 2025 GMT
Subject: CN=E8825DE392418EFFF811EA20615D106D64D97F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:75:ca:ad:fc:31:5c:cf:97:e3:e0:e2:86:
ef:be:15:05:29:f4:99:14:d0:ea:aa:1a:52:58:37:
37:90:4c:bd:bc:6d:44:85:80:07:31:2c:13:fd:fb:
b8:39:d1:c7:a8:e9:ff:6d:c9:0f:28:93:cf:a4:5c:
42:f8:aa:93:59:af:05:d4:6b:b8:5d:11:eb:a8:a1:
d4:2e:6b:89:e4:95:f7:43:e5:09:af:2c:17:e9:63:
65:59:a9:fb:5d:76:5a:2d:b4:9a:57:6d:30:c0:75:
7b:1f:96:b7:89:65:cf:cb:cb:36:76:46:83:4f:94:
a2:35:d7:97:70:98:a9:c1:c5:39:86:50:08:90:38:
e4:a1:57:29:4f:0e:50:0f:46:68:28:62:7c:31:26:
29:66:e3:2c:d3:46:f4:13:5a:fe:bd:b5:19:7e:e1:
e0:e1:1b:f2:39:e9:c3:c5:ee:76:84:34:ef:68:85:
9f:13:c0:ba:40:44:db:df:cd:db:a0:ce:d4:63:17:
17:8b:66:18:64:13:f6:b1:95:64:e6:21:b2:ca:8f:
94:f8:a0:df:c6:d7:f8:fc:38:68:65:a9:d4:75:bb:
87:6e:d8:64:d9:ca:87:c3:87:5e:b5:00:46:6d:32:
e0:0a:08:9b:bf:6f:2a:5e:ed:6d:18:63:e1:60:83:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:5D:E3:92:41:8E:FF:F8:11:EA:20:61:5D:10:6D:64:D9:7F:2D
X509v3 Authority Key Identifier:
keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:86:06:c0:8d:1a:0d:46:e9:0d:58:6d:a9:f1:47:84:36:
dd:cf:ce:3d:db:ae:f6:e7:86:89:2d:3f:3c:59:aa:07:5d:a1:
b6:3a:24:24:29:b7:8b:2e:b6:19:c4:52:18:72:db:52:de:b0:
cf:4a:fd:7d:3b:cd:9b:4c:64:cb:08:d0:ef:93:dd:a1:c8:47:
8a:15:98:e3:08:6e:cc:84:88:d7:19:9e:59:e0:97:d3:79:27:
e8:4e:3b:3e:27:cb:ae:21:aa:a2:ef:02:4b:c1:5f:02:aa:4c:
ad:78:7a:f4:5a:c4:17:3d:54:20:c2:f2:1e:09:67:56:af:17:
7e:f2:d6:4e:49:df:63:85:5d:cc:26:c2:fa:71:b4:99:b6:2c:
b2:66:6b:7e:41:e5:3f:18:ac:b5:97:a2:58:13:19:fc:43:0b:
a7:f4:c4:3c:91:a9:a4:b2:ee:13:69:c5:24:89:c6:c0:05:45:
f5:8c:cb:c0:34:46:be:ba:a3:1b:cb:74:0d:1a:62:1e:43:46:
13:49:d7:43:49:c1:1c:10:be:8e:a5:39:7c:c3:40:3e:ef:a3:
94:56:8e:d9:6e:14:91:4f:68:dd:5e:16:2e:d0:ce:eb:94:99:
f0:b9:d5:8f:a1:fd:9b:69:20:37:7d:dc:0d:29:c0:b2:4f:21:
74:e9:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:44:15 2025 by rpki-client