
$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
File: EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft (raw, json)
Hash identifier: iZ7ZlsGfsVtgABkKr+r9z6iGoPgUmfxeK0rPjc+6uoI=
Subject key identifier: F1:B8:4D:8B:82:E0:2B:B1:4F:52:45:41:19:3F:52:B7:DD:23:25:8D
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Certificate issuer: /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial: 63B203589E6B247D741C8865630A07A7E81FC6F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
Manifest number: 02FF
Signing time: Tue 04 Nov 2025 20:26:18 +0000
Manifest this update: Tue 04 Nov 2025 20:21:18 +0000
Manifest next update: Wed 05 Nov 2025 21:51:18 +0000
Files and hashes: 1: 3137372e38362e39362e302f32312d3332203d3e20323632353036.roa (hash: zNEO5VjdUssSmDnatKQ0risH9GIqrvSntMswWswg8RI=)
2: EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl (hash: dMvXeCgaAAsUUsvtNpTdR6RTZWuQ47WUdC4DsWruD4M=)
3: 323830343a373235633a3a2f33322d313238203d3e20323632353036.roa (hash: DxpqrHeHTS5oYOfPy5TSY37lPlsXFR/7xTA1lwITK78=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b2:03:58:9e:6b:24:7d:74:1c:88:65:63:0a:07:a7:e8:1f:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Validity
Not Before: Nov 4 20:21:18 2025 GMT
Not After : Nov 5 21:51:18 2025 GMT
Subject: CN=F1B84D8B82E02BB14F524541193F52B7DD23258D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:89:8b:4e:86:14:31:04:a2:04:62:ca:ab:
7d:e9:a8:e7:1d:59:ab:b1:e3:88:36:1f:1a:b2:d7:
1c:3e:51:11:5d:da:2d:ef:58:f8:a0:a3:f2:f7:3a:
10:0c:93:d3:34:a7:fc:f1:e7:95:d6:33:2d:3a:28:
bd:53:40:70:d0:e5:38:0e:a0:b9:a3:aa:25:88:1e:
b9:09:07:b0:cb:70:83:fe:ef:ff:a2:e3:6e:2a:c8:
3b:10:96:6d:b9:d2:bc:e1:a1:da:4d:68:e4:36:76:
62:89:dd:2a:a7:1c:f1:9a:1d:39:3c:6c:57:b2:14:
a8:d5:2f:f8:b4:ca:c0:28:be:25:b9:7f:06:d8:b5:
de:3d:5d:6b:da:81:76:a0:13:f3:6d:f6:f7:46:f0:
4d:ad:b1:36:e0:92:dc:f9:76:6f:a7:28:19:02:ae:
73:b3:bb:48:3a:91:2d:3d:f9:f3:31:d0:2e:f1:be:
5a:de:1a:af:f5:60:aa:10:a0:a3:bb:cd:03:67:bc:
bf:13:37:5b:c7:b9:c8:52:5b:e8:d9:f6:8f:db:91:
36:d6:eb:16:05:20:23:ef:78:6d:0c:3c:29:b8:07:
66:14:62:91:68:66:64:22:ac:f5:fe:3c:02:94:88:
74:09:e3:a6:72:f2:c2:09:e0:f6:49:6e:24:5f:74:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:4D:8B:82:E0:2B:B1:4F:52:45:41:19:3F:52:B7:DD:23:25:8D
X509v3 Authority Key Identifier:
keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:fc:35:08:29:be:37:06:a9:6f:5c:5d:0c:85:ca:c5:76:
78:a3:59:bf:f7:a5:11:59:dd:ec:7b:d3:36:a5:25:5d:df:b1:
d4:6a:18:12:f9:8d:c2:68:91:29:64:7f:aa:7f:a5:b0:59:3f:
ef:c4:41:81:fe:5f:83:24:37:7c:8e:8d:d4:57:73:47:c7:bf:
17:85:2a:21:7d:16:65:49:be:2c:7a:fc:13:f3:a5:fe:c8:51:
f8:5b:08:ff:2c:ff:1f:56:17:f8:c4:69:38:3f:7b:50:ae:61:
18:ed:6f:fb:6f:e6:78:db:9c:78:37:90:68:ce:50:ae:e8:ff:
86:44:b7:0c:8a:8b:b1:42:c4:f3:e4:5b:9a:ff:19:de:e4:e0:
33:25:ee:e6:81:7a:73:99:20:ae:50:9a:82:7a:c8:ec:53:92:
ac:07:0a:8e:89:1f:44:f4:e1:d8:68:7a:04:d8:37:3d:b7:71:
9f:2c:0e:c8:7e:59:eb:b5:b6:e8:d4:05:6f:6e:e3:66:62:2c:
c7:a0:20:97:c8:55:a2:51:0c:af:ef:0b:b8:fe:63:9d:c8:2b:
85:f8:73:a4:45:66:88:a1:44:47:66:93:74:a0:4b:7f:ce:2e:
20:0a:27:cf:2b:c3:94:1b:4d:a0:c7:f9:ea:15:48:1f:64:3f:
a8:fa:81:e9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUY7IDWJ5rJH10HIhlYwoHp+gfxvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUzNkRDMUJDQ0NBRkJDODA1OTRERjdBREQ4RTQ4QTMx
QkJEMjY0RjAeFw0yNTExMDQyMDIxMThaFw0yNTExMDUyMTUxMThaMDMxMTAvBgNV
BAMTKEYxQjg0RDhCODJFMDJCQjE0RjUyNDU0MTE5M0Y1MkI3REQyMzI1OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4I4mLToYUMQSiBGLKq33pqOcd
Waux44g2Hxqy1xw+URFd2i3vWPigo/L3OhAMk9M0p/zx55XWMy06KL1TQHDQ5TgO
oLmjqiWIHrkJB7DLcIP+7/+i424qyDsQlm250rzhodpNaOQ2dmKJ3SqnHPGaHTk8
bFeyFKjVL/i0ysAoviW5fwbYtd49XWvagXagE/Nt9vdG8E2tsTbgktz5dm+nKBkC
rnOzu0g6kS09+fMx0C7xvlreGq/1YKoQoKO7zQNnvL8TN1vHuchSW+jZ9o/bkTbW
6xYFICPveG0MPCm4B2YUYpFoZmQirPX+PAKUiHQJ46Zy8sIJ4PZJbiRfdHzFAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU8bhNi4LgK7FPUkVBGT9St90jJY0wHwYDVR0j
BBgwFoAU7jbcG8zK+8gFlN963Y5Ioxu9Jk8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DYVUzdVVMRGQ5M1U5OFRZWFBWUXNoQ3VWM0R1NXlvVDhxaGdNemNaUFJx
LzAvRUUzNkRDMUJDQ0NBRkJDODA1OTRERjdBREQ4RTQ4QTMxQkJEMjY0Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRTM2REMxQkNDQ0FGQkM4MDU5
NERGN0FERDhFNDhBMzFCQkQyNjRGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nh
VTN1VUxEZDkzVTk4VFlYUFZRc2hDdVYzRHU1eW9UOHFoZ016Y1pQUnEvMC9FRTM2
REMxQkNDQ0FGQkM4MDU5NERGN0FERDhFNDhBMzFCQkQyNjRGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
pDb8NQgpvjcGqW9cXQyFysV2eKNZv/elEVnd7HvTNqUlXd+x1GoYEvmNwmiRKWR/
qn+lsFk/78RBgf5fgyQ3fI6N1FdzR8e/F4UqIX0WZUm+LHr8E/Ol/shR+FsI/yz/
H1YX+MRpOD97UK5hGO1v+2/meNuceDeQaM5Qruj/hkS3DIqLsULE8+Rbmv8Z3uTg
MyXu5oF6c5kgrlCagnrI7FOSrAcKjokfRPTh2Gh6BNg3PbdxnywOyH5Z67W26NQF
b27jZmIsx6Agl8hVolEMr+8LuP5jncgrhfhzpEVmiKFER2aTdKBLf84uIAonzyvD
lBtNoMf56hVIH2Q/qPqB6Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:05 2025 by rpki-client