
$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
File: 237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft (raw, json)
Hash identifier: LWLLZdzze3Nm2CCUKTS5dPfMvshybjumD5EpY8WHcLI=
Subject key identifier: DB:DC:9F:9B:D3:43:52:E2:CA:0B:58:B7:C6:F8:9C:3F:AE:A0:05:BA
Authority key identifier: 23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
Certificate issuer: /CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Certificate serial: 6FA0CCF65A168F350EA4F329B3AE157156426FB5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
Manifest number: 30
Signing time: Wed 05 Nov 2025 14:20:25 +0000
Manifest this update: Wed 05 Nov 2025 14:15:25 +0000
Manifest next update: Thu 06 Nov 2025 15:36:25 +0000
Files and hashes: 1: 3139302e392e3130362e302f32342d3234203d3e20323731363037.roa (hash: TZdqbginZESFTaWiNfuHq6EWjsaXIffUhMsJzyjmSWQ=)
2: 323830343a376532633a343030303a3a2f33342d3334203d3e20323731363037.roa (hash: wtTk40M/Y/sa+Okxb6WaseAzw4p0FGOFxHM1NhAoT0Q=)
3: 323830343a376532633a3a2f33322d3332203d3e20323731363037.roa (hash: b3clEwqCI3P8YcKVBjN5GNmnsLdTIb0mQjtPOehhoFg=)
4: 237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl (hash: wGMH/aAazaBZgFbFiq5JSTC2sfCjMVwfBvxWfhuPWWM=)
5: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (hash: 0QIbpErBtuQPAI+3C1XspGhUhYB3kp1lED6jT2GYH9Q=)
6: 3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (hash: Q4gatQHmvouqKXKWkc4KYIDIi6b8S+UXYDlHbMIK07E=)
7: 3139302e392e3130362e302f32332d3233203d3e20323731363037.roa (hash: WBH4FJc7CIobjLqMzLThMCmIR1FV3fR1DTGTW9nTUk0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 15:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a0:cc:f6:5a:16:8f:35:0e:a4:f3:29:b3:ae:15:71:56:42:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9
Validity
Not Before: Nov 5 14:15:25 2025 GMT
Not After : Nov 6 15:36:25 2025 GMT
Subject: CN=DBDC9F9BD34352E2CA0B58B7C6F89C3FAEA005BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:7b:e7:c8:eb:2c:7c:74:5f:ab:d1:37:04:
de:27:f0:48:b2:89:e8:f8:34:2c:37:cd:ef:41:7e:
9c:00:8f:2b:50:80:39:72:e9:ee:c1:b5:51:ac:62:
d2:53:e3:2f:5b:79:d0:7d:ab:27:9f:21:23:6d:2e:
dd:77:7c:fd:90:72:8d:42:22:57:69:71:86:86:44:
d5:dc:50:05:3a:3e:9c:27:93:b4:1e:e2:97:b9:58:
c0:e9:23:82:32:a4:e2:09:aa:fc:33:72:8d:19:0b:
f8:28:9d:61:fe:f4:47:49:6e:e1:51:4f:96:e0:48:
20:34:86:32:92:87:96:24:d6:78:52:6c:b1:03:50:
47:cb:11:5c:bb:15:51:bd:02:d2:0b:7a:da:cd:f1:
99:36:50:3d:a7:0b:c5:e7:05:bd:02:49:0d:f6:27:
37:20:b7:2e:0a:17:8c:1d:62:f2:57:b3:5f:2c:c9:
f5:d7:26:2d:e3:b8:ed:db:4b:44:01:99:b6:41:d7:
ae:e0:a2:6d:17:e6:7d:88:3d:7b:0e:12:78:0d:c6:
fc:b5:0f:7a:2f:0a:82:c2:35:b4:f1:d8:29:cb:d3:
dd:aa:cb:0a:04:bb:f9:5e:ee:86:13:15:db:4a:ae:
a6:0b:c8:99:0d:c2:aa:8d:fb:84:f2:0a:b7:5c:88:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:9F:9B:D3:43:52:E2:CA:0B:58:B7:C6:F8:9C:3F:AE:A0:05:BA
X509v3 Authority Key Identifier:
keyid:23:7C:B7:F1:CD:45:AE:DD:61:C9:34:9F:41:1B:9C:9C:AF:0C:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/237CB7F1CD45AEDD61C9349F411B9C9CAF0C1DE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:00:f6:c9:96:b2:a3:be:6e:87:a9:11:f9:ed:f2:ed:7f:59:
dd:96:82:c9:27:ff:d6:d0:02:d8:4c:61:82:9e:84:1d:74:2a:
b1:ac:75:66:96:16:2d:67:26:63:0b:9e:3e:a0:21:f8:92:28:
8a:5c:45:ca:7f:74:fc:3c:38:01:56:74:2a:5c:10:02:e7:3e:
96:d5:09:80:a2:93:40:85:21:1c:99:a7:38:56:80:9f:09:3a:
f4:fc:d6:a8:42:32:9c:d3:00:e3:16:f9:43:4a:d6:5a:ba:a3:
61:1b:45:d2:e6:85:8b:98:f9:69:7f:8e:0d:58:69:90:2e:4b:
e8:e1:3d:ad:56:67:e0:39:60:7f:bd:6e:1b:e1:11:9a:0a:53:
07:c8:b6:94:f0:aa:bb:79:01:91:44:d7:90:d7:73:36:64:74:
2e:25:01:64:bc:78:b7:a3:92:2c:a5:54:6f:5d:b5:51:4b:eb:
fe:e2:80:34:87:4a:9e:fa:01:3d:22:36:13:c2:fc:13:9c:7a:
0c:85:da:cf:b0:aa:45:d6:bc:dc:bb:40:32:51:36:04:89:f7:
19:fa:ca:66:0a:11:bc:46:f2:44:b6:ca:b8:d8:8b:20:87:1d:
03:80:25:2d:77:97:ae:db:b7:23:d9:20:3f:1e:8e:fb:c2:31:
6b:78:f2:a8
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUb6DM9loWjzUOpPMps64VcVZCb7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3Q0I3RjFDRDQ1QUVERDYxQzkzNDlGNDExQjlDOUNB
RjBDMURFOTAeFw0yNTExMDUxNDE1MjVaFw0yNTExMDYxNTM2MjVaMDMxMTAvBgNV
BAMTKERCREM5RjlCRDM0MzUyRTJDQTBCNThCN0M2Rjg5QzNGQUVBMDA1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDB3vnyOssfHRfq9E3BN4n8Eiy
iej4NCw3ze9BfpwAjytQgDly6e7BtVGsYtJT4y9bedB9qyefISNtLt13fP2Qco1C
IldpcYaGRNXcUAU6Ppwnk7Qe4pe5WMDpI4IypOIJqvwzco0ZC/gonWH+9EdJbuFR
T5bgSCA0hjKSh5Yk1nhSbLEDUEfLEVy7FVG9AtILetrN8Zk2UD2nC8XnBb0CSQ32
Jzcgty4KF4wdYvJXs18syfXXJi3juO3bS0QBmbZB167gom0X5n2IPXsOEngNxvy1
D3ovCoLCNbTx2CnL092qywoEu/le7oYTFdtKrqYLyJkNwqqN+4TyCrdciNzlAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU29yfm9NDUuLKC1i3xvicP66gBbowHwYDVR0j
BBgwFoAUI3y38c1Frt1hyTSfQRucnK8MHekwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzAvMjM3Q0I3RjFDRDQ1QUVERDYxQzkzNDlGNDExQjlDOUNBRjBDMURFOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMzdDQjdGMUNENDVBRURENjFD
OTM0OUY0MTFCOUM5Q0FGMEMxREU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Np
MmFzUDkyZXFMY3dyZExFQm50YmVGZXBjbUpWVHg3alVzWkpkY2NaU0cvMC8yMzdD
QjdGMUNENDVBRURENjFDOTM0OUY0MTFCOUM5Q0FGMEMxREU5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
EAD2yZayo75uh6kR+e3y7X9Z3ZaCySf/1tAC2Exhgp6EHXQqsax1ZpYWLWcmYwue
PqAh+JIoilxFyn90/Dw4AVZ0KlwQAuc+ltUJgKKTQIUhHJmnOFaAnwk69PzWqEIy
nNMA4xb5Q0rWWrqjYRtF0uaFi5j5aX+ODVhpkC5L6OE9rVZn4Dlgf71uG+ERmgpT
B8i2lPCqu3kBkUTXkNdzNmR0LiUBZLx4t6OSLKVUb121UUvr/uKANIdKnvoBPSI2
E8L8E5x6DIXaz7CqRda83LtAMlE2BIn3GfrKZgoRvEbyRLbKuNiLIIcdA4AlLXeX
rtu3I9kgPx6O+8Ixa3jyqA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:52:48 2025 by rpki-client