
$ rpki-client -vvf rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
File: 9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft (raw, json)
Hash identifier: vVXZGsKJdsw5iVzk5Epy3b6xjJPsL0Ea68Q3u3DKnOU=
Subject key identifier: 5D:49:F2:97:0B:36:D5:CE:D5:8B:20:85:8A:B2:50:31:3C:38:BE:1E
Authority key identifier: 97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06
Certificate issuer: /CN=9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206
Certificate serial: 6AB144ADA34D01888436A2FC3C9186B3444F5F95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
Manifest number: 030B
Signing time: Tue 04 Nov 2025 23:38:08 +0000
Manifest this update: Tue 04 Nov 2025 23:33:08 +0000
Manifest next update: Thu 06 Nov 2025 03:31:08 +0000
Files and hashes: 1: 323830343a6437633a3a2f33322d3438203d3e203532363334.roa (hash: FG0ELN+qQ4LDNywvUxeoWmKWREX27gGFDJ5LwaXJ+04=)
2: 3137372e3132342e3138382e302f32322d3234203d3e203532363334.roa (hash: k7FUUt1hHS1+wJfqeoAV8UTznJsYp2fk7y09VIgPCoc=)
3: 9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.crl (hash: c2rqQISYVr61tshhW2gkZD+/smxOk7701o1QpTKI7Qs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.crl
rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b1:44:ad:a3:4d:01:88:84:36:a2:fc:3c:91:86:b3:44:4f:5f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206
Validity
Not Before: Nov 4 23:33:08 2025 GMT
Not After : Nov 6 03:31:08 2025 GMT
Subject: CN=5D49F2970B36D5CED58B20858AB250313C38BE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:0e:c7:8b:9f:37:5a:5a:f9:53:e2:34:ea:
b1:96:9a:94:23:68:e3:3f:93:db:7c:33:84:26:02:
0b:5c:e7:13:7e:67:14:fb:be:9c:d0:9c:58:24:91:
7d:a0:4e:43:73:f2:f7:a9:ef:8c:87:6d:45:6e:6b:
9f:67:94:cb:26:23:81:a7:fc:2b:04:15:fc:9a:f7:
a3:2d:e3:34:d5:50:dd:69:c7:cf:a5:9e:7e:39:9c:
49:27:cc:02:d1:6e:e9:a3:50:9f:d9:e1:12:51:51:
21:4e:b6:db:9f:5c:ea:52:88:2c:94:c1:c7:f6:cf:
fd:b5:80:53:88:da:f4:b7:4a:19:00:b9:16:91:ff:
69:ce:39:2b:26:c6:b0:40:bd:7e:ba:de:5e:f1:c1:
0e:94:68:4d:e6:51:51:a5:27:b0:27:9a:56:44:c1:
5c:34:b9:09:be:2c:1a:24:60:26:ca:b9:6f:ca:2c:
36:10:96:5d:c2:16:8f:97:05:41:b2:60:74:d1:e0:
9b:72:37:ff:20:5f:69:cc:26:12:af:e3:1a:19:13:
5b:c0:92:5e:9a:21:e2:d8:bd:6e:38:80:f8:2c:66:
42:88:aa:68:41:10:8c:96:f8:2f:4f:e7:a0:6f:c5:
55:12:ec:7c:2b:f6:b8:e6:e6:ee:12:6a:67:a9:e9:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:49:F2:97:0B:36:D5:CE:D5:8B:20:85:8A:B2:50:31:3C:38:BE:1E
X509v3 Authority Key Identifier:
keyid:97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a9:98:43:64:da:0b:cf:8a:d9:a0:5e:b4:68:d7:36:9c:d9:
4c:7b:50:a6:92:91:c2:1a:8f:f1:fa:e4:f8:61:2a:71:d8:f1:
1e:55:0f:82:11:dc:a2:c8:cf:f8:51:bf:c9:7d:af:7e:5f:c2:
4a:5c:8b:93:d9:06:89:e9:77:3d:d8:54:1e:4d:ed:a8:ba:cc:
49:e3:31:e8:e1:50:26:d1:1b:fd:c6:64:e4:a5:2a:ac:02:05:
fd:3a:a2:b7:9f:54:c0:67:2a:83:c4:0a:88:86:e1:f7:30:3c:
23:ff:6f:4f:aa:3f:54:ac:22:ce:80:1f:d6:fb:c8:d4:0a:1a:
ae:d9:22:72:7a:3b:2c:15:d2:3f:07:ed:56:68:85:fc:9d:7b:
9e:9a:e6:0a:2f:bf:59:44:c0:cf:61:11:50:25:e9:8b:9d:c3:
7d:61:94:ed:eb:d2:3d:b0:21:c1:0e:82:24:66:7c:5e:88:6a:
bb:3f:6a:2e:b2:8d:74:27:d1:af:35:da:98:ef:f2:14:73:86:
bd:54:89:75:6f:eb:5d:2e:1d:51:b8:c6:46:d5:76:0d:9e:95:
06:5b:f2:bf:e0:45:0f:34:46:81:9c:8f:b7:72:f1:5c:11:c4:
a5:4f:22:f0:77:e0:ed:89:83:b3:5a:c6:96:b8:36:f0:70:d5:
bc:e1:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:35:53 2025 by rpki-client