
$ rpki-client -vvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
File: B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft (raw, json)
Hash identifier: jbywRvwrv4UlFYBMI1oIhkVbglH4dlSlHBEsUwX4kSw=
Subject key identifier: AB:4A:09:BA:BD:F0:5C:73:B2:C2:A9:8A:1B:2B:74:BE:99:B7:5A:02
Authority key identifier: B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1
Certificate issuer: /CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1
Certificate serial: 1CE03738CE82E8577E5B75F85927D7E25ECF871D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
Manifest number: 0140
Signing time: Wed 05 Nov 2025 05:12:44 +0000
Manifest this update: Wed 05 Nov 2025 05:07:44 +0000
Manifest next update: Thu 06 Nov 2025 08:54:44 +0000
Files and hashes: 1: 3139312e3234332e3133362e302f32322d3234203d3e20323633353037.roa (hash: Q5yrIvJXIrCbQV0arINt1JvJlC/x9ziPnV8RXJmZAQk=)
2: B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl (hash: jgZk4+488vv+C49FdJYKVl3hW5vJ72rWJgF0S5JVV3o=)
3: 323830343a313266383a3a2f33322d3333203d3e20323633353037.roa (hash: vwGgTlrrFyt5firMtrTQfALNMm92bVVZAG13ex2vb5Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl
rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e0:37:38:ce:82:e8:57:7e:5b:75:f8:59:27:d7:e2:5e:cf:87:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1
Validity
Not Before: Nov 5 05:07:44 2025 GMT
Not After : Nov 6 08:54:44 2025 GMT
Subject: CN=AB4A09BABDF05C73B2C2A98A1B2B74BE99B75A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:66:c3:83:8c:47:0f:18:14:f6:bb:00:69:
e5:bb:2e:2a:1c:5b:5b:44:d8:52:d9:6e:37:bc:58:
69:8c:de:ff:b1:58:b3:3b:b9:49:c6:23:93:70:70:
07:59:b5:bd:ba:bb:63:20:44:c3:95:3a:5b:81:af:
0b:80:5a:a6:1e:d4:1a:45:38:29:da:da:e0:ee:2c:
99:ef:0d:bd:40:6f:56:dd:b2:30:f0:43:e1:5d:6b:
ae:2f:d7:52:92:f5:25:af:9c:00:d4:b0:31:bc:59:
d4:6d:86:e6:5a:94:4f:39:15:20:c4:b2:26:80:77:
d7:fb:26:a6:bd:8f:d7:09:ac:a7:6c:cf:eb:46:6f:
0d:20:96:4f:ec:ab:82:da:63:e8:a0:d1:1c:7c:32:
ce:da:5b:16:4c:5a:7c:5e:6f:a4:91:e4:ca:e2:43:
a3:1c:33:1c:6f:ea:d9:78:cd:5a:71:f9:7e:df:8e:
8a:34:aa:0d:58:eb:27:c4:96:fc:03:88:c9:f7:d2:
a2:18:44:c1:f0:88:ca:58:4e:3a:9e:2e:cf:c1:88:
a9:a7:5d:26:6d:f3:c2:44:0f:de:be:dd:e9:f0:6d:
e7:59:e2:26:12:d3:99:ef:da:f8:57:8c:c9:4b:8c:
81:14:4c:5f:84:19:ef:ae:83:32:74:e9:a1:e6:22:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:09:BA:BD:F0:5C:73:B2:C2:A9:8A:1B:2B:74:BE:99:B7:5A:02
X509v3 Authority Key Identifier:
keyid:B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:73:89:3c:b9:ee:eb:9e:06:ad:56:ab:d5:bb:35:91:77:cc:
98:65:9c:c5:18:27:6b:1b:c0:f6:3c:db:aa:ab:fa:41:9b:6b:
01:4e:01:23:51:53:ce:4a:42:98:45:73:f0:2a:45:f2:bf:ce:
b9:00:12:22:7f:5c:e8:7a:fa:bb:99:a0:9e:a1:07:95:b7:f3:
f6:9d:06:08:b0:9b:b9:ab:13:1a:ef:98:a1:c6:a5:09:da:79:
f1:83:a8:69:c4:85:0d:c7:34:02:3f:56:01:ae:8c:e1:05:f4:
71:87:13:11:49:33:44:1e:25:37:dd:96:f9:5f:fd:94:10:2f:
d1:75:eb:6c:b9:4d:c1:96:a8:7f:98:8e:47:3f:4d:e1:11:a1:
40:fb:33:a9:03:c6:e4:e2:48:24:e2:2a:57:21:2b:9e:d2:1e:
5e:d2:92:56:e1:5b:48:10:68:ba:d9:e7:8d:1c:26:6f:3f:1c:
53:cf:57:c9:d8:45:a7:98:d3:02:60:de:27:7e:5b:89:c5:ad:
45:85:74:c1:b6:85:1e:b0:6a:96:4f:db:ef:e8:00:f0:4d:67:
b0:af:db:ed:aa:e4:1e:39:09:41:f9:69:34:53:5a:31:b1:7c:
f6:c7:f6:d9:3f:b2:05:9c:d5:20:98:b2:6e:fa:6e:07:b4:65:
2e:f6:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:09 2025 by rpki-client