
$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
File: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft (raw, json)
Hash identifier: w66+AudQ4ZeljLbUOXTtna/XpjQmKk+f9iAYItlLv5g=
Subject key identifier: 2C:81:76:79:96:E2:2A:95:AC:B3:5D:F7:63:14:1C:73:6B:1C:74:68
Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50
Certificate issuer: /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
Certificate serial: 23E4DEC8AE6EABD6965597D7C10C596A71E9092F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
Manifest number: FF
Signing time: Tue 04 Nov 2025 17:51:54 +0000
Manifest this update: Tue 04 Nov 2025 17:46:54 +0000
Manifest next update: Wed 05 Nov 2025 21:44:54 +0000
Files and hashes: 1: 323830343a373761343a3a2f33322d3332203d3e20323731313930.roa (hash: qsRafcjJj+s2kDsDgJnWZ0Q5nBOrLVcx6L+RmAUGULI=)
2: 3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa (hash: TfAMHSXwbY24vrtPxRXAwD74fc6KDbIbnLsDTfBZHJM=)
3: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl (hash: zCqMBKGrUK0oj1F2UxaQD8o2Vp0z0p1/LVGTdvgSofA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl
rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e4:de:c8:ae:6e:ab:d6:96:55:97:d7:c1:0c:59:6a:71:e9:09:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
Validity
Not Before: Nov 4 17:46:54 2025 GMT
Not After : Nov 5 21:44:54 2025 GMT
Subject: CN=2C81767996E22A95ACB35DF763141C736B1C7468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:d8:86:b5:da:74:78:2b:9f:7d:28:d9:8a:
0e:6c:2e:af:22:7e:73:f0:e3:93:a8:c4:52:17:bd:
af:86:5f:ce:40:fe:77:f0:e8:e7:d5:c5:c3:50:fd:
85:bb:df:58:8d:34:b5:94:b8:29:44:97:1f:1b:f8:
07:78:d7:ca:db:11:82:83:16:4d:36:ff:7b:bc:db:
7b:3a:15:a0:0a:a0:08:d4:1a:23:04:b1:05:44:ef:
c3:ca:6d:29:86:02:24:0e:0a:d5:e8:0a:22:3b:09:
b8:33:3d:32:87:94:95:a3:8b:aa:d3:35:94:b7:ed:
5a:da:6c:17:f3:b0:05:b3:d7:ae:b4:7f:bf:d8:e9:
03:ac:ee:65:b6:1e:b9:b3:cf:55:1a:78:d1:2c:72:
94:28:ac:1c:c6:ec:02:e8:98:54:fa:15:01:db:82:
89:d4:26:0d:a0:a5:17:50:96:8f:ab:6f:7d:54:4a:
67:02:09:c5:9a:77:e2:66:8c:6f:45:8f:c9:b0:f9:
c2:a4:61:18:79:14:fa:51:29:f5:e5:63:6c:c3:76:
c6:a7:09:33:32:d5:70:98:b9:01:ae:c9:db:4c:93:
46:ea:54:9c:f0:28:39:bd:d7:4a:78:7b:41:3a:a4:
a2:0c:8c:0b:7d:78:5e:2f:e5:bd:67:d6:03:c6:2d:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:76:79:96:E2:2A:95:AC:B3:5D:F7:63:14:1C:73:6B:1C:74:68
X509v3 Authority Key Identifier:
keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:35:e9:f1:42:23:2d:1a:6a:b8:91:fd:bd:e2:e2:d0:67:95:
ff:82:54:29:70:10:57:20:c6:82:fd:c6:e7:eb:4a:87:71:7b:
a1:29:5a:c8:3b:08:1d:01:9f:c0:76:fb:c5:25:0c:67:5c:95:
0e:ca:14:ba:31:a4:90:ae:17:5b:88:6f:93:4b:36:89:0f:50:
0a:23:36:11:3e:4d:e8:64:2d:7a:ee:6c:01:8e:30:47:a1:bb:
40:61:1b:bc:74:67:d9:98:bd:34:98:d2:0f:5e:01:de:23:c4:
13:c4:70:bb:6b:8c:78:61:a4:77:be:ad:ea:5e:f4:61:3b:37:
ec:c4:50:b9:5a:81:b0:ab:2b:78:cf:b7:18:c9:15:03:78:e3:
ae:34:09:39:d5:3d:2a:68:fc:fa:db:92:7d:50:9f:6e:3e:9c:
4a:79:73:9a:c5:1f:da:09:f1:d9:ba:8f:e0:01:da:a5:fe:33:
8d:53:31:d2:ec:ce:eb:83:cb:86:7a:4f:a5:f1:b0:26:69:79:
8d:d0:ba:fb:7c:95:88:c7:91:05:d0:1a:60:c6:08:2c:9d:28:
72:6b:eb:c8:d0:73:78:92:b6:0c:c9:9d:a4:3b:49:3b:4b:64:
c6:ce:37:15:f5:95:17:41:5f:67:29:4d:77:6a:f5:20:41:0a:
33:29:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:50 2025 by rpki-client