
$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
File: D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft (raw, json)
Hash identifier: lgb5LX8vV00QzM5yJR4maCTgjPls18omH4KjUZIg83Y=
Subject key identifier: DB:DC:C2:76:97:4C:BE:18:0A:CE:1A:F5:57:B5:0F:AC:25:84:C2:D9
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Certificate issuer: /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial: 43816602D355D98AE9DA23738051FB5238A85EB0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
Manifest number: 020A
Signing time: Tue 04 Nov 2025 19:25:57 +0000
Manifest this update: Tue 04 Nov 2025 19:20:57 +0000
Manifest next update: Wed 05 Nov 2025 21:44:57 +0000
Files and hashes: 1: D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl (hash: TNWILakzUqkTe72tFKiLh7yAEEbQ7Kci/7d1axbctM0=)
2: 3133382e3235352e3136312e302f32342d3234203d3e20323633393735.roa (hash: JLYG7kw3Tw2J2CQWpcqmymqxacXFEKLau6iyBpZ64b0=)
3: 3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa (hash: Nrf5l/PdfDi8L6GAsvFOX9x3sDRl321kJeZ8/nQ7NTU=)
4: 3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa (hash: SdErdevQAXDKfzBYELnkHRFcfZ+uu8UbrNRUay6BhCQ=)
5: 3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa (hash: 72DYh9uaCKORnQR2rIu5SRVQBmVHS0TVL+YLhzm9VVA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:81:66:02:d3:55:d9:8a:e9:da:23:73:80:51:fb:52:38:a8:5e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Validity
Not Before: Nov 4 19:20:57 2025 GMT
Not After : Nov 5 21:44:57 2025 GMT
Subject: CN=DBDCC276974CBE180ACE1AF557B50FAC2584C2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:0a:54:6a:82:7a:25:23:a6:ae:f9:0f:be:
0a:db:f3:a1:08:93:76:10:1f:9f:69:b6:de:f2:44:
29:70:b6:a3:16:f2:ea:20:ba:8e:9c:9a:70:32:42:
ca:0b:7b:19:07:59:e6:17:06:93:1b:d1:7a:1c:25:
9a:d5:b6:82:a8:92:f1:ba:06:e7:a0:39:3d:c7:b1:
91:3f:d8:d0:45:ae:6a:20:03:75:17:57:2e:8a:f0:
a7:23:d4:0b:4b:d8:77:05:b0:a8:67:bb:20:02:9a:
e0:81:82:36:d2:a7:67:18:7a:50:6f:5c:85:6b:5d:
27:89:64:dc:32:44:4e:8d:6e:c9:9a:93:e8:ef:ca:
54:b6:90:7a:c1:23:37:e1:2c:11:ec:69:f9:55:fa:
e1:19:70:d5:ae:61:ed:07:0f:aa:83:70:3d:f3:fa:
d0:b2:a4:c0:b5:27:03:70:a8:aa:6a:ac:9b:66:7b:
32:5e:bd:af:7c:36:37:4e:5e:57:79:41:47:4c:a2:
3b:3d:ef:3f:d0:8f:ba:70:29:96:74:af:c8:a6:62:
fc:02:74:d1:3f:c1:d0:2c:36:48:4e:c6:f3:c0:dd:
df:1b:c1:5a:14:21:c9:ae:7a:ee:af:e4:92:38:25:
07:6a:4e:06:ff:1d:9c:f2:ac:fc:73:88:ec:40:db:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:C2:76:97:4C:BE:18:0A:CE:1A:F5:57:B5:0F:AC:25:84:C2:D9
X509v3 Authority Key Identifier:
keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:53:68:ef:c4:a2:b8:b4:a3:9f:da:55:91:08:b9:56:2c:c4:
02:1f:bd:c9:3a:e5:14:4e:de:ad:52:ae:1a:7e:1c:e8:f2:42:
a2:66:6f:44:c9:f5:58:87:3d:61:24:20:da:85:69:bb:94:6b:
52:d8:7d:71:1e:48:42:3b:c8:2e:2d:3e:e1:d7:ed:6a:b3:31:
ad:79:09:4e:99:7c:56:c8:81:f2:e5:59:f2:af:df:41:50:16:
05:27:47:ed:7a:3c:3b:8b:0b:87:ae:1e:5b:05:62:ad:47:c6:
7e:a8:a2:cb:90:4b:91:ab:e3:2d:4b:97:1c:30:32:e0:a1:94:
d5:78:1e:37:4e:11:77:81:d8:d9:fc:f4:c2:6e:71:9c:34:ba:
23:cd:dc:b1:17:39:88:1f:c8:22:d7:ec:7d:73:b1:a3:71:8d:
99:9d:ee:7c:12:d4:d6:ff:27:98:e9:56:2e:d7:9d:62:cb:5d:
e3:55:19:e8:1f:8f:9d:f8:7f:17:5c:c9:69:64:7a:e0:14:ff:
b6:bd:6a:9e:b5:b7:b6:8f:ad:75:4a:58:09:12:6e:09:c8:20:
b4:87:fc:7e:2b:f1:b1:c3:6b:5d:52:75:75:55:a6:64:0e:e6:
af:76:b4:4d:47:49:eb:de:3a:f8:d2:40:46:0a:8c:d7:cd:a9:
96:f0:43:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ4FmAtNV2Yrp2iNzgFH7UjioXrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyNzRBMzkwQjQ4QkE0NzA1Qjk3NThEMTZGMkM4RkFC
NjQ4QkU1NjAeFw0yNTExMDQxOTIwNTdaFw0yNTExMDUyMTQ0NTdaMDMxMTAvBgNV
BAMTKERCRENDMjc2OTc0Q0JFMTgwQUNFMUFGNTU3QjUwRkFDMjU4NEMyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHagpUaoJ6JSOmrvkPvgrb86EI
k3YQH59ptt7yRClwtqMW8uoguo6cmnAyQsoLexkHWeYXBpMb0XocJZrVtoKokvG6
BuegOT3HsZE/2NBFrmogA3UXVy6K8Kcj1AtL2HcFsKhnuyACmuCBgjbSp2cYelBv
XIVrXSeJZNwyRE6Nbsmak+jvylS2kHrBIzfhLBHsaflV+uEZcNWuYe0HD6qDcD3z
+tCypMC1JwNwqKpqrJtmezJeva98NjdOXld5QUdMojs97z/Qj7pwKZZ0r8imYvwC
dNE/wdAsNkhOxvPA3d8bwVoUIcmueu6v5JI4JQdqTgb/HZzyrPxziOxA2/ZdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU29zCdpdMvhgKzhr1V7UPrCWEwtkwHwYDVR0j
BBgwFoAU1idKOQtIukcFuXWNFvLI+rZIvlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRvWFRjSFFFaTFLaW50aUZ6NndHdEZBVVFvY1hwSGlXOW9BZkVpM3Vr
R3MvMC9ENjI3NEEzOTBCNDhCQTQ3MDVCOTc1OEQxNkYyQzhGQUI2NDhCRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2Mjc0QTM5MEI0OEJBNDcw
NUI5NzU4RDE2RjJDOEZBQjY0OEJFNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHRvWFRjSFFFaTFLaW50aUZ6NndHdEZBVVFvY1hwSGlXOW9BZkVpM3VrR3MvMC9E
NjI3NEEzOTBCNDhCQTQ3MDVCOTc1OEQxNkYyQzhGQUI2NDhCRTU2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVlNo78SiuLSjn9pVkQi5VizEAh+9yTrlFE7erVKuGn4c6PJComZvRMn1WIc9
YSQg2oVpu5RrUth9cR5IQjvILi0+4dftarMxrXkJTpl8VsiB8uVZ8q/fQVAWBSdH
7Xo8O4sLh64eWwVirUfGfqiiy5BLkavjLUuXHDAy4KGU1XgeN04Rd4HY2fz0wm5x
nDS6I83csRc5iB/IItfsfXOxo3GNmZ3ufBLU1v8nmOlWLtedYstd41UZ6B+Pnfh/
F1zJaWR64BT/tr1qnrW3to+tdUpYCRJuCcggtIf8fivxscNrXVJ1dVWmZA7mr3a0
TUdJ6946+NJARgqM182plvBDXg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:33:52 2025 by rpki-client