
$ rpki-client -vvf rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
File: D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft (raw, json)
Hash identifier: svnNDxUh7zTFgqRhqSE2SpNoJ0l2aLV94GLzDMKhoh8=
Subject key identifier: 36:01:48:9A:8F:25:93:52:80:14:A2:C4:AE:A9:7C:F1:B0:42:0F:1C
Authority key identifier: D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
Certificate issuer: /CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Certificate serial: 1A512E9BB9C5FB526016E788628A139D74D7963E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
Manifest number: 0302
Signing time: Tue 04 Nov 2025 20:47:57 +0000
Manifest this update: Tue 04 Nov 2025 20:42:57 +0000
Manifest next update: Wed 05 Nov 2025 22:26:57 +0000
Files and hashes: 1: 323830343a356332383a3a2f33322d3438203d3e20323638383932.roa (hash: IE1zJNXn6RAOdArFw8Bsas97RLb4ASTXUHeSRlYevWo=)
2: 34352e3137352e38382e302f32322d3234203d3e20323638383932.roa (hash: w87/DuMMNL5quM7rpiLUGB40gEl0zQN0r0/6pjpOXBw=)
3: D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl (hash: V/Vz62iKgE4G1a405b/BTe+WU6l6/RBd7R3wo4bswKM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:51:2e:9b:b9:c5:fb:52:60:16:e7:88:62:8a:13:9d:74:d7:96:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1
Validity
Not Before: Nov 4 20:42:57 2025 GMT
Not After : Nov 5 22:26:57 2025 GMT
Subject: CN=3601489A8F2593528014A2C4AEA97CF1B0420F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2c:4b:46:05:29:47:05:1d:02:a7:3f:3f:5d:
0c:5f:5c:26:52:7e:6d:3b:50:8e:5d:1a:f4:f1:db:
39:9e:eb:f3:16:ed:73:f8:0d:e7:1e:82:3e:c7:62:
c9:c7:13:57:dd:73:a0:8a:62:ca:d0:8b:ef:3d:52:
07:4a:90:61:0f:63:6e:09:69:4f:84:e9:29:c2:9c:
8b:26:e4:e5:f3:9b:2b:68:d9:4f:00:3e:e6:4c:7c:
3c:8b:5b:e5:2d:0b:61:b8:a6:82:e7:fa:f1:55:0a:
1b:9a:a7:c5:c5:3d:9d:dd:84:03:86:92:ab:33:f0:
aa:9f:e6:77:51:db:7b:ca:6a:6e:73:29:23:10:5d:
66:b4:e6:0e:72:7e:75:3d:64:8a:18:66:7a:ec:7a:
6c:ce:65:aa:44:5e:b2:41:8a:1f:97:d4:ea:4d:99:
74:0c:65:44:29:40:0e:fb:3d:48:47:c1:d7:1d:fe:
b0:d8:06:63:f4:af:42:a5:0c:aa:e7:c4:04:7b:ce:
ba:e6:e5:cd:81:57:6f:24:7f:a8:5f:f5:67:24:1b:
b8:72:a4:bf:69:b7:62:1e:71:7f:7e:4e:0f:ae:6a:
a4:e8:a8:bf:06:7b:dc:c3:88:7d:b9:60:6c:af:f9:
a1:55:ba:88:a3:4c:bd:71:3d:eb:7e:f8:ad:c4:f4:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:48:9A:8F:25:93:52:80:14:A2:C4:AE:A9:7C:F1:B0:42:0F:1C
X509v3 Authority Key Identifier:
keyid:D1:FA:38:76:CB:0F:34:3A:C9:BB:97:57:EE:B0:4B:25:5D:4E:54:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwcUrShi8zAKqSv4nRPmB5dgYWhzviLiHmm6XLvg46wF/1/D1FA3876CB0F343AC9BB9757EEB04B255D4E54B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:43:4e:65:f6:92:8c:d3:47:f5:d7:03:4c:26:28:61:19:b2:
e3:90:5d:19:7c:6f:08:72:28:d9:42:4c:85:34:d6:5d:aa:85:
0d:77:ce:93:bc:cd:68:0a:11:a0:a7:32:af:d9:b9:fd:0c:77:
24:ae:54:9d:02:36:52:f4:ab:00:4b:fc:c6:cd:3a:13:13:ac:
d9:1c:ba:32:a0:7d:c8:13:cf:81:67:65:f4:a2:ac:bd:c7:03:
2c:4a:d4:39:23:c8:59:73:10:d7:f3:95:43:71:e6:83:d6:cc:
97:ef:1b:53:9f:6d:dc:ef:7f:aa:45:35:b9:f2:d5:74:69:51:
39:5d:ad:ac:71:ee:6a:8c:14:e0:76:6d:f4:84:92:5c:14:f9:
ff:e5:0b:4e:03:fb:b2:af:1b:49:a1:97:5d:6f:63:50:0c:37:
bd:72:99:03:7b:4f:68:35:ea:f6:5e:a2:c0:47:e8:e3:a8:84:
79:a8:21:1f:a4:2c:13:bb:88:ff:17:7a:1e:f6:c5:52:7f:42:
9e:c9:72:da:39:ea:c7:3a:27:66:a0:27:24:3e:c1:06:e5:1c:
14:e3:cd:24:ad:8c:1e:7e:c4:0d:3e:79:92:f8:88:6c:9d:5d:
20:91:0b:ad:c5:2c:24:90:7f:ce:d1:e3:62:84:0f:11:c0:de:
9a:d4:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:58 2025 by rpki-client