
$ rpki-client -vvf rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
File: 020AFECF727CE88A459FCBC17D694507CE9ADE22.mft (raw, json)
Hash identifier: wpaqgVHKp3AQW/MHeBT9EwQj/bf6B24mF4tZ0S+nBEA=
Subject key identifier: EA:94:0E:BE:80:56:E1:DE:17:E0:00:68:B6:BA:2B:82:92:80:38:B6
Authority key identifier: 02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
Certificate issuer: /CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Certificate serial: 305D2B0535D8140770DED288903F8BC35757EEFD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
Manifest number: 01AF
Signing time: Tue 04 Nov 2025 20:22:13 +0000
Manifest this update: Tue 04 Nov 2025 20:17:13 +0000
Manifest next update: Wed 05 Nov 2025 22:44:13 +0000
Files and hashes: 1: 34352e3233362e33362e302f32322d3234203d3e20323638323339.roa (hash: l5hk98Te9f3haw4W1qS9Z1091bo5I8zoSjf9ylAx404=)
2: 020AFECF727CE88A459FCBC17D694507CE9ADE22.crl (hash: jRrpQ4zyyGzzFlx6z9O23qPcDt1uH7GnpXHqqpRaLlE=)
3: 323830343a346531383a3a2f33322d3438203d3e20323638323339.roa (hash: 6b4aeUC83dae1eovjxZwcx3YdG1I1uSyyCOQesx8Lxw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 22:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5d:2b:05:35:d8:14:07:70:de:d2:88:90:3f:8b:c3:57:57:ee:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020AFECF727CE88A459FCBC17D694507CE9ADE22
Validity
Not Before: Nov 4 20:17:13 2025 GMT
Not After : Nov 5 22:44:13 2025 GMT
Subject: CN=EA940EBE8056E1DE17E00068B6BA2B82928038B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:65:8c:c6:22:a9:6d:a2:0b:a8:93:c3:19:69:
df:de:99:0b:e3:ac:69:21:49:53:93:2f:35:25:33:
be:0f:55:d8:0e:e4:e1:57:c5:09:ff:ea:f9:43:b0:
d4:91:73:34:ad:54:9c:65:0c:4b:88:62:42:05:ce:
56:bc:b3:4f:2a:cc:a6:6c:e9:55:2d:85:89:7b:c7:
ff:ae:d7:c1:36:0d:2f:45:4e:54:c1:a1:7a:d1:69:
43:d3:1e:49:bd:61:b1:e0:e1:4d:7e:43:79:c9:94:
8d:1e:bd:a8:8c:aa:75:9a:79:4c:b1:ec:6d:d4:d4:
1a:14:58:f4:66:74:4c:c4:e6:ad:2a:1d:cc:6f:c6:
d2:a0:9b:11:d6:5c:f1:65:0c:97:52:53:67:7a:7e:
9a:6d:ee:12:c0:88:3e:2e:64:d6:2f:62:bf:76:85:
97:d0:61:c7:b3:34:d2:dc:21:2f:1b:b3:c6:c4:bd:
15:c9:c5:90:95:a0:0a:57:37:b4:c3:03:61:d4:d0:
d9:12:4e:f5:7c:26:ed:73:fc:fb:d4:c2:a2:78:0b:
a2:10:f5:87:73:90:b1:c9:ae:e9:67:81:b0:ad:59:
f3:ec:1f:38:0a:d4:4e:d8:9d:93:f2:42:da:7a:bf:
35:82:de:9e:aa:90:63:91:59:2f:bc:40:b9:ff:7e:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:0E:BE:80:56:E1:DE:17:E0:00:68:B6:BA:2B:82:92:80:38:B6
X509v3 Authority Key Identifier:
keyid:02:0A:FE:CF:72:7C:E8:8A:45:9F:CB:C1:7D:69:45:07:CE:9A:DE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/020AFECF727CE88A459FCBC17D694507CE9ADE22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDg8WGZP4GBsxbYU25NpHoq2NA4G2t6XyB3zb2CegnaF/0/020AFECF727CE88A459FCBC17D694507CE9ADE22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:64:cd:d4:3b:fd:31:e0:5b:76:01:26:64:21:cd:f3:60:d3:
c9:7b:8a:ff:be:7c:f1:e0:b8:b0:80:49:1d:41:b9:93:79:d3:
aa:52:29:e7:3a:f5:00:02:04:66:75:94:95:18:68:00:51:bb:
46:c0:1e:5a:56:8c:07:57:be:c5:c2:d9:83:c3:6c:1e:64:2c:
72:79:2f:1f:01:df:8d:ef:90:30:56:5b:6e:e9:27:39:82:9b:
e0:a5:81:e7:9c:46:b4:a5:af:5c:22:9c:c8:d1:56:b7:09:76:
8e:3d:44:83:a3:eb:1a:76:18:27:df:43:28:74:6b:28:13:07:
67:c6:c1:b5:8f:dd:33:17:2c:f7:41:b6:cc:92:4f:04:79:51:
fb:55:a1:36:1e:71:4c:54:b0:a4:b4:02:a2:cd:5e:83:15:6f:
20:d6:36:20:aa:1f:e5:c3:f9:9b:93:c2:9f:33:29:1f:71:11:
63:6a:7d:db:e4:4d:e9:27:54:2d:20:97:63:05:39:e1:78:57:
54:a7:6f:2c:67:5c:63:7a:c6:69:b1:8d:8f:5b:6f:cc:36:68:
6b:08:ca:cc:95:43:2a:f3:b9:78:06:fb:7e:2d:06:0e:e7:37:
30:2d:35:f4:d3:c5:fa:82:fc:81:0a:a1:2d:d4:d7:9d:45:11:
30:e2:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:29:38 2025 by rpki-client