
$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
File: 2CACC99A330A3753D03224139703412FA1CB21D3.mft (raw, json)
Hash identifier: /9bMIwPZG7Djrq3ijkD8hybiPTr2aKj00X8B50JxTuo=
Subject key identifier: 20:B4:E4:1A:FA:40:E9:78:C3:49:A1:27:F8:F4:9E:12:35:1B:FF:51
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Certificate issuer: /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial: 42A364A5643A9CBB6474C11CA2334F0240D218B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
Manifest number: 0127
Signing time: Wed 05 Nov 2025 05:52:24 +0000
Manifest this update: Wed 05 Nov 2025 05:47:24 +0000
Manifest next update: Thu 06 Nov 2025 08:46:24 +0000
Files and hashes: 1: 3137372e3232312e35362e302f32322d3234203d3e20323633363631.roa (hash: JJX++uXhcdD3fYgIzY/7gv2hNTtSNqJ/SE9TSlwtO0c=)
2: 3138372e36332e3233362e302f32322d3234203d3e20323633363631.roa (hash: AjcZPah8a3K9QHO3PKAima50T48zmIEiNoBCZJf+g98=)
3: 3136382e3230352e3132342e302f32322d3234203d3e20323633363631.roa (hash: N8dc3gYp2g3051n7CVI0bHZwn/R3ZHhhMHBfAkReMPs=)
4: 2CACC99A330A3753D03224139703412FA1CB21D3.crl (hash: Xo5JeITXhgCYbfOiSo1+evZBDZKQ7V1tjD+DE4kiSYc=)
5: 34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (hash: q4lJdcaLq2puSiZochBSHuOLkiS6gohdNhEik5FK0XE=)
6: 323830343a313132383a3a2f33322d313238203d3e20323633363631.roa (hash: B1chl3jLVptW9bcbkDzBRrb63jcTgV+UAwkDj7/27ro=)
7: 34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (hash: OyXNFYG1yMu43sOEnFHfNReINwiVcZQw4o4uS7aUZTA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 08:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a3:64:a5:64:3a:9c:bb:64:74:c1:1c:a2:33:4f:02:40:d2:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
Validity
Not Before: Nov 5 05:47:24 2025 GMT
Not After : Nov 6 08:46:24 2025 GMT
Subject: CN=20B4E41AFA40E978C349A127F8F49E12351BFF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:f0:32:61:44:6d:ae:ef:d3:cb:22:fe:6c:
5f:89:2f:9c:5d:0b:b2:32:fb:ce:41:30:fa:93:61:
d4:4b:6a:85:ac:69:a6:71:32:c5:6b:9b:7e:40:9c:
8d:71:55:83:f2:5e:4b:b3:ec:4e:98:d0:b7:79:63:
b2:1a:96:33:31:f0:a8:69:83:3d:f3:09:09:ba:6b:
ff:8b:21:94:d0:ea:1b:8a:66:05:61:1b:6b:e7:0b:
ed:41:5d:d2:40:53:3b:bb:d2:27:99:ad:31:2d:d0:
36:79:e0:31:db:38:8d:0b:41:d7:a2:28:82:37:9f:
d5:41:71:4c:39:cc:ab:e3:18:45:4b:a9:6a:17:bc:
24:b3:39:f7:42:d2:55:21:09:13:08:5a:5c:cb:be:
42:c9:ca:83:f9:ae:c3:37:f8:40:f5:09:9f:d3:0e:
d6:e9:30:2e:0d:8f:e9:e1:fb:a0:44:b7:91:ea:cf:
7e:c7:af:f5:4a:26:2f:87:41:e9:25:92:31:68:69:
53:a9:12:ae:83:93:be:e2:ea:ff:30:7f:1c:bb:76:
11:3a:a2:1c:51:9e:f0:68:c1:66:89:05:bb:f4:2d:
1b:83:20:08:27:11:88:a2:4a:3e:81:b6:cc:22:b4:
50:5a:55:00:cc:f9:f6:26:37:f8:96:07:de:6e:ac:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:E4:1A:FA:40:E9:78:C3:49:A1:27:F8:F4:9E:12:35:1B:FF:51
X509v3 Authority Key Identifier:
keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9e:5f:a5:75:ba:44:cb:ea:2c:13:3a:76:da:fe:53:3f:ae:
78:fd:a4:d9:1f:c4:c7:6e:7a:53:22:d7:e6:92:b1:f3:55:90:
85:1a:49:ce:87:df:76:5e:cc:65:56:0a:64:a6:8d:95:d4:ef:
e6:77:69:1e:91:7c:d8:5a:3a:87:d5:19:75:1e:5a:23:4a:49:
a2:3a:da:7e:da:ba:bb:55:57:90:b4:84:a6:21:34:7f:f1:23:
25:ad:ea:9d:46:d9:c2:2f:a4:81:50:d1:13:97:79:1b:de:db:
61:c4:3c:08:02:dd:58:0a:f2:f1:ab:12:3c:8d:af:5e:4d:26:
49:ec:6f:10:67:6c:39:cb:76:79:6c:fc:af:9a:f1:f3:a9:b8:
17:b6:53:53:2c:87:78:a3:0c:fb:8a:da:f8:8e:3c:e7:a7:59:
72:b4:27:26:3f:c9:03:62:8b:b1:8a:93:2a:27:2e:b0:75:4a:
47:d3:38:3b:c6:34:c4:0c:3b:05:45:6d:28:2e:fe:92:c2:08:
6c:bb:e0:18:67:78:33:7b:08:f1:d0:67:46:1c:0d:6b:b4:a7:
37:35:08:77:c2:79:dd:35:9b:80:39:23:29:cb:de:2e:8f:e7:
2c:2c:03:6f:db:f0:2d:64:c3:ce:86:15:53:bb:0a:f7:18:fd:
ea:e0:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:43:35 2025 by rpki-client