
$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
File: CE444325009DC85BE712BCD01156510F2B6F4AB9.mft (raw, json)
Hash identifier: sfRgh8EA8xzvIAZv6qeICEvt2lgsikaukZv11rkw994=
Subject key identifier: 85:F2:E5:D2:9C:FD:BF:A6:2C:15:99:58:93:D6:36:AD:DB:D7:F8:7D
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Certificate issuer: /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial: 7F3723418058A732BF7BAE1C8BFB7C01DEF0FDB1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
Manifest number: 0305
Signing time: Tue 04 Nov 2025 18:13:28 +0000
Manifest this update: Tue 04 Nov 2025 18:08:28 +0000
Manifest next update: Wed 05 Nov 2025 20:56:28 +0000
Files and hashes: 1: CE444325009DC85BE712BCD01156510F2B6F4AB9.crl (hash: I5x1cCqjvj9B+iuynDFs7uH0TQxnAhyUg1ZBrpkpt+4=)
2: 3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (hash: 5G9Dy/D8jUa6k6N7o6A0OHuAONqqnFUQzjSegVsSatU=)
3: 3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (hash: 0I6R76WFWVe6GvnC6HPSO5DNoIpkRloxekrdv5uaocA=)
4: 323830343a323063303a3a2f33322d3438203d3e20323634353132.roa (hash: xee9sI4lZhpA/ae1SfSHZt6s0IIwr6d9n4pRuri1Uv0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:37:23:41:80:58:a7:32:bf:7b:ae:1c:8b:fb:7c:01:de:f0:fd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Validity
Not Before: Nov 4 18:08:28 2025 GMT
Not After : Nov 5 20:56:28 2025 GMT
Subject: CN=85F2E5D29CFDBFA62C15995893D636ADDBD7F87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:da:ec:7a:f5:83:f0:50:2d:f7:02:fa:4e:
ee:c3:b6:10:d8:97:91:65:79:24:86:fb:3e:24:1e:
9c:7e:f3:79:bb:81:8f:86:89:e4:39:c4:19:d8:bd:
2a:68:ba:f9:90:e8:79:23:64:0c:ac:0a:0a:e1:f4:
bb:48:e7:0a:0c:0d:9b:6d:79:ab:12:b7:63:fc:69:
e2:46:a7:e7:2b:10:42:4a:10:de:6f:2b:09:3b:4d:
c0:16:da:67:51:22:3a:ef:2e:11:c8:c6:68:b9:43:
71:d6:17:92:9f:7e:39:c0:c6:e6:fb:0e:a0:fe:d6:
74:00:4c:f0:49:f1:2f:be:88:13:01:29:9d:c1:1e:
a5:6e:12:55:87:0b:7d:9e:b6:a3:1f:04:f1:a4:2e:
2e:77:7e:d3:79:93:10:88:f9:92:90:57:8a:55:10:
18:ee:5d:0e:7c:cf:b3:0b:79:74:87:88:f5:33:86:
10:48:56:97:c3:36:09:45:8a:98:bf:d6:9f:56:50:
16:58:50:62:df:f6:2d:90:7c:38:2a:5a:91:03:ba:
e1:2b:4a:12:cf:ad:c6:9b:1e:eb:63:0b:e7:33:8b:
bc:81:0c:14:fb:2b:5c:a2:59:52:f5:7b:65:ee:72:
d0:2e:00:9d:c5:a7:97:17:9a:e3:68:9e:ca:3d:0b:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F2:E5:D2:9C:FD:BF:A6:2C:15:99:58:93:D6:36:AD:DB:D7:F8:7D
X509v3 Authority Key Identifier:
keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cf:a5:ca:97:3f:c1:ad:69:2a:f6:cf:f5:12:55:a1:e2:da:
24:45:04:2c:94:d6:f1:2b:05:05:94:13:4a:f1:aa:f3:f1:90:
db:ae:05:ab:9e:9f:1e:be:e3:8c:2d:9d:55:f0:f8:f3:4f:69:
1f:92:77:03:73:d2:1d:75:31:19:a2:09:0f:97:0b:f3:3d:43:
73:55:44:e8:cd:2f:a8:68:13:58:91:45:bc:9e:ba:b6:5e:fa:
eb:c7:06:fb:04:a9:68:50:70:c4:e0:1c:1d:0d:0c:72:1c:43:
c8:01:7b:f4:f5:d1:66:a1:33:f1:12:1d:2b:72:12:0c:98:51:
03:07:02:17:53:2f:e2:93:da:9e:f6:f9:76:03:a1:6c:3c:d0:
e9:da:63:1f:d2:38:7c:b9:f7:cb:c7:1f:78:07:0f:d9:b4:a3:
9c:9a:99:e6:7c:8b:c1:8e:54:50:bb:71:7d:c3:58:e4:b7:39:
de:22:f3:32:d9:71:97:c2:fd:c9:a0:ae:b0:c3:f4:73:9f:00:
20:89:f3:61:48:a7:75:27:5f:29:f2:9d:f5:dd:bb:7a:24:16:
4c:b0:dc:1b:77:60:6a:63:3d:33:c0:0e:eb:ae:89:0e:73:15:
46:09:c2:f8:62:04:17:0d:02:32:c7:11:9a:fd:20:6f:81:e6:
2c:73:f6:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfzcjQYBYpzK/e64ci/t8Ad7w/bEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U0NDQzMjUwMDlEQzg1QkU3MTJCQ0QwMTE1NjUxMEYy
QjZGNEFCOTAeFw0yNTExMDQxODA4MjhaFw0yNTExMDUyMDU2MjhaMDMxMTAvBgNV
BAMTKDg1RjJFNUQyOUNGREJGQTYyQzE1OTk1ODkzRDYzNkFEREJEN0Y4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uNrsevWD8FAt9wL6Tu7DthDY
l5FleSSG+z4kHpx+83m7gY+GieQ5xBnYvSpouvmQ6HkjZAysCgrh9LtI5woMDZtt
easSt2P8aeJGp+crEEJKEN5vKwk7TcAW2mdRIjrvLhHIxmi5Q3HWF5KffjnAxub7
DqD+1nQATPBJ8S++iBMBKZ3BHqVuElWHC32etqMfBPGkLi53ftN5kxCI+ZKQV4pV
EBjuXQ58z7MLeXSHiPUzhhBIVpfDNglFipi/1p9WUBZYUGLf9i2QfDgqWpEDuuEr
ShLPrcabHutjC+czi7yBDBT7K1yiWVL1e2XuctAuAJ3Fp5cXmuNonso9C45VAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUhfLl0pz9v6YsFZlYk9Y2rdvX+H0wHwYDVR0j
BBgwFoAUzkRDJQCdyFvnErzQEVZRDytvSrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJS
V00vMS9DRTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDQ0MzI1MDA5REM4NUJF
NzEyQkNEMDExNTY1MTBGMkI2RjRBQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RVp4UmJKY1hoQk01b2ttMTZUMmRyU2VKbkJvZ29mREw0MXZTZEZoOVJSV00vMS9D
RTQ0NDMyNTAwOURDODVCRTcxMkJDRDAxMTU2NTEwRjJCNkY0QUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbc+lypc/wa1pKvbP9RJVoeLaJEUELJTW8SsFBZQTSvGq8/GQ264Fq56fHr7j
jC2dVfD4809pH5J3A3PSHXUxGaIJD5cL8z1Dc1VE6M0vqGgTWJFFvJ66tl7668cG
+wSpaFBwxOAcHQ0MchxDyAF79PXRZqEz8RIdK3ISDJhRAwcCF1Mv4pPanvb5dgOh
bDzQ6dpjH9I4fLn3y8cfeAcP2bSjnJqZ5nyLwY5UULtxfcNY5Lc53iLzMtlxl8L9
yaCusMP0c58AIInzYUindSdfKfKd9d27eiQWTLDcG3dgamM9M8AO666JDnMVRgnC
+GIEFw0CMscRmv0gb4HmLHP2Kw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:20:09 2025 by rpki-client