
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
File: BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft (raw, json)
Hash identifier: szQXKc5vLT8MJXRWvqORHOCEPHRQET8gQPfY55yc9I4=
Subject key identifier: 47:4A:42:9F:08:EF:6B:2A:8C:3D:17:5F:EC:15:71:C5:BA:F5:38:07
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial: 2D61C8638E114FF3BDC3BB2D21C4639FB6F5CBBD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
Manifest number: 02
Signing time: Tue 04 Nov 2025 12:21:23 +0000
Manifest this update: Tue 04 Nov 2025 12:16:23 +0000
Manifest next update: Wed 05 Nov 2025 13:15:23 +0000
Files and hashes: 1: BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl (hash: Qf3kFmBKi6jy2VC6316Q8b9AvwFqm9o3/xesc8yFu+o=)
2: 323830343a333237383a3a2f33322d3332203d3e20323635303830.roa (hash: 5B/+vfFGdF3IJoTrS9TeBsQvxm7kgyg44LTsGmD5N98=)
3: 323830343a333237383a343030303a3a2f34382d3438203d3e20323635303830.roa (hash: pQdsswWDxVePBoPmNKpkVs2XaQl3ZUuXa6gWuMdedDU=)
4: 3137302e3233332e3132312e302f32342d3234203d3e20323635303830.roa (hash: y1QhIZbdYepzcdoxIZqGNBMxC53wsudaiKNsqEV9cH0=)
5: 323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa (hash: QAGx0Yj4jJ2xXyr2rLQE4GAUGzzvVbqpP4lyFevhLng=)
6: 3137302e3233332e3132302e302f32322d3232203d3e20323635303830.roa (hash: /a2y4aWHo28lvVRWC/abKo7CnvEkblWEARGoZ2mTN+4=)
7: 3137302e3233332e3132322e302f32342d3234203d3e20323635303830.roa (hash: J+2cGeedQSkQuUMX8IRAr/pw89GMZTOHvWopcXCptdg=)
8: 323830343a333237383a343030303a3a2f33342d3334203d3e20323635303830.roa (hash: ytq9/JXR5mL09eUGCEFYeLztJqnlsf79ZDVOTj0Nt+A=)
9: 323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (hash: NSak5ER7+MAC0xU7nbH0pQGj8bMe+2muo5Do/DYaqX8=)
10: 3137302e3233332e3132322e302f32332d3233203d3e20323635303830.roa (hash: P0h7l+SiWRbWxbwbdGayBtSVOA3PqofNYXoBFXjyF2Y=)
11: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (hash: WrF8hQYEh/sGsppfpPesov8ngoxD0nE/e0IKlgdOawQ=)
12: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (hash: QaEwq9CjYPQg9XB/xC9mJEcrxzexB7rgdQeR7cGgREo=)
13: 323830343a333237383a383030303a3a2f33332d3333203d3e20323635303830.roa (hash: k+owxz3l68cprZCV0+3obZmXyYo5ofrM4/CRu+pOcko=)
14: 323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (hash: bujYDSW3nhUTEnjiY26vATKpg4+iqTkcy30ORRNiXhM=)
15: 3137302e3233332e3132302e302f32332d3233203d3e20323635303830.roa (hash: kgMnQvFQZ41NmFQiiTfB9er4UvYH9awM9HsX7+MBHPU=)
16: 3137302e3233332e3132302e302f32342d3234203d3e20323635303830.roa (hash: UQXu2hQXHRN2je3euhZZyn9PUypsZVOOhjs5UK8A/bM=)
17: 323830343a333237383a3a2f34382d3438203d3e20323635303830.roa (hash: 3c35Sa1vs4KaYssZIcwRB2/bFofdsYxoZj9drQm8oag=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 13:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:61:c8:63:8e:11:4f:f3:bd:c3:bb:2d:21:c4:63:9f:b6:f5:cb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Validity
Not Before: Nov 4 12:16:23 2025 GMT
Not After : Nov 5 13:15:23 2025 GMT
Subject: CN=474A429F08EF6B2A8C3D175FEC1571C5BAF53807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:d0:d3:4a:d1:4c:5b:3e:f9:9c:93:3e:6f:
be:93:b1:12:54:5d:74:e7:94:8e:fc:eb:55:ab:8e:
3a:c8:1a:c5:09:8e:a3:d6:a1:67:6d:4a:4a:3c:80:
fb:2d:fd:c1:b3:17:f2:2a:2f:92:5f:56:a5:47:d8:
c4:0c:b6:b4:50:0c:a4:d0:a2:11:07:6b:b4:4f:84:
b9:32:84:4b:ef:8e:a2:28:95:b5:bd:ce:2a:6e:e8:
04:31:31:c5:0a:ce:57:df:8d:e9:2d:c2:6e:1f:f5:
d2:e0:af:6a:e8:ab:1f:51:ac:3a:e8:61:ad:98:9a:
2e:4b:21:00:6a:50:13:9a:5e:46:9b:53:d5:16:7e:
8e:6f:c2:08:ea:36:4e:84:75:99:6c:96:12:05:0d:
3f:ef:50:b7:6d:e4:cb:2f:b1:f7:fc:35:dc:90:6a:
a1:17:9f:92:be:56:9e:c2:ae:2c:60:6f:20:d2:76:
75:8e:71:88:75:a0:71:a3:9f:fd:b3:e8:31:45:c5:
af:75:72:52:70:f5:60:c5:5b:9b:b2:45:39:53:fc:
10:ac:8a:2e:b1:73:52:3d:80:67:a3:c9:d5:96:25:
c7:b4:19:9f:6e:10:c0:2c:06:bf:79:a7:97:c3:d1:
6e:ce:9c:c7:aa:e1:39:ce:ae:ab:00:31:d2:96:62:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:42:9F:08:EF:6B:2A:8C:3D:17:5F:EC:15:71:C5:BA:F5:38:07
X509v3 Authority Key Identifier:
keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:0b:a1:90:89:c3:28:ea:d3:0d:07:56:d1:a5:c0:01:50:
9e:b1:d2:6f:17:6a:d5:8f:c6:b1:b9:ee:64:0b:97:8d:df:a0:
ab:39:45:e7:30:4f:90:a7:a5:81:31:16:e4:96:20:06:49:55:
9a:e9:12:73:bd:80:10:49:ba:63:56:20:e3:90:39:b1:17:f1:
30:2a:38:e7:79:29:df:cd:e4:f3:f0:9b:38:74:99:ac:d7:c4:
c9:7f:44:3c:d0:15:ac:fa:e6:aa:c1:62:49:95:89:be:92:51:
20:1a:35:64:ee:81:f3:38:c1:9d:64:2b:e8:15:70:36:92:31:
54:8a:08:d6:35:7e:88:b0:bc:e4:9d:47:ea:dc:3b:6b:36:7c:
68:91:9e:3e:ac:e1:e6:8c:72:43:06:d1:d5:10:90:19:74:55:
72:6f:13:cf:90:cd:a6:0b:3c:10:26:bc:b9:30:95:20:b8:8d:
b7:e8:59:52:20:08:d8:d5:d2:e7:9d:f8:36:b2:f5:e1:b6:29:
1c:ae:7c:1c:ce:1f:dd:bd:a3:b8:e2:df:a1:6e:d0:e7:8b:c2:
16:5e:39:ce:cb:05:9b:52:85:1d:33:21:b7:8b:8b:9f:03:a6:
c9:72:3d:e3:53:b4:b4:e7:f6:ab:f8:6f:a6:c7:02:c9:7f:8c:
b6:54:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:27 2025 by rpki-client