
$ rpki-client -vvf rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
File: 1A3ED1628CA42B3B4C8213417B61162F196BD434.mft (raw, json)
Hash identifier: nJ/wG85vrtq1w1qK/LGxTqHc8iAuALcKkz7EbWXQi8c=
Subject key identifier: BD:0F:EB:93:94:4F:8B:9C:B3:EA:01:16:E4:45:9C:07:C0:B5:8D:55
Authority key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
Certificate issuer: /CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Certificate serial: 58245D33465A44C9196DCB1B67CE8D069DE91000
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
Manifest number: 0305
Signing time: Wed 05 Nov 2025 12:08:37 +0000
Manifest this update: Wed 05 Nov 2025 12:03:37 +0000
Manifest next update: Thu 06 Nov 2025 12:34:37 +0000
Files and hashes: 1: 3133312e3139362e3133362e302f32322d3234203d3e20323635393239.roa (hash: Pmk25y2Umg9oJFme2ExEpYGQMhSUFKOVTccOjUFoAZA=)
2: 323830343a343030383a3a2f33322d3438203d3e20323635393239.roa (hash: hvcsJL+15g+sHCIcoaqDoNFc49qRkcfVNAlRBE7gMII=)
3: 1A3ED1628CA42B3B4C8213417B61162F196BD434.crl (hash: LJIbtQuhJmHWUo8Nci00CyEftxzVEagO1t5Nugr4F5Q=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 12:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:24:5d:33:46:5a:44:c9:19:6d:cb:1b:67:ce:8d:06:9d:e9:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434
Validity
Not Before: Nov 5 12:03:37 2025 GMT
Not After : Nov 6 12:34:37 2025 GMT
Subject: CN=BD0FEB93944F8B9CB3EA0116E4459C07C0B58D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:cd:b1:d0:4a:3b:7e:01:bf:6c:ac:0e:9a:
0c:c8:d7:26:fd:03:6b:89:f9:37:06:01:7f:2c:26:
c1:aa:8e:71:c2:12:95:86:1b:c7:8a:bd:dd:59:c0:
14:e4:a6:a0:cf:6b:9c:a8:68:ad:f4:84:d1:be:6e:
48:77:fb:9b:64:38:8e:ba:00:3b:f0:44:4b:17:66:
a2:72:2e:49:70:d9:06:f7:59:32:74:cb:51:9d:dc:
50:2c:6a:9d:c3:5d:d9:58:41:3c:40:dd:ef:4d:c1:
b9:f8:5d:e2:7b:3a:fb:68:cb:a0:cf:2f:97:d7:62:
17:73:c9:a5:d0:9a:ec:a8:a2:da:7a:ad:7c:ce:f2:
f9:26:ef:fd:68:5b:f5:2b:9c:d6:12:00:04:9d:20:
84:39:0b:e3:ef:72:e7:8e:8e:bc:82:de:3c:78:d4:
92:67:cd:12:34:fe:2f:0b:82:1c:d8:ab:5c:d4:75:
16:2f:d5:7d:8f:c5:13:d3:96:c5:3f:d9:6b:2b:0f:
6d:7e:ed:9e:07:ff:d9:9b:3f:f4:5b:a4:15:b6:70:
70:13:93:d2:ef:b8:e9:e0:b3:af:ad:c8:3b:4a:39:
2e:b2:93:ee:ef:c6:80:2f:92:86:03:9a:5f:83:68:
61:b9:b4:29:fc:a8:4a:79:f7:09:d2:67:43:a0:18:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:EB:93:94:4F:8B:9C:B3:EA:01:16:E4:45:9C:07:C0:B5:8D:55
X509v3 Authority Key Identifier:
keyid:1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:bb:8f:82:f2:9f:42:3b:9b:73:18:db:42:4f:7a:08:69:
15:b9:88:37:5e:a5:69:0a:50:1a:47:22:a7:8a:19:24:26:48:
6a:14:12:ad:75:5a:7f:7f:bc:15:31:bb:6a:79:26:71:98:81:
28:84:0c:95:c7:ed:46:9c:ed:6b:37:bb:e1:a6:9d:c8:9c:66:
ab:12:2f:6f:cb:b1:5e:83:89:bc:98:72:52:de:51:5f:97:c7:
a9:6a:bb:77:db:d6:21:56:32:11:eb:e6:6f:2c:9a:78:72:bf:
70:68:b4:33:d1:88:20:06:ca:48:cf:20:2f:0a:b7:e2:0c:b8:
91:bb:6f:87:9e:8d:92:2a:d3:68:30:62:e4:c5:3a:f5:7c:c7:
d8:52:6a:69:0b:25:cb:78:1d:33:9d:b5:4e:d9:06:16:2c:d7:
69:fc:90:72:40:1c:31:51:e2:5d:1b:bf:a9:84:06:8b:8b:2e:
00:e9:ee:23:b8:f7:45:a9:6d:f7:3e:02:91:d9:0b:a6:b3:82:
b1:ea:48:06:aa:77:7f:0c:b1:85:9d:4e:99:83:a4:71:62:7f:
99:4d:c7:59:ba:eb:c1:13:dc:44:31:87:a4:35:3c:02:48:61:
36:d8:86:50:63:46:8d:e4:ab:33:54:26:b4:43:a4:d5:3f:2c:
ce:93:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:26:54 2025 by rpki-client