
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json)
Hash identifier: FepqsNJ4NbcwgfE3h0XUa+0Wpr5vDJpSnJ6YBTExT0E=
Subject key identifier: FF:BB:F6:E7:1A:1A:BF:A7:E0:6C:7F:24:5D:D8:D1:AD:21:07:FE:AC
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Certificate issuer: /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial: 4FD8BF82174D6152AE652121EE2614E70495CBAB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
Manifest number: 0303
Signing time: Tue 04 Nov 2025 17:31:23 +0000
Manifest this update: Tue 04 Nov 2025 17:26:23 +0000
Manifest next update: Wed 05 Nov 2025 19:08:23 +0000
Files and hashes: 1: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=)
2: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=)
3: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=)
4: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: pgiqQZ7Cqr596MYuqnbBM9OHAdX++UpDciUR/nG+j+w=)
5: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d8:bf:82:17:4d:61:52:ae:65:21:21:ee:26:14:e7:04:95:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Validity
Not Before: Nov 4 17:26:23 2025 GMT
Not After : Nov 5 19:08:23 2025 GMT
Subject: CN=FFBBF6E71A1ABFA7E06C7F245DD8D1AD2107FEAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:1a:6c:03:21:fb:0d:64:72:0d:97:da:81:
db:67:d1:56:d6:ee:88:0d:76:04:2d:b6:55:62:a1:
8f:0b:cd:6f:77:5a:db:67:c4:40:83:80:23:1f:2b:
e9:5b:5c:1d:a4:17:d5:9c:4e:a4:ed:19:28:cd:b7:
7c:42:2f:68:88:ea:93:3f:c6:d6:70:1d:27:f5:80:
96:65:84:4d:d4:12:b4:89:59:70:c9:7a:7c:eb:35:
d8:26:f2:07:26:bc:09:33:c7:62:ce:9a:59:9b:5d:
5c:c9:73:07:9a:aa:59:ab:40:48:a1:13:5a:15:e4:
29:31:8b:2b:81:a3:06:e1:ba:c9:e4:80:45:c9:15:
19:b1:cc:e8:32:6b:00:c6:0f:b6:ba:bb:5c:d3:8e:
b5:6b:e9:19:67:4a:b6:d3:3a:e4:c6:cb:a4:e8:ed:
bf:08:46:3f:aa:b5:89:8c:02:ad:04:ff:59:78:9e:
35:3c:ec:49:0d:3c:bd:75:2e:67:77:42:ba:c2:bb:
1f:5e:fd:c9:05:f0:10:21:b1:fd:50:b9:af:a4:47:
08:e4:30:b9:2a:29:32:67:5b:61:21:63:ab:63:d5:
57:6b:2c:31:54:fa:0b:21:6f:1a:d0:50:aa:fb:1d:
43:bf:7e:a0:23:82:5f:cd:ee:6d:2f:4e:66:c7:c0:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:F6:E7:1A:1A:BF:A7:E0:6C:7F:24:5D:D8:D1:AD:21:07:FE:AC
X509v3 Authority Key Identifier:
keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0e:cf:26:64:65:3d:4f:24:07:81:6d:91:2d:fd:08:27:70:
f8:62:ed:7e:28:cc:da:90:ec:9f:2f:f0:5a:f7:b4:a7:c1:28:
81:7f:5f:03:e8:d3:27:5f:8e:08:f3:f9:25:66:c1:58:cc:d4:
98:0e:1b:f9:a8:d3:6a:93:0b:af:2f:7f:3a:99:bc:38:2a:ce:
c5:51:58:97:c8:49:fa:6b:8e:b6:2e:5f:fb:90:5d:4d:dd:da:
a6:81:71:28:fc:6b:25:fd:bf:dd:e4:fe:9e:51:7f:5e:43:bb:
62:af:96:c6:88:5f:e9:1f:1e:b4:51:f1:be:9d:10:8c:58:59:
0b:b5:85:17:82:fa:ba:b4:25:63:5d:71:ee:8d:7d:1b:2a:d1:
91:96:de:4f:d6:80:86:e1:61:ac:0a:9f:b1:62:13:1c:e5:76:
13:45:96:2c:4e:7c:33:2a:1a:cd:e7:6f:4e:b3:f0:83:ce:8b:
db:51:cd:ef:0d:15:b3:68:c0:10:69:92:e9:08:35:0c:9a:64:
f8:f0:7f:fa:2c:78:66:40:93:69:e2:c3:b3:8c:f3:83:3a:38:
ef:90:20:e8:6d:4e:6c:c7:46:b3:38:37:12:84:ef:93:b4:8a:
d2:b4:49:9f:03:e9:84:9a:64:6b:81:d4:65:b9:5e:92:99:2a:
c1:e9:72:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUT9i/ghdNYVKuZSEh7iYU5wSVy6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NERkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5
MEVFRjRFMTAeFw0yNTExMDQxNzI2MjNaFw0yNTExMDUxOTA4MjNaMDMxMTAvBgNV
BAMTKEZGQkJGNkU3MUExQUJGQTdFMDZDN0YyNDVERDhEMUFEMjEwN0ZFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79BpsAyH7DWRyDZfagdtn0VbW
7ogNdgQttlVioY8LzW93WttnxECDgCMfK+lbXB2kF9WcTqTtGSjNt3xCL2iI6pM/
xtZwHSf1gJZlhE3UErSJWXDJenzrNdgm8gcmvAkzx2LOmlmbXVzJcweaqlmrQEih
E1oV5CkxiyuBowbhusnkgEXJFRmxzOgyawDGD7a6u1zTjrVr6RlnSrbTOuTGy6To
7b8IRj+qtYmMAq0E/1l4njU87EkNPL11Lmd3QrrCux9e/ckF8BAhsf1Qua+kRwjk
MLkqKTJnW2EhY6tj1VdrLDFU+gshbxrQUKr7HUO/fqAjgl/N7m0vTmbHwOzpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/7v25xoav6fgbH8kXdjRrSEH/qwwHwYDVR0j
BBgwFoAUzN+yUoTRQRoFwtWpgWm6oJDu9OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl
bncvMS9DQ0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDREZCMjUyODREMTQxMUEw
NUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMS9D
Q0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcw7PJmRlPU8kB4FtkS39CCdw+GLtfijM2pDsny/wWve0p8EogX9fA+jTJ1+O
CPP5JWbBWMzUmA4b+ajTapMLry9/Opm8OCrOxVFYl8hJ+muOti5f+5BdTd3apoFx
KPxrJf2/3eT+nlF/XkO7Yq+Wxohf6R8etFHxvp0QjFhZC7WFF4L6urQlY11x7o19
GyrRkZbeT9aAhuFhrAqfsWITHOV2E0WWLE58MyoazedvTrPwg86L21HN7w0Vs2jA
EGmS6Qg1DJpk+PB/+ix4ZkCTaeLDs4zzgzo475Ag6G1ObMdGszg3EoTvk7SK0rRJ
nwPphJpka4HUZblekpkqwelyBQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:03:09 2025 by rpki-client