
$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
File: 687A6048EF56F775209873731BED7BB7E087AB69.mft (raw, json)
Hash identifier: EWlrIbEdgVPweFBDvIEf/AX7fWt7zNUtOmlBarFWkBc=
Subject key identifier: FF:56:CB:A4:2F:DF:D0:CA:6F:A3:50:66:65:A6:9E:2C:9E:82:3E:6F
Authority key identifier: 68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
Certificate issuer: /CN=687A6048EF56F775209873731BED7BB7E087AB69
Certificate serial: 268395470A63EF7FF1A955387A4C8910C52ADFF2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
Manifest number: 20
Signing time: Tue 04 Nov 2025 11:56:07 +0000
Manifest this update: Tue 04 Nov 2025 11:51:07 +0000
Manifest next update: Wed 05 Nov 2025 13:44:07 +0000
Files and hashes: 1: 323830343a373066343a3a2f33322d3332203d3e20323730373538.roa (hash: f27C5T+vOLtC67F9853TU+6fMSfriLRMBjXRflUWZtQ=)
2: 3230302e33392e3134342e302f32332d3233203d3e20323730373538.roa (hash: byp4m7GwzFtXizKNIB10Y6S2W7hHiT2ASKgfSExDmqg=)
3: 3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa (hash: 3Ef2hhgQaSJa/nd/sZPTUkseKS9OSIlbQUi499mzr+M=)
4: 687A6048EF56F775209873731BED7BB7E087AB69.crl (hash: Xg5DX2MiN7r7m3lgu20FjyK4ocIOGyO9c/O6rzPDYHo=)
5: 3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa (hash: RfI9XZuQj6gKm8IPfZ/OUFHP6iMQbotU/wIKwBHToN8=)
6: 3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa (hash: JX7Pdu25r7dXEE2keGtmwFR/OPLJBJ7iFLNr57lypDg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 13:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:83:95:47:0a:63:ef:7f:f1:a9:55:38:7a:4c:89:10:c5:2a:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687A6048EF56F775209873731BED7BB7E087AB69
Validity
Not Before: Nov 4 11:51:07 2025 GMT
Not After : Nov 5 13:44:07 2025 GMT
Subject: CN=FF56CBA42FDFD0CA6FA3506665A69E2C9E823E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:b1:8f:f8:9c:e6:62:5a:92:62:9e:e7:30:
d5:ee:d7:ac:ac:96:5f:46:11:8e:a0:c4:1b:b0:09:
c6:1d:63:5c:77:ea:34:de:e4:7f:18:98:b5:00:7d:
57:78:b3:53:a6:12:7c:a2:67:79:69:97:dd:d8:6a:
a2:dd:63:46:21:a0:74:fd:c4:a2:05:f7:2d:33:65:
ae:b9:14:2a:56:9b:35:c2:0c:1a:6f:ac:c6:15:47:
a4:69:bf:d3:91:d2:21:c0:b1:33:f2:3c:61:c3:53:
e6:96:23:d2:39:47:5a:a0:50:ed:b6:ec:64:2c:c9:
d0:26:da:71:43:43:b5:01:07:17:42:46:88:5a:13:
9b:50:3e:fe:01:9f:7b:20:85:ee:f3:fa:39:e7:9f:
f6:70:8d:27:23:41:cc:f2:8a:81:ea:ee:f6:1c:8f:
88:55:cb:30:80:a9:cd:e7:ca:cd:6d:cc:5e:da:56:
5f:b7:ee:20:93:12:6e:94:dd:04:29:47:6b:47:47:
7a:a1:be:7a:2c:47:ae:81:fb:35:48:17:64:58:b0:
bd:4d:04:18:eb:d5:fb:c5:14:7d:ab:d0:09:74:7f:
c9:0c:ac:67:1b:15:10:f3:87:28:ad:a8:73:96:2f:
88:c7:a1:46:27:fe:da:67:60:66:d3:73:34:83:4c:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:56:CB:A4:2F:DF:D0:CA:6F:A3:50:66:65:A6:9E:2C:9E:82:3E:6F
X509v3 Authority Key Identifier:
keyid:68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cc:1c:66:2a:72:b7:5a:b9:e7:09:85:44:a4:f4:c4:7b:fc:
5e:f9:4e:11:12:c7:39:d4:db:02:3e:da:0b:5c:f1:3b:7b:19:
db:b8:2c:e4:a3:65:1e:31:ee:80:bd:a0:e5:f3:8d:4b:43:51:
9c:6a:04:11:04:2e:fb:02:34:de:ae:89:0b:a8:ed:a3:d1:ed:
1b:3e:a1:77:c6:0a:10:7b:59:db:c1:5f:e5:19:3b:e9:d2:1f:
25:e6:a9:24:cc:5f:81:9f:aa:c2:e4:54:d2:65:05:0c:4d:bc:
80:6f:51:62:b4:92:1f:e6:cb:d2:78:04:23:61:be:b0:32:be:
96:6f:0b:e8:b6:af:b7:c0:ca:c9:e8:64:b1:de:6e:e1:52:38:
71:99:63:e9:ab:88:09:da:13:d2:74:56:3a:76:00:25:56:15:
dc:57:a2:e1:75:23:2a:17:f5:bf:4d:27:11:0c:05:ba:31:18:
2b:79:4e:d4:d2:d3:72:7b:01:ed:3c:65:53:2a:14:9b:c5:2c:
45:2f:38:13:e6:61:f3:14:23:01:b1:46:5b:6c:6d:cd:dc:66:
78:92:72:88:ce:25:a0:25:dc:02:52:d9:f7:34:e0:32:13:92:
d1:4a:c9:6e:2c:a1:98:93:c8:72:8f:e3:47:28:e4:28:2d:2b:
0e:b5:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:32 2025 by rpki-client