
$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
File: 10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft (raw, json)
Hash identifier: IJzdsHlBjjZRnUSVOtRxxzoHE3er+xtXU+jr50QN5VU=
Subject key identifier: CE:94:BD:BE:D7:4C:59:67:E1:48:10:B9:BB:31:7F:8D:28:96:42:4E
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Certificate issuer: /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial: 17C3FF3BE7E0A01D05B0393C7A03BA8AECA03320
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
Manifest number: 0306
Signing time: Tue 04 Nov 2025 08:40:57 +0000
Manifest this update: Tue 04 Nov 2025 08:35:57 +0000
Manifest next update: Wed 05 Nov 2025 09:30:57 +0000
Files and hashes: 1: 10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl (hash: Et6mw1Gu8gf4dRp/StfZGVATu1GVGyb5Oih5RfSqel8=)
2: 3137372e33372e33302e302f32332d3233203d3e20323730353934.roa (hash: jZMapOUe84nS0/HmSAfDLEi0KYVQyv8elBOcMNwdzlk=)
3: 323830343a366536343a3a2f33322d3430203d3e20323730353934.roa (hash: FJzuXb3rPKEB9M/UrCEVvzbujD6MI9jHBtF6Dpipnxc=)
4: 3137372e33372e32392e302f32342d3234203d3e20323730353934.roa (hash: f6yTzBfUYT5Bjdi76PtLBqtiOolgjET/iU/l6X+ipa4=)
5: 3137372e33372e32382e302f32322d3232203d3e20323730353934.roa (hash: KWppXTqmgTsfYVtQwBA0L55uv+geHmhw9Ux5utAeIAg=)
6: 3137372e33372e33312e302f32342d3234203d3e20323730353934.roa (hash: FDFbmXXsRE37sk0qOjiCb7hbsCEVD3Su2L9vgvnmp7E=)
7: 3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (hash: fE24f26j0kL/eARBJ/0bEc8rHNXMJe4dMA29NYJzh/E=)
8: 3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (hash: EmWje+arIFTV7gO7Z/KIu2yxqAhGMRVeT3C7Qk900tY=)
9: 3137372e33372e33302e302f32342d3234203d3e20323730353934.roa (hash: Ey7RS6ZvA9Mg77sUwDuoQ8ZDRjfaKl8xEJ8Pcs9LN8I=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 09:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c3:ff:3b:e7:e0:a0:1d:05:b0:39:3c:7a:03:ba:8a:ec:a0:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Validity
Not Before: Nov 4 08:35:57 2025 GMT
Not After : Nov 5 09:30:57 2025 GMT
Subject: CN=CE94BDBED74C5967E14810B9BB317F8D2896424E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:ca:75:d7:66:df:07:5b:8c:a7:7f:95:cd:
31:41:19:fe:ed:a1:9b:89:1f:9b:41:28:a8:54:df:
10:24:52:a3:f5:9f:f8:c7:3b:88:4c:34:7a:b8:13:
f3:84:0e:f8:75:04:48:7c:9f:4e:45:a9:2a:3b:1f:
a1:87:bc:fc:5d:02:03:e9:80:51:6a:26:65:6b:56:
e2:6b:e9:bf:b2:55:99:71:5c:24:10:7f:53:2d:fe:
3e:04:82:3f:49:0a:a4:73:09:c2:73:f9:42:dd:41:
ab:fb:b6:62:be:13:3d:a7:d6:82:60:19:1a:2b:6f:
22:28:35:7d:9f:cb:3a:07:94:7b:ca:ea:f2:83:ee:
88:98:84:c9:7d:fd:0f:ea:fc:a9:0a:29:3b:f6:e8:
9c:2a:04:3c:17:6a:eb:ef:ff:e5:9d:17:9e:34:60:
96:2b:54:55:9e:de:43:c5:39:60:5c:5d:3f:56:1a:
73:73:6a:a0:35:82:50:46:dc:e6:e1:e0:7b:5a:54:
e3:3d:c6:58:b6:a3:de:45:31:f1:18:51:66:5f:ba:
79:d0:ad:48:c9:c8:11:35:93:fc:d5:23:f4:da:de:
b7:d0:ed:fd:4e:52:c9:9e:1e:fa:21:19:26:2c:42:
28:0d:95:79:41:55:2a:f9:36:f7:16:a3:e0:1d:f0:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:BD:BE:D7:4C:59:67:E1:48:10:B9:BB:31:7F:8D:28:96:42:4E
X509v3 Authority Key Identifier:
keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:30:eb:c1:cb:42:4f:f5:81:c8:dd:fe:58:19:83:be:df:c4:
b1:03:a5:52:55:ef:0b:7c:13:ef:70:d1:e4:04:34:cd:b0:48:
d5:20:c7:ee:d7:c3:03:b5:44:34:2e:49:0d:4b:a0:4a:0d:e3:
03:6d:2c:f4:ea:af:0a:24:fa:cf:30:06:e1:ca:bd:55:a9:64:
a0:f4:b0:19:a1:26:44:d9:34:6a:71:a0:f0:b4:d1:30:c5:1d:
87:97:42:75:d6:d3:fc:bb:31:7b:84:22:48:81:ef:fd:ec:5b:
0e:d2:36:5a:1f:28:31:fb:92:4d:3b:49:a2:6b:5c:f3:d5:ba:
6e:2a:7c:64:22:f0:7c:4c:40:8b:85:9d:9a:da:5d:54:f2:ef:
64:7f:78:d6:41:f5:4f:b1:53:c6:18:46:33:4a:bd:b4:ae:ac:
51:e6:d5:a4:7a:24:6f:62:67:a8:a2:cd:c3:51:34:a3:2c:2e:
da:e6:00:d4:7d:2e:27:7f:84:57:70:92:f0:b9:66:f2:1f:eb:
5c:55:a1:17:fc:00:76:4b:19:a6:cf:6a:99:d4:87:6e:f5:56:
4c:8f:dc:7b:f5:9f:29:42:d7:8b:d3:57:8b:ea:3b:c8:7c:bc:
8f:c4:c8:3c:2e:88:99:7a:6d:e0:2f:91:f4:1a:6a:12:ac:ec:
b4:e4:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:39 2025 by rpki-client