
$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
File: 968400C9DFC16D643EF5C94C34F993F17C7568AA.mft (raw, json)
Hash identifier: K3sJyQ5ep5pOHxLiixMOczAxidU+LX/+uuIsqL1XlI4=
Subject key identifier: E9:8E:8E:0E:83:AF:8A:6B:C8:79:F2:A1:98:6C:A7:0B:4E:8C:C5:85
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Certificate issuer: /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial: 08E29B8632B0F96D5A09D42A82FCD9CAB03447B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
Manifest number: 02CF
Signing time: Tue 04 Nov 2025 20:39:33 +0000
Manifest this update: Tue 04 Nov 2025 20:34:33 +0000
Manifest next update: Wed 05 Nov 2025 21:16:33 +0000
Files and hashes: 1: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: euHAp7+9vRWrpVJOCBtQMlM0mKiy4FhOArKfKYePGc4=)
2: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: fG8mMWmzrS7pxGB0+b9dBFu9DpydOy3tC0sVdHradZo=)
3: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: XohZhw/qfHKZPzmoxfjStIrmnl3pqxRNfLqhu9QyNn0=)
4: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: H7O0RgQD2YQmmg/zd/Dw8LRIlxXUh+E2tsnun3K5MkM=)
5: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: KXUZqQdV0NiuXnQfwlKO9KEf9ReLWB0t167GugqP9FI=)
6: 968400C9DFC16D643EF5C94C34F993F17C7568AA.crl (hash: LvvvzqDVN8+OTqHfOUpY9we1XA269XkSzHjtFs3ShYY=)
7: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: 4RWdX36bZMJLXgoSRSa1Ymc4At0rCJL3dL7BLqRu0LE=)
8: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: ZWKOFtJRLdp2SLpB4KN+ZC/34+ue9ju+E35hP3Fz4ZI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 21:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e2:9b:86:32:b0:f9:6d:5a:09:d4:2a:82:fc:d9:ca:b0:34:47:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Validity
Not Before: Nov 4 20:34:33 2025 GMT
Not After : Nov 5 21:16:33 2025 GMT
Subject: CN=E98E8E0E83AF8A6BC879F2A1986CA70B4E8CC585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:09:04:06:76:93:01:ae:21:bd:4a:f5:b2:
95:c2:e1:cc:78:69:ee:07:fa:d6:c9:57:f9:65:a2:
6c:cd:5b:35:7b:14:53:ab:88:fd:01:77:be:d1:c6:
1c:ce:70:c9:4a:bc:ed:6d:a6:c1:05:d8:01:ce:ca:
86:b0:ac:b2:a6:e9:44:7b:62:7b:e4:72:76:b8:a2:
53:be:a4:d1:dd:62:06:82:99:b9:da:47:0a:a4:78:
d7:6f:13:09:ab:7b:3b:07:b6:40:c5:96:2a:35:57:
90:fd:34:0a:96:b4:2f:18:12:5a:cc:a6:b2:0e:8d:
a0:8d:5d:03:f0:30:60:38:cc:89:b6:9c:77:44:cd:
13:2b:01:3f:b8:67:68:83:2d:3a:9d:ba:bf:74:6c:
a4:6d:45:0d:af:44:1b:78:f1:61:8e:0a:ed:91:f5:
90:c9:5f:7a:80:e6:32:36:3c:14:f4:95:8c:00:37:
df:8c:56:64:76:7b:8e:c0:cf:3e:7c:05:60:5a:03:
04:87:3a:48:9d:72:00:74:47:59:c8:d9:62:10:38:
ab:28:39:9a:50:0f:80:78:c6:0d:27:74:a2:ac:2d:
40:be:8b:2e:76:51:ee:84:b9:54:bc:61:7f:46:cc:
6a:4d:27:6c:70:59:24:50:ff:8e:33:c6:83:07:0d:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:8E:0E:83:AF:8A:6B:C8:79:F2:A1:98:6C:A7:0B:4E:8C:C5:85
X509v3 Authority Key Identifier:
keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:fc:66:12:c1:2e:15:b9:b8:f7:d8:4f:ee:1d:58:65:83:
b6:ea:98:f5:4e:27:73:0a:9d:52:22:06:5d:ec:e0:1a:9a:ad:
ed:49:23:3f:f2:87:0c:26:0a:17:b7:00:72:fb:38:67:b4:3e:
ef:f1:da:29:8c:2c:0e:68:76:36:1b:8f:1d:19:73:40:69:f8:
c3:37:4e:f8:6b:77:25:19:07:43:69:3a:b3:77:1e:7e:80:25:
f2:bf:5a:c4:d0:bc:c5:ea:11:a1:22:b0:96:00:09:44:02:0e:
6d:ff:f7:eb:fa:da:45:73:16:b4:32:65:93:6c:e4:e4:27:f8:
8c:2d:74:3e:58:fa:14:08:e1:e7:28:71:21:29:c0:31:04:0b:
73:a8:5b:8c:e6:6f:b8:a2:c4:d7:7e:9b:c8:8c:8f:e1:a4:15:
62:fd:6d:09:1e:0d:10:65:f4:9c:3e:f6:d1:b0:41:30:b3:fb:
e3:e7:72:d6:9f:6b:75:23:f8:6a:6d:56:8e:8f:be:03:0f:51:
97:91:ae:e2:7c:e2:7b:3c:e6:da:e3:29:2c:3f:fb:5b:5e:a9:
2e:3b:c0:96:3b:35:ee:f6:95:e0:8a:3f:47:43:fd:46:83:a2:
e8:e5:6b:8e:f4:16:c6:d6:23:d7:25:e9:66:9c:fb:65:e8:69:
a4:56:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:08 2025 by rpki-client