
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft
File: 0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft (raw, json)
Hash identifier: gtocmleeV6pc5WcTo9H7J7J2C8vRrH90d0uDNKA4gW8=
Subject key identifier: 39:D8:02:2F:AA:E1:24:72:08:EB:0A:4C:CB:B0:FF:AC:57:6B:64:9E
Authority key identifier: 0B:AA:95:8E:F7:89:36:8F:EF:A4:0D:A3:63:0D:88:B9:21:AC:75:F3
Certificate issuer: /CN=0BAA958EF789368FEFA40DA3630D88B921AC75F3
Certificate serial: 64DE5499560A28A63F98846418B56FC204B584AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft
Manifest number: D8
Signing time: Wed 05 Nov 2025 00:49:44 +0000
Manifest this update: Wed 05 Nov 2025 00:44:44 +0000
Manifest next update: Thu 06 Nov 2025 04:20:44 +0000
Files and hashes: 1: 0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl (hash: FnqqvEm4oxKItdYhB6LUot0/ulhadyOyJR0srp/kIz4=)
2: 323830343a363530343a3a2f33332d3338203d3e20323639343633.roa (hash: M7Ho3UeRjw7AHd0YxIw3yw1Nt6cF/gyEVDxQPIJvaYs=)
3: 34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa (hash: /t9r8dXALNNmICRUSk6onSNr+y4XfmjBYIialMDDkzo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl
rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:de:54:99:56:0a:28:a6:3f:98:84:64:18:b5:6f:c2:04:b5:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BAA958EF789368FEFA40DA3630D88B921AC75F3
Validity
Not Before: Nov 5 00:44:44 2025 GMT
Not After : Nov 6 04:20:44 2025 GMT
Subject: CN=39D8022FAAE1247208EB0A4CCBB0FFAC576B649E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:34:fd:d8:1d:86:78:7b:1d:ca:e9:53:a4:
31:06:de:e2:b0:02:30:e0:68:0c:ba:9c:52:28:fd:
ea:cc:29:fd:5d:c1:00:4b:d8:6b:bb:e6:26:d9:a9:
39:ef:65:59:e6:fe:11:22:fd:5c:17:58:fd:0e:9e:
9a:df:3f:b4:5c:af:86:39:93:9f:c3:51:d8:91:e6:
38:a5:48:99:62:71:2e:c2:dd:c1:04:c4:75:ce:41:
b9:54:59:ef:ff:6a:a8:ee:53:0f:0a:a4:d5:fd:d8:
2f:c0:cf:10:2f:39:52:07:f8:5b:bc:51:f5:46:6f:
72:d1:f1:99:2d:d7:26:40:c2:bb:2a:6c:f3:bc:35:
c1:e8:6b:c4:4c:b5:c1:61:8a:30:82:2e:85:49:9e:
28:bf:e2:36:d8:bc:2b:5d:de:d4:df:3d:34:a3:4e:
c2:a5:be:13:d8:a1:eb:c4:d8:ff:bf:6d:82:41:05:
01:ac:89:4d:96:0b:0c:60:93:6d:ff:9e:42:f5:a0:
c1:5c:99:f4:ac:e9:02:54:02:95:8f:f4:81:02:e2:
9c:c2:1d:a3:cf:14:4b:10:36:71:b4:c1:0a:48:f3:
b0:79:0c:a5:ee:6d:66:70:2b:24:2e:10:78:33:80:
30:73:c5:80:1a:f3:c1:95:26:85:de:f2:2c:df:a3:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:02:2F:AA:E1:24:72:08:EB:0A:4C:CB:B0:FF:AC:57:6B:64:9E
X509v3 Authority Key Identifier:
keyid:0B:AA:95:8E:F7:89:36:8F:EF:A4:0D:A3:63:0D:88:B9:21:AC:75:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:c3:40:d1:8a:3c:ac:68:05:7c:bf:e0:6c:d2:00:e4:c6:
7d:dc:a2:44:22:89:36:07:01:82:13:04:e8:a3:61:0b:72:ab:
56:76:85:92:72:c9:6d:a2:bb:d8:94:4a:95:8f:16:ec:ae:5b:
a7:cc:31:59:b9:99:7d:c4:87:8c:10:05:e1:6d:04:ae:11:55:
52:62:35:a7:d8:9e:be:97:cc:1e:a2:6a:57:6e:30:bc:a5:e9:
19:f1:75:5e:6e:e8:53:40:07:45:84:8a:28:ac:18:e9:01:27:
b8:62:61:4a:8b:4c:b7:b5:a1:8b:23:8d:c3:39:d4:28:72:78:
a8:d3:35:53:fd:4a:a6:41:71:43:39:db:bf:3a:50:9e:b0:f6:
3f:f1:5d:25:c3:0d:4b:52:c5:cf:b8:ea:eb:26:01:fc:ed:d8:
3a:12:c0:e1:4f:ee:ed:ea:35:37:39:ba:1e:70:d6:9c:a6:21:
ec:17:54:5e:73:e7:b4:41:be:da:a1:cd:47:8c:08:70:38:e0:
87:73:a3:73:62:ca:85:fa:80:cb:ff:2c:75:fb:14:2c:06:50:
cf:37:21:f4:50:13:06:43:11:ad:ce:4d:e5:31:d8:f2:71:5a:
c9:50:61:9c:90:4a:cb:58:0b:7b:99:30:65:07:1c:76:d3:07:
e2:f8:84:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUZN5UmVYKKKY/mIRkGLVvwgS1hK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJBQTk1OEVGNzg5MzY4RkVGQTQwREEzNjMwRDg4Qjky
MUFDNzVGMzAeFw0yNTExMDUwMDQ0NDRaFw0yNTExMDYwNDIwNDRaMDMxMTAvBgNV
BAMTKDM5RDgwMjJGQUFFMTI0NzIwOEVCMEE0Q0NCQjBGRkFDNTc2QjY0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yzT92B2GeHsdyulTpDEG3uKw
AjDgaAy6nFIo/erMKf1dwQBL2Gu75ibZqTnvZVnm/hEi/VwXWP0OnprfP7Rcr4Y5
k5/DUdiR5jilSJlicS7C3cEExHXOQblUWe//aqjuUw8KpNX92C/AzxAvOVIH+Fu8
UfVGb3LR8Zkt1yZAwrsqbPO8NcHoa8RMtcFhijCCLoVJnii/4jbYvCtd3tTfPTSj
TsKlvhPYoevE2P+/bYJBBQGsiU2WCwxgk23/nkL1oMFcmfSs6QJUApWP9IEC4pzC
HaPPFEsQNnG0wQpI87B5DKXubWZwKyQuEHgzgDBzxYAa88GVJoXe8izfowDLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUOdgCL6rhJHII6wpMy7D/rFdrZJ4wHwYDVR0j
BBgwFoAUC6qVjveJNo/vpA2jYw2IuSGsdfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhN
Mk0vMC8wQkFBOTU4RUY3ODkzNjhGRUZBNDBEQTM2MzBEODhCOTIxQUM3NUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQUE5NThFRjc4OTM2OEZF
RkE0MERBMzYzMEQ4OEI5MjFBQzc1RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2lDd2JBUzFMbmc1TG9UY3F5RHJKY3FCbnY3ZVdmcXVMakRqN1gxTmhNMk0vMC8w
QkFBOTU4RUY3ODkzNjhGRUZBNDBEQTM2MzBEODhCOTIxQUM3NUYzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACDnDQNGKPKxoBXy/4GzSAOTGfdyiRCKJNgcBghME6KNhC3KrVnaFknLJbaK7
2JRKlY8W7K5bp8wxWbmZfcSHjBAF4W0ErhFVUmI1p9ievpfMHqJqV24wvKXpGfF1
Xm7oU0AHRYSKKKwY6QEnuGJhSotMt7WhiyONwznUKHJ4qNM1U/1KpkFxQznbvzpQ
nrD2P/FdJcMNS1LFz7jq6yYB/O3YOhLA4U/u7eo1Nzm6HnDWnKYh7BdUXnPntEG+
2qHNR4wIcDjgh3Ojc2LKhfqAy/8sdfsULAZQzzch9FATBkMRrc5N5THY8nFayVBh
nJBKy1gLe5kwZQccdtMH4viElQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:14:24 2025 by rpki-client