
$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json)
Hash identifier: uX0zix3YdizTJf/tJUWEhwpg5ALcyt4WKds/v8e0xK8=
Subject key identifier: ED:54:78:10:C4:0B:A8:47:49:F2:A3:A7:EF:7E:3F:C5:E9:35:BC:98
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Certificate issuer: /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial: 5882735BBD127A48982F229E41391B3FF9E9BA17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
Manifest number: 01DD
Signing time: Wed 05 Nov 2025 12:16:57 +0000
Manifest this update: Wed 05 Nov 2025 12:11:57 +0000
Manifest next update: Thu 06 Nov 2025 15:40:57 +0000
Files and hashes: 1: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: nwZpfdiD9lmHVEfGr7y7ft3lumKfAxBvAzwQfB72Avg=)
2: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: 6ekC/or0oqPYpMWxoWnXMnG5VPwkm+1AIzb1AsdY75U=)
3: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: 0v/IQuZRt8fOahBYOamSIWRCnGJvUKoedCirRCLNEWE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 15:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:82:73:5b:bd:12:7a:48:98:2f:22:9e:41:39:1b:3f:f9:e9:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Validity
Not Before: Nov 5 12:11:57 2025 GMT
Not After : Nov 6 15:40:57 2025 GMT
Subject: CN=ED547810C40BA84749F2A3A7EF7E3FC5E935BC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:52:e5:d1:f9:75:fd:5c:b2:5c:43:3b:8b:
58:ef:1f:80:4d:a8:3d:fe:b4:04:33:a9:65:6d:70:
2d:db:cd:d9:f7:85:b5:40:ce:32:64:e2:de:54:56:
81:27:c8:00:a5:da:55:47:7b:29:6b:d2:fb:67:60:
96:17:e5:0c:8f:62:e0:5f:1e:37:54:cd:4a:4a:db:
c1:e5:02:ab:7c:13:5a:b3:ed:d7:a9:c6:78:63:8c:
f0:15:2a:8e:19:e1:ac:b1:89:36:5f:c0:34:34:6d:
2e:c1:8e:27:1f:04:13:06:18:52:b6:74:5d:71:9e:
a2:7a:f0:9f:b6:25:3f:f0:57:74:6b:6e:dd:0a:11:
13:fe:18:db:51:56:bf:84:e2:d9:7a:09:a4:1a:96:
0c:4a:36:f5:02:34:06:12:67:92:db:b6:30:0c:2c:
93:e1:bc:86:36:6b:88:11:77:b8:b0:82:7e:57:f5:
bf:67:67:0b:04:76:51:34:e8:5b:17:db:b7:ca:8c:
e1:a9:ca:44:62:c6:aa:8c:2f:5f:71:31:89:97:c8:
5e:0a:be:dc:df:4c:db:f8:23:9f:b2:72:95:99:5d:
f9:9f:e2:32:dd:cf:ca:b1:b1:27:7d:f7:29:ae:d9:
55:4f:65:f3:c2:4c:eb:b5:88:99:33:d8:7d:44:69:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:78:10:C4:0B:A8:47:49:F2:A3:A7:EF:7E:3F:C5:E9:35:BC:98
X509v3 Authority Key Identifier:
keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bd:82:f0:c7:6e:d8:03:a5:93:ac:dc:f3:47:30:e0:d7:0d:
56:ac:81:d6:a4:0a:c7:83:f8:a1:41:eb:3e:d7:0c:f4:55:79:
67:af:74:6d:d3:52:ee:b1:37:94:d6:f1:9a:f6:59:61:1c:e7:
75:6e:82:11:bf:f4:7a:48:58:f5:80:c1:92:91:f7:bf:5c:7f:
67:12:b4:04:03:16:44:e4:10:92:b0:9d:3b:29:8a:6d:d3:3a:
31:32:f4:0b:9a:b1:36:37:35:29:68:37:e8:d9:d0:f8:0c:dc:
20:81:4e:45:69:bf:3e:0f:cc:89:e1:8d:fa:bc:5d:75:6f:43:
7d:55:0e:66:68:c7:2c:64:71:ec:33:66:05:e0:4e:59:3d:d9:
a6:d1:03:f8:b6:6a:2e:ac:6e:f7:e4:3c:ef:71:2d:9b:56:1f:
d4:4e:4f:6c:7b:5f:40:8e:09:bb:01:06:61:be:9c:a1:2d:1a:
5a:48:c8:f0:fa:89:11:76:a1:2d:ce:dd:37:c1:6c:7f:23:3d:
d9:8b:cd:94:74:32:35:85:49:6d:2a:21:35:29:25:a5:48:c5:
26:c9:37:9d:87:ea:ea:e4:77:07:1f:a6:a6:34:a7:e4:9b:c1:
9a:d4:3e:09:29:ae:cc:35:ff:c3:d3:3f:2a:ab:08:2e:4c:da:
9b:68:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:31 2025 by rpki-client