
$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json)
Hash identifier: wOHHrKs3g552WwnEneoKgiAa9vnSElUWKvYAZ8P0K/M=
Subject key identifier: 87:51:66:12:34:26:57:AC:DF:3A:47:76:16:72:70:E4:2D:E3:28:51
Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F
Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F
Certificate serial: 2F6BBAA0C655280F61AD7110CE7D4948BC5EFE7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
Manifest number: 02FE
Signing time: Wed 05 Nov 2025 03:14:10 +0000
Manifest this update: Wed 05 Nov 2025 03:09:10 +0000
Manifest next update: Thu 06 Nov 2025 03:47:10 +0000
Files and hashes: 1: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: ZkBeX0WWJCwewIHrZef0h3RxLAXUNroMdptDFjYWcME=)
2: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: 6DURpCCZNXr4RssgY5+U5SCdw8QuLPJEOyNu8nBAHHM=)
3: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: UDl1vPtKHRcjoqjJzXtLV0xlO/f4LbGKXV+a4FrBwvs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl
rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 03:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6b:ba:a0:c6:55:28:0f:61:ad:71:10:ce:7d:49:48:bc:5e:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F
Validity
Not Before: Nov 5 03:09:10 2025 GMT
Not After : Nov 6 03:47:10 2025 GMT
Subject: CN=87516612342657ACDF3A4776167270E42DE32851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:e0:48:e2:04:b8:e2:5b:11:17:17:80:e2:
5f:45:8c:18:f2:36:f3:07:93:e2:31:88:88:b3:ba:
e5:e2:ee:47:29:00:e2:e6:8b:91:53:d9:5b:f5:aa:
79:aa:2e:1f:3a:72:85:c7:87:a3:5e:62:8c:3b:da:
f1:08:52:60:dd:21:b5:31:b5:4e:19:d9:8a:43:e6:
47:45:d6:93:51:ec:b0:d1:cb:1d:bf:58:2a:d1:18:
85:6c:a0:2e:18:29:78:cb:af:79:c9:d7:c2:98:cd:
c0:f7:fe:9e:14:f0:b5:d4:3a:e6:b9:18:91:a9:e0:
b5:d8:6d:d8:24:57:82:df:ff:1f:8d:b2:7a:61:86:
80:24:50:c8:a5:48:9c:95:3f:95:16:b5:e5:d1:9f:
67:31:d8:55:64:fd:6f:b9:da:41:55:32:54:16:56:
70:cc:5e:75:d6:9f:cc:82:3b:68:21:29:14:ce:d1:
4a:bc:e2:46:84:d4:39:b0:56:52:9b:e6:83:6f:db:
98:6a:0b:d4:89:db:fb:cc:f5:93:20:a6:11:6a:12:
62:a4:4b:4a:fc:82:f8:c6:a0:da:0f:89:f5:8e:74:
da:aa:ee:38:ad:60:9d:2f:b7:a5:ea:b1:a5:bd:bb:
62:c3:cf:ca:3a:b1:ed:7e:47:c7:94:8d:72:0c:0c:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:66:12:34:26:57:AC:DF:3A:47:76:16:72:70:E4:2D:E3:28:51
X509v3 Authority Key Identifier:
keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c1:02:52:2d:e4:e3:dc:a1:aa:55:6f:35:41:a0:9f:d6:54:
f2:6c:7b:05:33:11:2b:38:f8:c5:77:dd:80:4f:5b:3e:41:43:
27:eb:3f:d1:df:62:85:02:29:1f:b6:2d:14:d1:7b:bf:56:96:
02:89:11:51:bf:5f:5f:b6:10:3d:57:38:80:99:21:37:2c:63:
17:d7:43:70:41:bb:84:dc:f6:25:f8:ac:b2:45:63:09:c1:14:
12:c5:cc:e6:b0:53:1a:98:7f:30:03:05:f9:ca:5f:6b:7b:2d:
4d:89:49:cd:31:80:2b:b2:10:a2:7f:ad:d6:74:1b:62:f9:67:
f4:52:d7:bf:1d:93:f6:11:c0:38:5c:8c:c2:6f:68:70:70:3c:
63:7c:b4:19:fc:8d:77:58:b7:12:f2:b7:4c:82:cc:9f:2e:47:
19:cd:77:ae:f7:0a:95:4b:33:5b:e1:ef:62:38:5e:06:a4:c7:
61:43:9f:86:18:95:5b:62:e7:4c:3e:4d:de:cf:27:ea:67:b3:
c5:6c:ff:08:61:f0:3e:23:6d:b1:a5:f3:92:58:29:fb:24:d4:
e9:91:1a:dc:57:0c:6c:40:8f:b2:06:07:a7:3a:29:ea:86:f2:
7d:e1:28:0c:22:f4:81:18:91:6b:b9:ac:cd:01:5d:65:62:70:
b2:3f:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:36:20 2025 by rpki-client