
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
File: CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json)
Hash identifier: A4w704YmW0aS4qvU78FzQLKR94BttefcUhy8sQ4EXP0=
Subject key identifier: 7A:CC:5A:B5:DD:5D:4E:BB:E2:F9:F1:A2:30:09:9A:75:EA:1A:9B:7C
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 0AA177D7866F6B5B5CF233D823180878BCEA34CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
Manifest number: 0302
Signing time: Tue 04 Nov 2025 18:57:33 +0000
Manifest this update: Tue 04 Nov 2025 18:52:33 +0000
Manifest next update: Wed 05 Nov 2025 19:34:33 +0000
Files and hashes: 1: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=)
2: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=)
3: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: cw9T+3BppZzrM0DTARaDsnGkebu80VsSxPXCaLnyKKc=)
4: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=)
5: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 19:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a1:77:d7:86:6f:6b:5b:5c:f2:33:d8:23:18:08:78:bc:ea:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Nov 4 18:52:33 2025 GMT
Not After : Nov 5 19:34:33 2025 GMT
Subject: CN=7ACC5AB5DD5D4EBBE2F9F1A230099A75EA1A9B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:72:b2:1b:f1:fa:9a:cb:44:77:5c:d4:6d:
1d:b2:96:db:f7:24:54:9b:e6:b8:c7:ef:45:b4:45:
e1:27:40:99:8d:56:8f:d2:7f:40:55:7f:16:b8:72:
00:98:05:0b:29:59:aa:a1:81:3b:69:d7:89:55:e0:
e5:f6:df:59:e9:96:b6:05:e4:3f:05:c6:f0:fe:2b:
3b:01:2d:f9:53:91:83:cc:a2:5d:d0:8e:ca:54:52:
09:2f:3f:8e:0e:d6:c3:62:0a:0d:59:32:ff:47:68:
15:1e:b3:10:ad:e3:41:c1:d5:8d:6a:96:3d:5c:fe:
94:ac:54:4a:bf:34:ee:b0:aa:b8:15:a7:fa:f3:34:
7e:55:47:76:93:29:d3:3f:b0:2a:e8:85:2d:65:b6:
3f:d6:14:ec:98:e1:9c:dc:6c:7f:1f:67:8b:c0:20:
6a:31:76:5e:a2:ed:f3:57:b3:ec:45:e9:90:14:ac:
03:c2:69:24:20:08:d5:3c:ff:ad:d7:ab:72:52:03:
f0:af:49:5d:03:2e:d9:e6:4f:eb:49:65:8b:b7:57:
2f:2f:86:03:85:5d:fc:94:4a:82:3e:4d:76:79:e7:
29:73:92:df:45:26:4f:c9:8d:39:18:97:40:80:16:
ba:f6:2f:3d:14:1f:97:f3:a4:63:23:76:a5:de:dd:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:5A:B5:DD:5D:4E:BB:E2:F9:F1:A2:30:09:9A:75:EA:1A:9B:7C
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f0:31:c9:a3:45:8b:5e:69:a4:8d:a6:e0:d1:68:57:b6:32:
bc:21:9e:d5:2e:4a:0c:4a:36:8d:85:e6:22:6c:4b:f8:7f:3b:
23:49:42:f5:22:4d:14:0c:21:f6:eb:b4:79:e9:d9:49:da:5c:
02:1b:aa:cf:10:fb:18:61:b6:d0:30:84:7e:5f:f4:60:24:b3:
77:ff:c8:94:d3:88:af:45:4a:b7:cc:58:67:88:6f:42:7b:23:
c4:f4:e2:27:30:58:44:14:09:77:0a:96:35:fa:4e:97:92:a5:
3a:a7:61:ac:63:f3:74:7b:4e:de:97:28:15:39:8a:3a:3e:c2:
e3:1f:68:b6:f3:a1:79:7d:4e:de:75:41:10:b8:e4:80:3f:9f:
ac:f1:bd:5c:c3:05:20:ab:e5:10:19:c2:5b:25:ff:ee:7d:e5:
d1:35:db:4a:8a:30:ae:74:70:9c:9e:e8:9d:0d:c4:19:1c:2f:
7c:57:0c:84:7f:57:5e:d3:9b:83:3e:a2:cd:ef:fa:49:d8:cc:
2d:70:a2:4b:ef:88:26:d8:a3:95:58:1d:98:6d:5f:8d:b9:ff:
08:ec:af:81:95:10:af:94:6a:b8:2a:f8:f1:bb:eb:10:b6:6e:
f6:a7:79:46:14:84:7b:e1:c6:86:e8:fb:9d:d7:35:80:ae:d3:
a0:6f:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:43:47 2025 by rpki-client