
$ rpki-client -vvf rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
File: D272B79940440721190429AABBA45B0BB5589F3E.mft (raw, json)
Hash identifier: 7//i1Tr6o7aY7Bt+ho4Vy8n89bS0859vNDbV0xTterg=
Subject key identifier: 40:9B:E3:C2:A5:1D:45:44:73:69:D9:64:7D:E2:54:57:37:0C:06:4D
Authority key identifier: D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
Certificate issuer: /CN=D272B79940440721190429AABBA45B0BB5589F3E
Certificate serial: 4D8DC157FCCEE4FAE2F84DCD31E6B3288E65F7DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
Manifest number: 017B
Signing time: Wed 05 Nov 2025 05:51:52 +0000
Manifest this update: Wed 05 Nov 2025 05:46:52 +0000
Manifest next update: Thu 06 Nov 2025 09:13:52 +0000
Files and hashes: 1: 323830343a336137383a3a2f33322d3438203d3e20323636303931.roa (hash: hTMjYKeXC/M6OdDXuJYg47J8XfGr4MytiTOYk9kboqU=)
2: D272B79940440721190429AABBA45B0BB5589F3E.crl (hash: LL42z85Wb9Gjl1hrjt/lskhRsqpspvgij8I1yiXm1fw=)
3: 34352e352e39362e302f32322d3234203d3e20323636303931.roa (hash: /6iGVAHYIhPWPHHz3993u3r1D5NYjNcPNziE02dN4Kw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl
rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 09:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8d:c1:57:fc:ce:e4:fa:e2:f8:4d:cd:31:e6:b3:28:8e:65:f7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D272B79940440721190429AABBA45B0BB5589F3E
Validity
Not Before: Nov 5 05:46:52 2025 GMT
Not After : Nov 6 09:13:52 2025 GMT
Subject: CN=409BE3C2A51D45447369D9647DE25457370C064D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:43:66:50:54:0a:42:d0:52:3b:1b:2a:19:
97:98:57:bd:33:c5:cc:b6:0f:3b:3d:5b:8d:1f:7a:
3e:37:cc:d2:d9:0d:d7:63:0f:b1:c2:00:b9:48:4a:
3c:4c:9f:0b:b1:33:39:dd:19:26:14:2b:57:ad:dc:
d0:e8:74:a1:1b:94:2d:e7:1e:fb:e0:6f:95:f3:7f:
b9:06:db:ca:b7:7a:63:28:af:74:5b:92:a5:a4:1c:
0f:e2:36:e7:4a:6a:43:dc:03:ca:2e:63:11:a6:c0:
d3:2c:1b:6d:f1:93:cf:a1:91:a2:0d:e0:b8:68:67:
8e:21:e1:24:6d:8a:de:25:6b:83:ac:2c:c9:3a:89:
42:93:3e:21:e4:c5:f8:d5:a0:11:94:7c:d5:fc:20:
96:e8:0d:0e:8b:09:e9:32:c5:12:2f:cd:31:86:73:
87:bf:82:54:9f:f8:e7:0a:ec:c9:e7:27:fd:46:df:
30:d0:2f:f4:b5:9a:31:18:da:06:87:eb:be:28:b8:
bc:c3:e5:5c:a9:75:80:32:d0:97:77:6d:11:f4:2f:
34:a8:b1:a8:4f:06:94:56:e7:96:16:63:a0:ee:93:
58:e5:dd:8b:07:9b:72:f7:bc:4c:d5:b4:59:c9:bd:
8d:a8:b4:63:68:e6:d6:1a:ce:c0:0c:89:0d:9b:12:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:E3:C2:A5:1D:45:44:73:69:D9:64:7D:E2:54:57:37:0C:06:4D
X509v3 Authority Key Identifier:
keyid:D2:72:B7:99:40:44:07:21:19:04:29:AA:BB:A4:5B:0B:B5:58:9F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D272B79940440721190429AABBA45B0BB5589F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5vV7XB7fjwAvM8RvFEg7C4wTriQnw67WnAwPSy9zVwT/0/D272B79940440721190429AABBA45B0BB5589F3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:08:7e:61:0c:66:28:b6:e3:b9:31:bc:4e:9c:e9:d0:18:6e:
79:94:8f:e4:0e:cf:56:49:69:ab:9f:20:47:1e:9d:4b:89:38:
33:4a:18:b3:a6:6b:f5:7f:b7:b2:fb:05:fe:07:20:37:6c:86:
94:e8:47:fc:8e:66:19:3d:c3:fc:40:54:95:45:55:f2:97:75:
54:be:75:6c:7b:71:fe:5c:d4:23:65:d4:42:d4:52:25:31:49:
31:0f:4e:61:52:95:39:c3:0b:86:8b:8f:78:f5:ea:9b:1d:e8:
da:b3:a1:6a:d7:07:30:67:7f:02:52:af:a5:55:26:7c:69:30:
92:b6:e6:99:02:66:f9:b3:68:22:65:ca:0d:c7:82:f8:76:05:
d7:f1:cc:c6:5f:cf:0b:34:88:72:52:73:4a:8c:59:da:ca:db:
0c:06:1b:bc:1f:6e:89:55:b0:90:06:d2:2d:8e:e6:01:d8:c9:
e5:04:44:b1:51:fe:c0:fa:6c:06:5b:2a:71:a8:e5:91:dd:46:
82:58:87:2a:37:9c:7a:87:50:fe:7e:7b:3f:1d:8b:2c:30:67:
96:38:1b:c8:a2:39:24:d4:80:c3:46:72:08:ec:39:83:14:30:
af:a8:2b:6d:0a:ab:f9:47:3e:e4:1d:0a:be:8d:61:14:02:58:
29:ed:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:41 2025 by rpki-client