
$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
File: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json)
Hash identifier: 7Ey/YOENaMidRcHfsPifiUEt2kEpjZItg3hLpYKduig=
Subject key identifier: 7D:BA:96:94:CE:D0:C5:40:54:06:CC:BC:6C:53:12:5E:0E:0F:C1:DE
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Certificate issuer: /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial: 3D1E4D7D628B8DFEF7871C050BBCE56C6B12A268
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
Manifest number: 02FD
Signing time: Tue 04 Nov 2025 20:39:54 +0000
Manifest this update: Tue 04 Nov 2025 20:34:54 +0000
Manifest next update: Wed 05 Nov 2025 20:45:54 +0000
Files and hashes: 1: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=)
2: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: iATE4xrCSF24mHJqomVq3I5I9M6Q93YzJ321hYPrgKU=)
3: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 20:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1e:4d:7d:62:8b:8d:fe:f7:87:1c:05:0b:bc:e5:6c:6b:12:a2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Validity
Not Before: Nov 4 20:34:54 2025 GMT
Not After : Nov 5 20:45:54 2025 GMT
Subject: CN=7DBA9694CED0C5405406CCBC6C53125E0E0FC1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:e5:96:0f:0d:c9:e6:4c:fd:71:8f:0f:40:
eb:09:f2:b1:0e:b7:77:8d:80:4d:92:c9:90:02:29:
99:6f:df:0d:99:77:0d:10:33:95:e5:3a:c5:79:f1:
c9:de:a8:2a:01:c8:ee:69:9b:4b:1d:d8:7a:00:cb:
eb:07:e6:46:79:75:92:d4:70:35:05:92:3d:f8:ca:
e9:d9:b7:db:00:fc:f2:2a:4b:c2:13:a4:f3:25:b3:
a3:a4:4d:c2:bd:26:43:c5:0f:ca:d3:31:fb:01:38:
0d:f3:a5:ce:38:c2:ae:6d:32:18:2b:be:ab:e3:60:
d8:dd:b9:90:97:a5:de:ef:26:59:6c:26:0b:08:ef:
7c:d2:69:2c:70:98:2d:48:20:ff:8e:ad:08:b9:a1:
40:d2:c2:f7:41:47:62:83:15:48:8b:2e:81:54:62:
d5:08:23:d2:1e:af:08:9d:b5:0b:7a:a6:6b:ca:8f:
76:68:fb:14:3e:93:b2:a0:99:26:d9:44:00:54:38:
72:f7:88:e9:f0:10:85:6d:09:da:ef:3e:8f:c4:81:
e6:b6:e5:98:f6:c8:77:82:42:d3:4a:4a:19:5c:77:
cb:36:fa:32:24:94:e6:12:c7:c5:61:86:a3:88:eb:
41:87:76:2d:b8:28:54:86:87:11:f6:d1:ff:e3:bc:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:96:94:CE:D0:C5:40:54:06:CC:BC:6C:53:12:5E:0E:0F:C1:DE
X509v3 Authority Key Identifier:
keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:53:c5:57:50:b5:ce:65:40:6e:2f:a3:e8:03:a6:71:0f:1d:
44:2a:4f:b0:f5:af:cc:be:46:2f:91:fe:06:f8:a7:48:86:0a:
ff:8e:1e:2c:2e:0f:7c:10:2d:81:19:07:78:f4:18:82:ca:99:
27:55:4d:b3:5e:6d:e5:1a:6b:76:a0:de:87:5f:be:2a:94:b7:
83:c4:03:fb:89:dc:76:69:4e:f7:2b:3b:09:9b:25:fc:38:91:
ac:51:66:60:2f:9c:19:ed:cd:fc:07:a0:c8:9c:2d:8a:50:e4:
17:34:bb:e0:83:98:72:f3:6d:32:de:6e:0e:d5:4e:0c:48:26:
66:43:c1:f6:fe:93:80:cd:89:9a:a4:3f:0b:50:85:bb:ba:35:
2a:15:91:80:ed:f9:00:a4:80:2a:1b:3d:72:49:91:70:a1:8d:
cc:55:b7:ed:a0:83:78:e6:67:eb:9a:06:e9:98:86:ee:ae:2b:
35:de:d9:89:cf:80:2f:74:23:55:c2:32:a1:0a:a8:20:53:6f:
07:98:3e:e3:2a:47:1b:25:55:e2:f9:72:33:44:d8:ee:b0:f0:
43:86:26:fe:91:b0:0f:25:93:ea:58:09:00:f5:22:e9:cc:09:
b5:96:73:9d:92:20:78:84:ed:53:52:5f:db:70:b4:ce:6a:17:
82:19:d3:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPR5NfWKLjf73hxwFC7zlbGsSomgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBMkU5NzQyQkFGQjAzRkZGOEI0ODA3QUI5MDc1RkZD
QzMxMDM3MDAeFw0yNTExMDQyMDM0NTRaFw0yNTExMDUyMDQ1NTRaMDMxMTAvBgNV
BAMTKDdEQkE5Njk0Q0VEMEM1NDA1NDA2Q0NCQzZDNTMxMjVFMEUwRkMxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsRuWWDw3J5kz9cY8PQOsJ8rEO
t3eNgE2SyZACKZlv3w2Zdw0QM5XlOsV58cneqCoByO5pm0sd2HoAy+sH5kZ5dZLU
cDUFkj34yunZt9sA/PIqS8ITpPMls6OkTcK9JkPFD8rTMfsBOA3zpc44wq5tMhgr
vqvjYNjduZCXpd7vJllsJgsI73zSaSxwmC1IIP+OrQi5oUDSwvdBR2KDFUiLLoFU
YtUII9IerwidtQt6pmvKj3Zo+xQ+k7KgmSbZRABUOHL3iOnwEIVtCdrvPo/Egea2
5Zj2yHeCQtNKShlcd8s2+jIklOYSx8VhhqOI60GHdi24KFSGhxH20f/jvG0fAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUfbqWlM7QxUBUBsy8bFMSXg4Pwd4wHwYDVR0j
BBgwFoAULKLpdCuvsD//i0gHq5B1/8wxA3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFD
QU0vMS8yQ0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQTJFOTc0MkJBRkIwM0ZG
RjhCNDgwN0FCOTA3NUZGQ0MzMTAzNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMS8y
Q0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhFPFV1C1zmVAbi+j6AOmcQ8dRCpPsPWvzL5GL5H+BvinSIYK/44eLC4PfBAt
gRkHePQYgsqZJ1VNs15t5RprdqDeh1++KpS3g8QD+4ncdmlO9ys7CZsl/DiRrFFm
YC+cGe3N/AegyJwtilDkFzS74IOYcvNtMt5uDtVODEgmZkPB9v6TgM2JmqQ/C1CF
u7o1KhWRgO35AKSAKhs9ckmRcKGNzFW37aCDeOZn65oG6ZiG7q4rNd7Zic+AL3Qj
VcIyoQqoIFNvB5g+4ypHGyVV4vlyM0TY7rDwQ4Ym/pGwDyWT6lgJAPUi6cwJtZZz
nZIgeITtU1Jf23C0zmoXghnTnA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:01 2025 by rpki-client