
$ rpki-client -vvvf rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
File: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft (raw, json)
Hash identifier: 8WgQzWwXuKnqjYSj4zshn16WDIiDzQV5fnEtZSqZhpo=
Subject key identifier: ED:31:99:B1:1A:E9:5A:AA:7A:5D:60:33:A1:1E:19:03:9C:0A:F5:D9
Authority key identifier: 25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80
Certificate issuer: /CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080
Certificate serial: 5CDEBE5191FAAF4C55EE5530ECAB5FD96BC11E15
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
Manifest number: 0205
Signing time: Mon 26 Oct 2026 18:41:23 +0000
Manifest this update: Mon 26 Oct 2026 18:36:23 +0000
Manifest next update: Tue 27 Oct 2026 19:14:23 +0000
Files and hashes: 1: 323830343a353936303a3a2f33322d313238203d3e20323638313836.roa (hash: ZPqYqlZfOH2fQRs/nBG3S1l5vER1b9APa6/OcEtcFcU=)
2: 34352e3137312e32382e302f32322d3331203d3e20323638313836.roa (hash: gq1G5pbJqHomir31KrPuTPo26/VSrfta3BIkNtX8p4M=)
3: 25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl (hash: 6XUf5wkhvONYx66znVbffr5HzDzkRaIxErsV6SsWilE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl
rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 27 Oct 2026 19:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:de:be:51:91:fa:af:4c:55:ee:55:30:ec:ab:5f:d9:6b:c1:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080
Validity
Not Before: Oct 26 18:36:23 2026 GMT
Not After : Oct 27 19:14:23 2026 GMT
Subject: CN=ED3199B11AE95AAA7A5D6033A11E19039C0AF5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:00:52:0c:18:59:0f:f0:d9:5d:25:1b:2a:
85:5f:59:ab:ff:46:32:4a:e9:d7:9b:d2:02:5d:b8:
b1:c7:d5:57:13:fe:55:a6:59:cd:67:58:31:83:6a:
91:5d:3b:66:6f:a9:90:c5:7d:5d:94:0a:c4:5e:8e:
e6:6e:09:f6:59:30:28:bb:1a:26:ec:82:44:ca:21:
4d:d9:50:7e:0a:35:59:d8:f8:14:63:d5:75:35:83:
f1:86:0b:3c:0b:a1:83:66:72:71:a6:19:7b:5f:07:
88:ad:91:f8:30:bf:70:2e:fa:a3:63:a4:6e:fb:0d:
0e:f3:82:e0:88:69:ce:b4:8e:9a:cb:7c:69:41:19:
ab:cc:3c:7e:c4:00:76:de:78:4f:25:1e:06:42:56:
d7:b1:31:d0:76:da:81:5d:5b:8d:75:c0:85:55:2e:
e0:5f:8b:b5:09:d8:d5:9d:b9:9a:18:82:97:93:b6:
19:c2:5a:e5:45:c3:9b:21:07:04:68:a7:34:19:94:
5d:95:85:90:2a:3a:8e:55:0f:aa:12:83:a9:f2:52:
f3:07:e3:4b:9a:ae:c3:38:c3:b3:80:80:bc:6a:b5:
1d:a1:ab:dd:f5:f6:33:bc:bf:70:48:2f:ea:a1:2d:
ac:4e:d3:f3:75:33:58:a7:82:d2:95:e8:22:c9:16:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:99:B1:1A:E9:5A:AA:7A:5D:60:33:A1:1E:19:03:9C:0A:F5:D9
X509v3 Authority Key Identifier:
keyid:25:C4:E9:C0:1E:97:F4:E8:91:02:AC:E4:A7:EB:B9:CE:E5:3B:D0:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBZohAC6zF8fmNP48aqbVRM4ML5gBRuAkYFvdDYGBvYw/0/25C4E9C01E97F4E89102ACE4A7EBB9CEE53BD080.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:4b:1f:79:2f:d4:20:5d:d0:16:96:c9:21:ea:0c:d2:6d:
bf:f5:7a:c8:22:8a:5f:f8:54:af:17:34:24:3b:49:14:fb:ef:
9d:e3:4f:f1:10:1d:f5:be:db:70:be:b2:ea:54:a0:ca:cc:8d:
d2:0f:d5:09:a2:ba:bf:1c:02:2e:f8:24:bd:ac:2e:e3:7b:7a:
39:ca:6c:e8:67:3d:f1:81:a4:b0:12:e5:e3:74:72:42:14:98:
28:b9:51:2d:4c:33:d1:35:e0:2a:57:65:48:c3:58:43:ed:10:
a5:81:83:08:42:23:f2:23:8d:c2:48:b6:cf:11:b7:de:da:32:
f1:b2:2c:f1:7d:9a:ce:59:c6:b8:c4:18:4e:26:da:73:8d:37:
12:06:d1:b3:e0:ff:2e:72:47:fc:99:bc:0e:ed:18:86:22:ce:
24:c7:c6:44:85:72:2b:d4:07:e4:44:26:9c:25:e5:12:76:11:
5f:78:5c:71:e9:69:bb:3d:15:2d:bf:5a:94:39:9b:b5:1c:2b:
6a:3e:21:eb:bd:9f:62:48:f1:37:de:ee:da:8f:0a:ec:a6:9a:
1e:2a:9f:43:e8:a0:c6:1b:99:67:ba:be:0e:52:7e:0f:ad:e8:
e7:52:de:9d:bb:e9:28:04:c2:20:6e:a8:76:fb:44:25:0e:08:
0f:46:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:45:48 2026 by rpki-client