
$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json)
Hash identifier: raGrfeIoXb9tbbL8q41cIN8fsvdjk9osRUfULxmHjEo=
Subject key identifier: 3D:D0:64:58:90:F2:16:E6:72:E3:27:35:C7:B8:C0:89:E1:1E:90:52
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial: 3C8D80383410AFB20DFF889252A992954990457E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
Manifest number: 0300
Signing time: Thu 06 Nov 2025 03:49:06 +0000
Manifest this update: Thu 06 Nov 2025 03:44:06 +0000
Manifest next update: Fri 07 Nov 2025 07:00:06 +0000
Files and hashes: 1: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: BTbjmwjyqpdTKLLMQI6z/WnAE87x4tBFK6JSAunFNdI=)
2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: eYpBApA6vfns/AvpJKCOBmnyllxsUz3McQr16ddk4Og=)
3: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: 4YQCFpXPUhsLFUTDrQm1z410pZXkHXYKu3uwdvZnJS4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 07 Nov 2025 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8d:80:38:34:10:af:b2:0d:ff:88:92:52:a9:92:95:49:90:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Validity
Not Before: Nov 6 03:44:06 2025 GMT
Not After : Nov 7 07:00:06 2025 GMT
Subject: CN=3DD0645890F216E672E32735C7B8C089E11E9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:22:ba:44:8b:40:3a:a9:88:41:c4:a7:db:
2d:95:e0:01:42:af:d9:91:aa:5a:b2:aa:31:d9:6f:
70:ce:3d:6b:c6:92:ef:3d:c8:e5:c8:78:b6:cc:6f:
93:ca:88:f5:62:d1:fa:d8:19:c6:54:9d:1b:75:a5:
ef:e9:2b:15:d7:4b:74:98:ed:d6:08:ec:19:9c:9b:
8b:cd:bc:df:ec:03:41:f9:b0:6c:5c:59:41:1a:08:
41:f5:e2:1b:a1:6e:56:9c:cf:8b:f1:18:1a:4c:5e:
3a:8a:91:f8:a6:4e:b3:8e:f4:a6:90:c6:d9:f9:12:
a4:e9:0f:a0:a4:29:48:e3:2e:25:e3:4c:66:44:3d:
f4:20:26:dc:36:da:a3:90:3d:8c:f9:7f:3d:1b:02:
6b:ba:07:da:36:0a:4d:22:36:37:45:6e:0e:69:2b:
e8:43:df:d5:37:9c:02:ab:bd:31:20:86:91:b1:92:
e5:d8:27:53:ac:af:6f:a7:28:56:35:e2:33:3a:8f:
33:a3:cb:54:55:1a:4f:80:3d:12:a3:ff:76:d2:db:
18:c2:37:22:c3:ae:10:d5:77:6f:e0:8e:35:6c:fa:
c4:07:f6:fe:98:95:37:43:48:5d:ad:37:67:41:45:
b5:34:84:f7:aa:df:d2:73:20:cc:45:88:3e:8e:d8:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:64:58:90:F2:16:E6:72:E3:27:35:C7:B8:C0:89:E1:1E:90:52
X509v3 Authority Key Identifier:
keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:48:7a:06:70:df:3c:91:d6:6c:f3:d8:f4:61:22:c7:40:50:
4e:93:57:c4:19:51:24:6a:ec:ad:7f:25:b7:70:01:1c:d2:c5:
44:9a:4f:2b:80:95:f3:4b:6a:fe:10:e5:88:69:29:e8:ee:c0:
31:6d:09:81:9a:2c:5c:31:83:7f:73:42:01:30:78:21:bc:53:
ef:a0:29:19:0c:c0:19:88:67:02:e4:56:f7:3f:af:0f:36:0a:
c4:52:6e:02:9e:7b:bd:d0:ce:06:ff:36:08:5a:b9:4e:e7:1d:
da:38:99:09:71:e9:f0:1c:9c:51:6e:0e:1b:1d:b8:8a:67:58:
92:81:a7:41:64:15:87:6b:84:89:24:e1:76:df:ca:f5:a3:8d:
62:ff:59:87:b2:6e:43:d4:d7:0e:63:41:d4:b9:58:1f:3f:62:
9e:ff:cf:fb:dc:5c:20:43:a4:e6:51:bf:c6:9d:6f:d9:1c:98:
2b:7e:98:7c:61:34:bc:f3:4b:72:01:23:73:9b:da:9a:45:ad:
5f:82:f1:62:55:06:23:ce:17:c6:dd:91:33:c5:a2:76:1d:fb:
2a:83:b4:da:80:17:2b:dc:1e:2c:d6:51:18:bc:43:25:ce:fd:
3c:0e:de:1f:16:55:81:a2:8d:a4:91:3d:c9:16:b4:65:51:f2:
84:30:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:58:12 2025 by rpki-client