
$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
File: DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft (raw, json)
Hash identifier: ZYeRyR1V35KBtKa0DY3ea2U2YdwH9nZOFwE+XO1zJTk=
Subject key identifier: 3D:76:CA:D3:AC:F5:D4:EA:4C:68:31:67:11:37:70:A6:0E:AC:2D:46
Authority key identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B
Certificate issuer: /CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
Certificate serial: 7648CBD2C59758187ABA9B2AD30B8AB5763D71B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
Manifest number: 0134
Signing time: Wed 05 Nov 2025 05:02:21 +0000
Manifest this update: Wed 05 Nov 2025 04:57:21 +0000
Manifest next update: Thu 06 Nov 2025 08:23:21 +0000
Files and hashes: 1: DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl (hash: hYSNB1udrHQvwmo0kVMm2yBd/Wq09v4WMhdhga8uq+0=)
2: 3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa (hash: AD/gp5MkRPMYegFOn1WQUyh52T0eFPqEEOU8suKcE9U=)
3: 323830343a313437383a3a2f33322d3438203d3e20323633333332.roa (hash: qysovmzvgdL2y5g84WqCqWCD/W5wUzH/Lm3JWvovoeY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl
rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 08:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:48:cb:d2:c5:97:58:18:7a:ba:9b:2a:d3:0b:8a:b5:76:3d:71:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
Validity
Not Before: Nov 5 04:57:21 2025 GMT
Not After : Nov 6 08:23:21 2025 GMT
Subject: CN=3D76CAD3ACF5D4EA4C683167113770A60EAC2D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:67:c5:30:23:7e:32:3d:b3:68:30:cf:24:
bd:78:3b:52:10:41:e6:67:91:2e:65:cf:58:d5:2e:
64:de:ce:64:e1:51:34:2a:e9:d6:ac:46:24:01:42:
59:4c:83:8a:88:36:83:ec:05:6f:f0:a8:af:60:9d:
a6:7e:70:5d:d2:21:5e:33:25:14:69:6d:77:41:21:
be:b6:74:69:0e:54:00:7e:d7:08:6f:92:70:c4:88:
89:6c:6c:b5:d2:54:b6:2b:2b:17:e3:fb:00:f3:16:
2c:ae:6f:10:41:46:01:0a:2d:bb:77:f9:2a:82:cb:
73:fc:85:bb:94:88:fc:06:7a:90:27:62:ae:47:b1:
9f:9a:ac:60:0c:b3:91:30:76:54:25:ab:4f:6b:eb:
af:e1:32:62:44:fd:3e:f1:41:39:0d:e3:41:3b:73:
f9:1e:10:ba:13:74:cd:67:3b:e0:61:23:a4:62:04:
26:15:ed:33:84:91:05:7a:24:70:ca:39:4c:73:d6:
61:9a:db:15:5c:a0:06:6d:1d:2c:ef:fb:f0:13:09:
a5:d8:6f:7c:61:67:b1:05:f1:1d:ba:c0:67:f9:04:
54:12:ad:9b:0b:aa:d7:64:ab:35:7b:fe:f3:05:fb:
b6:c2:bd:47:93:12:d9:8e:e4:fa:4b:40:53:2f:5c:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:CA:D3:AC:F5:D4:EA:4C:68:31:67:11:37:70:A6:0E:AC:2D:46
X509v3 Authority Key Identifier:
keyid:DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:02:f6:b3:38:e4:5f:af:32:8b:d8:7d:7b:45:57:34:fc:
4d:9c:ba:b1:ab:05:49:99:06:87:f1:f6:c8:91:98:a0:ba:db:
22:08:e2:f7:ca:cb:f9:ec:e6:57:94:15:da:30:da:17:ea:5d:
69:d5:fe:81:a2:48:49:01:37:40:1a:25:12:26:16:25:0c:75:
99:4a:ed:10:0c:1c:82:76:e1:da:ed:c4:7d:b5:ab:28:a0:48:
46:31:6f:5e:0b:98:1d:d3:85:f9:6a:d3:4f:89:fd:e2:b5:4e:
03:42:30:da:6d:56:b9:e0:b4:8a:86:ed:13:8c:b9:ba:c0:c2:
41:fc:5b:c0:4c:f7:d2:8b:22:5f:74:de:c2:df:c0:85:c0:92:
de:c6:fe:67:cf:36:fa:cd:ea:6e:b7:09:c0:a4:3e:dd:d9:2e:
42:8c:2f:32:12:41:10:07:d7:b7:89:f4:b0:ba:de:91:73:9a:
8b:50:29:98:eb:96:3f:ee:b4:61:7e:7c:c3:54:b4:ef:2d:15:
5c:bc:be:9b:93:aa:8b:e3:d7:f4:1f:f6:d5:0c:78:28:22:e6:
84:8b:b0:be:88:5a:59:da:c1:c0:44:01:a3:08:e8:eb:5f:f2:
34:54:2d:1a:8b:6e:0c:b1:62:80:4e:c7:ba:3c:c2:9b:5f:b6:
19:43:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:11 2025 by rpki-client