
$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
File: 09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft (raw, json)
Hash identifier: pzOPApCNyzxXn7lRXQWmNdsTle7I+QhkZexda04LGAk=
Subject key identifier: F7:4E:D3:2B:28:42:48:29:11:EB:D3:43:B6:48:9E:43:39:A2:41:39
Authority key identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F
Certificate issuer: /CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F
Certificate serial: 523601DF19EDCFA17A3DA0DFD69849D27BB9D188
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
Manifest number: 53
Signing time: Wed 05 Nov 2025 02:40:58 +0000
Manifest this update: Wed 05 Nov 2025 02:35:58 +0000
Manifest next update: Thu 06 Nov 2025 04:32:58 +0000
Files and hashes: 1: 09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl (hash: aKzM+ThMd69h0I5skEw7QW4ETHJrULGS2bLpEbYvogQ=)
2: 323830343a333364343a313a3a2f34382d3438203d3e20323635343139.roa (hash: v/vv5SOG4MKFrzM74dQfb1JZqKLPwC712Acu9aYRrr4=)
3: 323830343a333364343a3a2f33322d3332203d3e20323635343139.roa (hash: 0C3CSJA2bPqgBDnGdtTS5nTJ1hNiRlPF/70HJIA8fWs=)
4: 3136382e3139352e32332e302f32342d3234203d3e20323635343139.roa (hash: RTeDdlDDGbKb6QV/Wn8L4QCyiHo/okFCJ8OTUYfFUTQ=)
5: 3136382e3139352e32312e302f32342d3234203d3e20323635343139.roa (hash: Rfyf5AhZFVaf1/E0WAQ5EcZ3PkoYCoAmfu3kG+SODiM=)
6: 323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa (hash: 6WlEaBiiDDTKahWwuMueydx/DT4KcsJcZz1761sUGNc=)
7: 323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa (hash: 3a9UnHQ1lma2jvTdR8Z5LxhGO+PtIrUpSv5VAj72N98=)
8: 3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa (hash: JXxchmVqj5DrHUHsH/U4N2bOeS566Apt/6ZWGm9k7CI=)
9: 3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (hash: SyGNxWw5kwGSe6t2z/llmdcbUlBmYvXHU6T3WuGm6CA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl
rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 04:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:36:01:df:19:ed:cf:a1:7a:3d:a0:df:d6:98:49:d2:7b:b9:d1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F
Validity
Not Before: Nov 5 02:35:58 2025 GMT
Not After : Nov 6 04:32:58 2025 GMT
Subject: CN=F74ED32B2842482911EBD343B6489E4339A24139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:1b:9e:a8:d4:cb:be:5f:5e:6c:82:aa:5f:
92:f1:89:52:ac:a4:ad:22:bd:7e:cc:36:67:69:c3:
49:f7:28:a2:19:27:12:f0:7e:a9:23:8b:cd:d4:f8:
9f:5d:f3:69:28:72:17:df:69:e8:25:96:35:b2:f4:
20:81:65:25:2e:dc:ce:f5:48:d0:13:2a:a3:72:7b:
d7:33:a6:aa:1c:9c:89:df:b0:08:8c:8c:60:61:a7:
ed:4f:db:4b:2c:4a:aa:06:a9:05:d9:7a:a4:35:97:
2f:5d:44:97:30:1a:6f:66:16:47:5e:72:d8:e6:2a:
72:97:6e:0f:b0:b7:8c:0c:2f:a2:88:3d:a6:44:ae:
c1:77:1d:55:c7:df:1f:ef:57:07:72:42:47:b9:9a:
e2:63:df:90:24:a6:31:3d:8d:bb:ad:40:89:83:53:
a4:1e:b2:fd:3a:00:a4:f6:69:7b:b3:72:cb:8f:00:
ab:91:55:a4:fb:c6:92:d1:16:cf:8e:9c:05:ae:bf:
12:c6:59:5d:f3:06:10:ea:1c:e9:56:23:12:98:67:
79:79:6d:5d:06:05:a7:20:c6:70:54:73:31:6a:01:
50:e9:a9:5c:f8:5a:e4:81:29:f2:b3:be:5e:e5:76:
bf:d4:fd:be:ad:ec:16:3a:14:e4:54:c7:a4:a9:59:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:D3:2B:28:42:48:29:11:EB:D3:43:B6:48:9E:43:39:A2:41:39
X509v3 Authority Key Identifier:
keyid:09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:90:3e:93:a1:3f:0e:15:6b:0c:fa:90:22:0d:bc:6c:f0:
d6:f2:8e:50:8f:db:49:2a:fd:ca:ad:38:09:1d:c6:70:32:49:
22:c5:aa:c5:cb:68:9f:fc:f2:11:b1:5b:e3:ed:c6:a8:93:60:
c7:65:17:0d:c6:95:94:e4:ca:e2:1c:73:37:71:a2:d4:6d:27:
d4:37:f6:a5:9e:84:ca:34:87:0a:72:d5:c8:b1:f1:13:4e:e4:
7e:29:88:6c:de:97:54:21:a6:5f:99:a5:5f:ea:07:78:61:99:
11:93:e0:d1:af:2a:5f:57:2d:1c:35:cd:f7:f0:de:ec:8b:90:
0e:c3:04:9c:24:26:af:c1:ce:89:9a:39:26:fd:4e:81:d4:d5:
68:73:1c:5d:ba:9d:8b:71:4a:8f:0c:fa:5c:14:1e:2b:75:8d:
06:c3:52:9a:98:bf:ce:2b:f7:57:f0:d3:2c:14:e8:3f:58:49:
66:8b:9a:53:bc:a2:26:3e:fe:e8:b7:5c:f0:6c:d2:90:f4:ba:
33:9e:42:a8:cb:33:0e:a6:7d:50:b3:14:bd:5b:c2:f8:1a:dd:
a8:6f:4e:bf:75:5e:11:08:2b:c6:ca:e0:ae:f2:ef:50:01:36:
1f:a1:b8:2c:44:46:45:9e:05:18:a4:04:05:ef:46:29:99:c8:
eb:03:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:33:16 2025 by rpki-client