
$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
File: 7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft (raw, json)
Hash identifier: ExNEs8hyphotDAJt2JGcZSqxIDEWTw7fXBld7m2YcNY=
Subject key identifier: CE:63:4F:49:0C:9C:1E:CB:3D:81:90:00:6F:0A:01:96:E2:89:23:93
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Certificate issuer: /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial: 431C8559D0271810BEFF909ABE0596C522B11F9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
Manifest number: 0309
Signing time: Wed 05 Nov 2025 13:43:13 +0000
Manifest this update: Wed 05 Nov 2025 13:38:13 +0000
Manifest next update: Thu 06 Nov 2025 15:32:13 +0000
Files and hashes: 1: 323830343a346137383a3a2f33322d3438203d3e20323637323432.roa (hash: u1jRHd6XPl5NR1zXUvhgK9IHleRZ9pCCbSSFW8l2D+A=)
2: 34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (hash: 3jhuvPCfE9NQvEUihWLFsEUj5gJdW5izmTxvxxDBeYY=)
3: 7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl (hash: XfJbktN87PVm39+ozOzyg6VE0NpW2ecPvXSZhPDYLvk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 15:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1c:85:59:d0:27:18:10:be:ff:90:9a:be:05:96:c5:22:b1:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Validity
Not Before: Nov 5 13:38:13 2025 GMT
Not After : Nov 6 15:32:13 2025 GMT
Subject: CN=CE634F490C9C1ECB3D8190006F0A0196E2892393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:28:5e:a5:83:3c:00:64:8f:2a:b1:86:db:
e8:68:64:67:5e:5f:72:db:7c:05:ca:53:82:f1:f7:
d1:a3:c9:b7:be:e6:89:a0:9d:34:07:e9:c7:39:86:
5a:5e:ad:7e:bd:11:82:ba:76:5e:21:83:5e:a2:ef:
c5:46:e2:6f:ed:a4:73:9d:37:e7:cf:fb:63:68:d3:
98:34:d4:b9:cd:32:96:f3:64:37:d5:62:1d:03:df:
64:03:d2:1b:77:d1:b2:30:48:2c:90:e3:30:b8:7d:
ea:f8:1f:d1:f8:a6:3a:cc:5c:30:b7:1c:4b:ea:b1:
5d:57:1b:c6:1f:b8:de:da:d1:73:2e:0d:40:96:5f:
03:20:fe:b8:40:60:64:08:7c:96:d9:dd:57:1e:f8:
c7:14:07:2f:59:c2:9e:a7:9a:83:4d:90:58:6f:f0:
77:8f:73:68:e4:19:ad:3e:8d:d7:6f:9c:a0:da:0c:
ac:d7:4f:aa:09:b0:94:c6:c2:cf:88:05:c6:ab:e2:
1b:e0:bb:70:f8:4f:e5:6f:c6:eb:34:23:d4:f2:4c:
c7:fc:70:dc:53:47:53:ec:67:2a:09:92:6e:e7:2b:
f7:4e:7e:21:35:8d:a7:b3:f9:98:03:0d:69:96:91:
f9:f8:51:4b:3f:9c:6f:30:ae:ba:f0:e6:82:3d:fe:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:4F:49:0C:9C:1E:CB:3D:81:90:00:6F:0A:01:96:E2:89:23:93
X509v3 Authority Key Identifier:
keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:f1:22:0a:db:cd:5c:29:21:31:9a:b7:1f:0f:3a:e3:f5:
92:9d:b7:ef:fd:76:c6:9b:26:24:58:ac:68:c3:02:dc:16:55:
3f:99:c1:77:36:bd:e3:4b:aa:47:12:95:f8:5a:f8:32:20:df:
67:eb:fb:a2:e7:14:77:9d:19:86:aa:c1:e2:f3:62:9d:08:62:
93:cc:dc:d1:7f:b2:76:db:89:c3:1a:07:d7:67:78:08:a2:d6:
38:32:18:c2:d6:2e:08:f7:ef:6c:57:a9:8c:3d:2c:56:46:74:
53:be:37:2d:ca:8e:85:67:7b:e4:61:5a:a8:36:c7:48:b8:88:
8c:fd:94:12:e4:c0:ef:d9:2b:a7:83:e5:c0:c5:01:6e:c0:40:
97:4f:6b:a1:70:53:06:50:15:f4:55:99:1f:6b:8a:dd:fb:42:
9d:fa:76:08:45:c2:34:bf:e0:52:14:ce:21:f9:ae:7a:2b:85:
34:1b:88:60:df:9c:69:60:7a:5c:10:ec:16:a1:f8:00:8a:0f:
1c:f4:05:25:63:03:4c:d9:9b:5b:41:c6:c2:b8:95:6d:8b:f6:
6c:46:6c:17:69:c9:a9:f5:76:21:f6:2a:88:28:d8:0d:f0:fa:
b6:f5:d1:59:c2:af:49:6c:dd:ee:04:22:3b:64:59:19:58:08:
ff:06:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:40 2025 by rpki-client