
$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.mft
File: 60394DEF47E6D547EE9A7D8544543C8F0B072BDA.mft (raw, json)
Hash identifier: kuvsOVIpP2cVOkjVy6JWoPopXcdpnihcJfjGKspmjtM=
Subject key identifier: B7:66:B1:9D:1A:B0:C2:D0:BE:B3:0A:C1:E0:A9:0E:4B:ED:11:FB:73
Authority key identifier: 60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA
Certificate issuer: /CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
Certificate serial: 1954D28681734838586AC459B90A8E19D8FB22D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.mft
Manifest number: 02FC
Signing time: Wed 05 Nov 2025 11:06:20 +0000
Manifest this update: Wed 05 Nov 2025 11:01:20 +0000
Manifest next update: Thu 06 Nov 2025 15:04:20 +0000
Files and hashes: 1: 60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl (hash: O/evxkaNmeZb+or5Ckm6Q+FRjfRqORVT1DwpkOHJ+F0=)
2: 323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (hash: o6rrOmZ1ZwXVdm/MOlZIGvPaCfuDPYFCvLyfCMGUEAg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl
rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 15:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:54:d2:86:81:73:48:38:58:6a:c4:59:b9:0a:8e:19:d8:fb:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60394DEF47E6D547EE9A7D8544543C8F0B072BDA
Validity
Not Before: Nov 5 11:01:20 2025 GMT
Not After : Nov 6 15:04:20 2025 GMT
Subject: CN=B766B19D1AB0C2D0BEB30AC1E0A90E4BED11FB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:91:2c:b4:47:c0:17:ac:ac:9a:aa:9a:2a:
ff:4e:f5:4b:99:6f:ce:20:27:cf:65:37:21:7e:f0:
cb:14:15:1b:e7:07:f2:9a:0e:68:5a:c0:06:08:f4:
00:8e:04:e0:5e:41:e2:ac:57:fd:06:ad:01:e9:a0:
a7:0d:88:51:54:d9:fc:78:95:c2:95:13:82:4a:70:
a3:2c:40:f3:aa:50:43:56:67:3f:9e:bf:e4:27:f4:
f9:40:2d:76:18:90:4d:43:f6:85:d7:8d:a5:41:4c:
bc:9c:89:fa:14:c8:9d:32:60:02:bd:19:6b:95:0d:
36:e4:68:34:56:2a:90:7e:ba:32:38:4f:6c:8f:f0:
b1:93:0f:bc:e6:bf:35:65:71:63:43:e5:6b:d5:c6:
a7:0f:4b:1d:9a:8c:dc:74:a7:c5:b5:78:ab:af:ec:
1b:51:1b:15:ac:62:c7:ab:dc:58:f2:c7:98:f0:86:
5a:eb:c1:8b:18:fe:0f:b8:6e:13:b0:ed:95:18:bb:
b0:ea:26:31:d2:0b:58:8a:65:74:6b:eb:af:12:88:
c4:e0:fb:3a:ac:72:9d:7d:31:36:00:d0:b9:25:f6:
0b:fb:b3:20:18:ea:8a:55:eb:f0:52:95:c2:88:1c:
6f:57:4f:8b:58:6a:f9:8d:bb:10:a0:a4:79:79:b3:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:B1:9D:1A:B0:C2:D0:BE:B3:0A:C1:E0:A9:0E:4B:ED:11:FB:73
X509v3 Authority Key Identifier:
keyid:60:39:4D:EF:47:E6:D5:47:EE:9A:7D:85:44:54:3C:8F:0B:07:2B:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/60394DEF47E6D547EE9A7D8544543C8F0B072BDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:45:64:47:8b:41:37:d4:20:20:e1:93:9c:a1:37:37:56:7c:
eb:28:49:1f:8d:17:65:45:91:aa:2b:f0:0c:61:5f:c5:ef:b4:
7e:07:2a:27:a4:c7:07:2f:77:e7:3b:a9:d2:7b:dd:fc:e0:7d:
6a:ee:97:db:cd:ff:10:b5:db:ae:43:7a:a8:50:ad:4b:e8:1f:
3a:9f:b3:dd:34:a0:51:96:ba:0a:e2:05:6c:e3:e9:82:3b:93:
e2:30:40:0f:c2:67:3c:7f:21:fe:20:8a:39:e4:d8:73:95:72:
78:96:96:4c:d2:1b:38:7c:03:0a:16:82:f0:b0:8a:e7:94:ff:
a1:e5:00:99:47:47:c8:e0:b3:f2:ae:d3:24:9b:84:16:f9:9b:
07:48:e6:01:50:72:73:0e:b7:c0:c3:66:3a:2f:f5:de:82:03:
9e:bd:b6:c6:7b:de:ea:7b:1b:c4:cf:ab:67:5b:15:84:1c:dd:
c0:47:1a:af:3f:cc:22:1d:64:57:02:47:dc:e9:7a:24:1c:ab:
a7:2a:cf:ec:c9:46:cb:79:94:92:b0:f8:7c:c4:30:41:39:96:
e5:b7:eb:c4:c7:78:72:b0:3c:a8:88:c0:b4:c6:db:2d:65:ae:
c8:57:e9:01:1d:5c:ed:e5:06:3b:f4:81:57:89:b4:c5:a8:68:
b5:38:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:56 2025 by rpki-client