
$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
File: 3701790BFCD740698BF2D59FB7800495728B1041.mft (raw, json)
Hash identifier: z/7HQDvi93Yhen1Qq8lMWMvwNEiflLVOfezcpYVLKR8=
Subject key identifier: A0:86:BD:F9:9C:25:1A:58:D9:5E:18:50:0E:2F:EE:DA:BC:8B:50:CB
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Certificate issuer: /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial: 5F4CB8247AD5F521EBAFF6BA116FED8B5CABF3E7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access: rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
Manifest number: 0306
Signing time: Tue 04 Nov 2025 21:31:09 +0000
Manifest this update: Tue 04 Nov 2025 21:26:09 +0000
Manifest next update: Wed 05 Nov 2025 23:55:09 +0000
Files and hashes: 1: 3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (hash: CWhLjy2BUsQhohvVV10YgDUmAcI9UwT6x3hS2g96DFo=)
2: 3701790BFCD740698BF2D59FB7800495728B1041.crl (hash: 4Yk33uuv4AQLyYva8KiNiHcguIncV6w4u/zL7smAIwE=)
3: 323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (hash: a3N/V8aHqktmXHIi586Wg0nt7SnrzILQK/aIuH3xgL8=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4c:b8:24:7a:d5:f5:21:eb:af:f6:ba:11:6f:ed:8b:5c:ab:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
Validity
Not Before: Nov 4 21:26:09 2025 GMT
Not After : Nov 5 23:55:09 2025 GMT
Subject: CN=A086BDF99C251A58D95E18500E2FEEDABC8B50CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:c5:79:57:a6:66:c0:5d:d8:dc:1a:47:1b:
ec:14:b2:49:94:1b:df:84:14:b7:46:33:e4:8a:d8:
59:28:8d:f3:7f:27:b9:48:77:47:0d:a6:b1:e0:e0:
3d:2a:62:22:5a:75:64:56:2a:f8:91:1d:50:b6:e7:
fd:24:04:04:01:5e:2b:de:d5:9b:03:2e:1f:50:d9:
0c:89:81:94:28:2f:eb:25:e4:94:5d:41:5b:ba:4d:
68:dd:0f:8e:63:b9:40:47:78:34:a0:4f:03:a1:e4:
71:b8:1d:42:99:5e:fd:fb:86:76:c6:d3:bc:68:d2:
bd:80:a9:39:42:ee:d5:0a:1f:8d:15:02:d9:27:df:
a8:69:01:59:39:0d:59:82:ba:2d:db:d8:2d:5f:ab:
2c:82:cb:0c:40:2e:cf:c3:e2:87:d4:f4:3c:07:5e:
c4:50:9e:59:63:95:7b:db:46:85:a3:0f:ca:a6:44:
4e:ac:39:c1:81:e3:a3:d5:68:86:20:ca:cc:55:9f:
3a:5e:78:01:3b:3d:16:12:35:06:37:9e:b9:59:bf:
3e:97:3c:7a:16:c2:dc:58:2c:1e:43:21:ad:e8:4f:
a9:fa:ef:4c:26:bd:93:91:cb:75:d4:2e:18:52:18:
6a:10:5e:72:8f:b1:10:4e:65:47:12:41:0f:8f:ec:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:BD:F9:9C:25:1A:58:D9:5E:18:50:0E:2F:EE:DA:BC:8B:50:CB
X509v3 Authority Key Identifier:
keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d3:33:62:dc:9b:89:ef:3c:01:5c:1b:e3:a3:47:17:cb:a6:
1d:4b:6a:4e:5d:64:ed:8c:26:0c:24:f8:8b:03:b6:65:05:d6:
ea:fb:f0:8c:6a:bb:75:c6:31:10:ff:62:32:6b:9f:0e:04:4b:
01:e0:d7:1b:81:b5:02:9f:7a:a1:97:9f:d8:22:46:2f:7c:d5:
ac:07:ae:16:d3:0f:0f:00:4e:f3:a1:e5:33:4f:ee:92:34:cd:
e7:13:9f:9f:19:94:d3:fe:d9:78:fa:03:89:38:04:72:dd:f1:
98:68:81:ff:01:b2:d3:bd:56:ca:22:7b:0e:b0:13:3b:41:51:
8c:29:69:85:9f:6c:3c:fe:16:d4:c9:eb:53:ac:8d:43:4c:fc:
4e:92:54:7e:59:84:5b:17:41:26:be:2b:0d:3e:53:2d:5b:44:
7f:2c:1a:2c:45:e1:47:06:20:e9:08:d0:df:3a:65:fe:3d:6b:
d9:60:4a:16:9c:c6:8b:0c:ba:5f:b4:27:fd:70:46:67:a2:88:
99:0d:63:69:14:3e:02:dd:7d:b9:e6:5d:9f:f4:e1:c2:cc:5a:
40:6e:e0:25:b7:94:df:cc:86:ef:53:a4:69:23:43:80:c4:86:
16:95:d1:b8:18:df:29:7d:95:fa:0f:cf:8a:dd:05:3f:23:fc:
93:18:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:12 2025 by rpki-client