
$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
File: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft (raw, json)
Hash identifier: yACvP1QgktP/HSmHyqZOn80VXhXOY/gQ5rD0LvwVKGE=
Subject key identifier: 8E:E9:B4:83:E5:37:7A:25:1B:4B:F0:AF:2F:FA:B0:9A:64:A7:EF:50
Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE
Certificate issuer: /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
Certificate serial: 0CF4B63D6F30AEBD387AC3BB7564E9A0D4F25F73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
Manifest number: 02F2
Signing time: Mon 20 Oct 2025 05:44:39 +0000
Manifest this update: Mon 20 Oct 2025 05:39:39 +0000
Manifest next update: Tue 21 Oct 2025 07:57:39 +0000
Files and hashes: 1: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: 8d7fb9ij+PooSWUf38BeSaVdGp1TOm0K0uvvCP+F8NI=)
2: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: OGY/LrMrlfQKwjbab8G09HMM8TnKgSFSf9D0yjKBpNA=)
3: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl (hash: KnOVnYE+JQGeKyL/GTWawcrRsJTyK67Z7df6jZlvrNs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl
rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 07:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f4:b6:3d:6f:30:ae:bd:38:7a:c3:bb:75:64:e9:a0:d4:f2:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE
Validity
Not Before: Oct 20 05:39:39 2025 GMT
Not After : Oct 21 07:57:39 2025 GMT
Subject: CN=8EE9B483E5377A251B4BF0AF2FFAB09A64A7EF50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:7b:37:84:2d:d2:5d:2e:9c:21:10:22:1d:
14:55:50:0c:23:c6:e0:32:32:51:b8:16:f2:de:f8:
bf:72:d9:6a:17:fd:f7:bd:32:bd:94:f9:78:20:b9:
3f:4f:96:03:59:09:9b:27:1b:c4:65:db:79:ad:11:
41:39:97:11:d2:f9:8c:2c:4f:a0:67:3b:51:96:62:
28:3a:52:04:e5:bc:b1:8a:7b:fd:a8:17:14:50:85:
1a:1c:ed:fc:6c:07:47:8c:71:81:41:78:08:08:3c:
62:b6:bd:78:f5:01:d6:9c:fd:89:c5:8b:f9:ac:10:
7b:cd:29:18:94:58:87:5f:3d:ac:7e:7a:78:02:92:
07:94:49:96:c1:a3:37:6e:ea:a0:96:61:47:17:69:
43:58:f2:e6:6b:ec:16:7b:73:0a:b6:46:e7:d2:2d:
52:02:47:73:f4:02:76:7d:4d:a0:c2:63:57:af:9e:
3e:af:ca:6b:cb:cb:fa:f6:75:ed:bb:cc:e7:3b:9d:
91:1e:b6:72:29:8d:27:86:f3:26:01:6a:43:a3:7a:
be:9f:8a:5a:89:f1:0f:f3:ad:b0:a3:8a:27:bc:a2:
11:85:2f:56:6a:e0:76:aa:20:c4:ef:aa:bf:19:c0:
ab:98:97:b2:12:cc:8a:b0:a2:24:60:5b:97:3c:c6:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:B4:83:E5:37:7A:25:1B:4B:F0:AF:2F:FA:B0:9A:64:A7:EF:50
X509v3 Authority Key Identifier:
keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:38:77:24:91:f4:6b:33:ff:9e:7a:37:a1:fc:5a:b7:1e:ec:
99:c6:26:5c:8c:a1:b3:29:28:bd:7d:fc:c0:a2:12:eb:13:69:
69:b2:4c:c0:2f:7c:f3:88:9c:51:df:6b:c6:74:a7:ac:b8:ac:
d2:69:d6:df:a0:24:6f:2b:c6:6d:12:31:28:52:6a:83:2f:2e:
0c:33:40:30:b7:5d:c8:6e:af:2b:dd:82:9c:48:37:28:9e:c2:
23:b6:3d:99:f6:4f:1f:80:ff:34:79:ba:12:df:79:33:99:f2:
a6:4b:de:6c:12:f5:c4:8c:cd:b8:4b:ea:a2:16:ec:86:5c:36:
6d:3a:4a:0f:11:9e:75:8a:4f:2f:6b:92:ef:87:df:bc:f8:0f:
58:97:98:a0:5a:e7:41:d9:52:04:60:21:5f:de:d7:a7:d6:03:
6c:95:61:45:f5:f4:e8:28:80:b2:f7:63:b8:92:0b:f3:cb:cf:
cb:7c:2b:c9:a8:9e:15:ed:b7:a7:04:5a:5a:65:b7:6b:18:e2:
d3:fd:06:cc:2c:9d:3b:18:76:91:57:94:fc:18:ba:c6:2b:16:
57:fd:7a:b6:ef:c5:1c:79:56:4f:34:a7:f7:3f:a6:6c:e5:e3:
3d:51:de:6a:74:7a:c3:06:e8:37:88:9c:8a:76:35:3f:ef:e8:
5e:44:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:17 2025 by rpki-client