
$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
File: 0F78626D3BF8B07214C737318E62EE73094347B3.mft (raw, json)
Hash identifier: tHep0RXkrFXMC4u6hPmnMwBXFRu99ZgsuZzk2tK80Fk=
Subject key identifier: 40:8D:DE:16:F5:B1:81:79:23:46:C1:18:6E:A8:3A:AA:5C:61:D3:3E
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Certificate issuer: /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial: 118041A3493071892EE78C2713BDCBCEBADFE97A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
Manifest number: 02E0
Signing time: Mon 20 Oct 2025 00:34:11 +0000
Manifest this update: Mon 20 Oct 2025 00:29:11 +0000
Manifest next update: Tue 21 Oct 2025 02:25:11 +0000
Files and hashes: 1: 323830343a353436303a3a2f33322d3438203d3e20323638363436.roa (hash: fA//cYPveXbF/NXF/BFPXK9j4bwz+maHAZqc3t4LsNc=)
2: 0F78626D3BF8B07214C737318E62EE73094347B3.crl (hash: eoYQSHONDAyEqDoaZkRMBdyAHin0+CF/S81Cu0MsWUA=)
3: 34352e3136342e3139322e302f32322d3234203d3e20323638363436.roa (hash: q51snlaJj/XRMJTwCzcZFyyqSW1iLVIdqBnqvJZVTE8=)
4: 3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa (hash: KbF9yocHirIAqnDRAzgsXystuU9JuRryTabRw2jSqlQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 02:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:80:41:a3:49:30:71:89:2e:e7:8c:27:13:bd:cb:ce:ba:df:e9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
Validity
Not Before: Oct 20 00:29:11 2025 GMT
Not After : Oct 21 02:25:11 2025 GMT
Subject: CN=408DDE16F5B181792346C1186EA83AAA5C61D33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:f3:f0:99:28:b0:b9:1a:b2:08:23:30:8c:
c3:21:b1:1e:83:7c:03:ac:cd:dc:69:7e:b6:82:1c:
6f:c8:a1:42:6f:16:ac:43:26:14:2a:41:5c:80:b9:
95:e4:ee:e8:b7:34:55:f9:52:fe:aa:7b:0d:88:23:
36:23:70:bc:6e:dc:d5:b4:ad:1e:a0:25:34:bb:e9:
13:24:e1:ac:ef:eb:b3:c5:c6:4c:2e:15:e3:18:d0:
fe:b3:6c:6b:92:53:6f:e5:3d:a0:2f:8b:d1:ee:32:
00:d9:fc:37:b7:a0:43:6f:2c:f6:50:9a:fb:eb:f8:
c8:bf:f3:7d:67:20:5e:d7:c7:55:97:09:ec:84:10:
e0:ef:ef:ec:2a:48:de:09:01:a4:d6:29:bf:f5:38:
41:17:c1:71:87:bb:ed:d6:bd:4f:52:06:45:57:ee:
f5:2d:a0:9a:7e:d6:92:f1:04:95:fe:29:e2:6c:de:
1f:ed:a0:54:93:eb:53:5e:4d:ad:c7:f4:ea:bd:fa:
c7:e2:61:b0:f2:7b:3d:18:d5:4e:41:f8:17:c1:2b:
21:59:65:70:07:75:d7:b8:72:2b:86:e6:a1:ce:4f:
d1:88:6b:50:a1:71:f1:4b:a0:9e:63:68:16:ed:4c:
28:2a:22:b8:e0:91:1a:e8:d5:68:70:67:9a:e1:77:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:DE:16:F5:B1:81:79:23:46:C1:18:6E:A8:3A:AA:5C:61:D3:3E
X509v3 Authority Key Identifier:
keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fc:0c:c2:14:08:ab:f9:a4:bc:ad:79:bd:c0:4d:71:e3:e5:
7c:84:44:61:21:cd:03:e3:3e:61:05:f7:ca:b9:30:ab:82:c1:
5a:2d:65:03:bc:87:01:ae:00:50:b7:bc:74:19:df:06:81:d4:
95:f2:bc:26:9b:ea:d5:38:94:a4:65:63:c9:24:e4:ab:5e:87:
bf:6b:74:6f:ac:ef:f8:6f:09:a5:9a:18:bf:9f:77:96:c2:26:
d6:88:0b:95:fb:35:09:4b:ac:0f:4f:93:55:b8:94:ec:94:44:
65:bb:a6:2d:58:c4:8f:74:9e:23:0b:10:b7:6d:ca:d2:4b:cf:
f3:2b:e6:94:a6:da:27:63:86:12:1b:4d:72:05:15:f0:7d:da:
22:b9:e5:42:53:1b:67:91:60:05:6f:fd:80:9f:6f:dd:fa:74:
40:4f:ee:c1:af:3b:5f:e1:e0:7a:ad:cc:1b:d4:46:71:83:10:
51:b5:a7:3a:4d:60:69:79:9a:23:2a:5b:c1:7f:de:c7:44:ee:
10:a0:fa:2d:07:bc:6f:32:51:09:ff:d9:33:76:53:63:fe:43:
8f:76:12:d1:94:fd:6d:d6:49:8b:ee:80:d2:56:4d:fd:bd:2e:
89:1b:bf:e7:b9:f5:e9:05:11:55:b0:46:d1:93:dd:69:f4:0f:
74:9f:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:37 2025 by rpki-client