
$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
File: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft (raw, json)
Hash identifier: EFPD0VOjvdRc0rK/LPGmA33x1QkAICfkl7d9pNDYFUI=
Subject key identifier: D4:4E:80:E7:97:AE:94:82:BE:EA:99:39:2B:CD:EB:9F:93:B6:BB:54
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Certificate issuer: /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial: 28B71CF621F56BA2C4CA49247D1EF575862AF063
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
Manifest number: 02E9
Signing time: Mon 20 Oct 2025 16:11:59 +0000
Manifest this update: Mon 20 Oct 2025 16:06:59 +0000
Manifest next update: Tue 21 Oct 2025 17:11:59 +0000
Files and hashes: 1: 323830343a366166633a3a2f33322d3334203d3e20323730333730.roa (hash: 55fkKjzYY4cFKrZUo6KorCBrFStzFQqMNCaqWAsKOv0=)
2: 323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (hash: GaknIdLjhRyMuM+KZjIfMiI2+3fKWm8ALqR2m5gvgfg=)
3: 3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (hash: TcSJ3nnp3UX3ckQz9iGwHcjZoJJVwSZw+IAejxBzYDo=)
4: 3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (hash: zPcZDOL66f4T54HzJWFF8O5qHyApg5MkyxiuE2xahB4=)
5: 3139302e38392e3134382e302f32322d3234203d3e20323730333730.roa (hash: hK0RvLcyNSgCl0OefYmupkPtIV86pZQUVOqr/p0l17w=)
6: 3139302e38392e3135312e302f32342d3234203d3e20323730333730.roa (hash: wJQaneXZS/6Zie6oSb3HaDESCv5U+oUcaO+avfMOr/U=)
7: 3139302e38392e3134382e302f32342d3234203d3e20323730333730.roa (hash: zeDsAcUaXY669rDbJ6aIZH1/in4UwVeBflH+SdJm+YU=)
8: 323830343a366166633a3a2f34372d3437203d3e20323730333730.roa (hash: mHTv35Nux4fuTbTGsyoyNamWCX1rgRoWohihOQwxFxs=)
9: C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl (hash: PPcio6zZugSRKYM62EtNkbnjjoPlfp4geDjV3r1T0hg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 17:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b7:1c:f6:21:f5:6b:a2:c4:ca:49:24:7d:1e:f5:75:86:2a:f0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Validity
Not Before: Oct 20 16:06:59 2025 GMT
Not After : Oct 21 17:11:59 2025 GMT
Subject: CN=D44E80E797AE9482BEEA99392BCDEB9F93B6BB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:c3:95:3b:63:12:64:59:9d:1e:ba:01:2d:
8f:de:5b:7c:22:71:50:f3:5d:d3:cc:ca:b5:a0:a4:
87:0a:3c:04:67:79:ef:88:e6:3a:1f:74:33:d1:e0:
4a:77:b9:d6:fc:1c:65:0b:5d:a5:79:83:e1:68:6f:
20:8e:dc:0d:f7:58:92:fc:1a:a4:b8:25:0b:19:37:
9f:df:bd:0a:a5:54:d7:e5:a6:ce:c6:21:71:5a:ca:
d1:93:e8:35:cd:e3:08:1b:42:ec:63:26:d6:b4:4b:
09:af:7a:77:57:a4:b2:3c:fb:80:ea:c6:45:fd:ca:
c2:64:51:c6:0e:4c:a5:95:d7:fe:93:46:6b:41:5a:
0c:9a:94:8a:df:d2:a9:ad:66:61:64:7c:58:16:8c:
18:24:0c:dc:d3:3e:4e:76:f6:69:b5:72:5b:0a:fc:
a6:6f:07:15:00:f9:f9:01:8a:41:e5:b9:15:6c:a3:
b7:c0:23:be:a2:30:6c:8e:8c:10:28:cb:e8:2b:41:
75:93:ea:7e:ff:68:4f:76:f2:2d:6e:50:14:c1:51:
00:09:d3:ec:e4:94:5a:cc:a5:30:fd:1d:82:bd:93:
8c:e8:44:a5:f8:c0:f8:ad:60:20:65:31:41:02:1c:
9c:d0:62:23:b1:0d:da:73:2b:c6:f2:f3:3f:d6:bf:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:80:E7:97:AE:94:82:BE:EA:99:39:2B:CD:EB:9F:93:B6:BB:54
X509v3 Authority Key Identifier:
keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:96:26:ce:e4:47:c3:1f:03:22:b8:29:0a:aa:86:83:5a:3c:
62:0b:06:dc:4d:ed:f5:e8:9d:13:1a:b8:16:3d:5c:ce:55:d1:
7d:bd:aa:7f:4f:ba:9c:f4:2f:2a:b0:72:8e:c2:cc:f6:5b:80:
41:4d:de:1c:ed:81:c2:be:38:d8:c9:ed:18:af:5d:e2:d0:19:
59:89:48:01:89:45:ef:d9:04:62:d2:cb:d6:66:d8:eb:d8:a0:
4e:10:3c:e2:b2:ca:76:75:eb:e0:ae:3f:7f:39:46:cd:14:4d:
b2:5e:f7:94:2a:4a:a1:84:76:86:17:b6:7c:d6:d6:89:b0:f1:
ba:2f:8f:35:e4:99:25:24:01:f0:19:5c:01:12:6a:b8:fa:48:
4e:3c:84:ef:7d:98:2f:6a:c2:ee:94:40:1e:f0:f0:96:22:83:
cb:f3:2b:75:50:84:69:73:3f:f6:07:cd:f7:96:c7:13:b7:28:
26:ba:54:4b:2c:6e:b8:34:4c:e3:48:85:eb:73:cd:f1:b2:77:
87:13:1f:7d:5e:25:85:9e:e8:d7:41:f8:d1:35:fa:d0:e9:fc:
da:3b:61:38:5a:ce:3a:8e:c1:7f:b6:f0:15:7c:53:89:0d:84:
41:de:98:75:fb:ad:11:fb:6f:99:b8:0a:74:49:9f:7d:6c:2e:
87:36:11:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKLcc9iH1a6LEykkkfR71dYYq8GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNTEwMjAxNjA2NTlaFw0yNTEwMjExNzExNTlaMDMxMTAvBgNV
BAMTKEQ0NEU4MEU3OTdBRTk0ODJCRUVBOTkzOTJCQ0RFQjlGOTNCNkJCNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E8OVO2MSZFmdHroBLY/eW3wi
cVDzXdPMyrWgpIcKPARnee+I5jofdDPR4Ep3udb8HGULXaV5g+FobyCO3A33WJL8
GqS4JQsZN5/fvQqlVNflps7GIXFaytGT6DXN4wgbQuxjJta0SwmvendXpLI8+4Dq
xkX9ysJkUcYOTKWV1/6TRmtBWgyalIrf0qmtZmFkfFgWjBgkDNzTPk529mm1clsK
/KZvBxUA+fkBikHluRVso7fAI76iMGyOjBAoy+grQXWT6n7/aE928i1uUBTBUQAJ
0+zklFrMpTD9HYK9k4zoRKX4wPitYCBlMUECHJzQYiOxDdpzK8by8z/Wv/SjAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1E6A55eulIK+6pk5K83rn5O2u1QwHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhvUU0vMS9D
NTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH5YmzuRHwx8DIrgpCqqGg1o8YgsG3E3t9eidExq4Fj1czlXRfb2qf0+6nPQv
KrByjsLM9luAQU3eHO2Bwr442MntGK9d4tAZWYlIAYlF79kEYtLL1mbY69igThA8
4rLKdnXr4K4/fzlGzRRNsl73lCpKoYR2hhe2fNbWibDxui+PNeSZJSQB8BlcARJq
uPpITjyE732YL2rC7pRAHvDwliKDy/MrdVCEaXM/9gfN95bHE7coJrpUSyxuuDRM
40iF63PN8bJ3hxMffV4lhZ7o10H40TX60On82jthOFrOOo7Bf7bwFXxTiQ2EQd6Y
dfutEftvmbgKdEmffWwuhzYRiA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:01 2025 by rpki-client