
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
File: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft (raw, json)
Hash identifier: DXupCyWpamHfxKcMSmf+af/gwX5MnqkyVwP43OZDiiU=
Subject key identifier: 9E:93:E1:4E:EE:C4:E0:31:49:1B:79:90:92:5A:58:67:50:1C:3A:A8
Authority key identifier: F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
Certificate issuer: /CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Certificate serial: 604667231AD3EAC826B7DA9C4493C4037913A1DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
Manifest number: 02F0
Signing time: Mon 20 Oct 2025 06:25:50 +0000
Manifest this update: Mon 20 Oct 2025 06:20:50 +0000
Manifest next update: Tue 21 Oct 2025 07:25:50 +0000
Files and hashes: 1: F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl (hash: DoSavTB3VAUwlyx3dKtjyIunDENNLgAesg+GOyBNyE4=)
2: 323830343a353838633a3a2f33322d3438203d3e20323638313335.roa (hash: 8eAkq4HT64a5baT56OgFx1DH72F9mwfih602zhR2CH0=)
3: 34352e3137302e342e302f32322d3234203d3e20323638313335.roa (hash: SoeCL0aZ+l3TLgazhWCoIgR3tjyNLppAEi6iu2aQgvU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 07:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:46:67:23:1a:d3:ea:c8:26:b7:da:9c:44:93:c4:03:79:13:a1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F34586E5FEADD624205CA9CAA175D3DCA59D32B3
Validity
Not Before: Oct 20 06:20:50 2025 GMT
Not After : Oct 21 07:25:50 2025 GMT
Subject: CN=9E93E14EEEC4E031491B7990925A5867501C3AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:4f:f7:35:c3:0e:b3:21:38:b0:c6:ec:d9:
2b:ca:a7:00:29:17:a0:ca:19:ba:94:4e:cf:05:aa:
58:22:84:7d:52:5b:74:f6:23:55:61:1d:79:f8:67:
97:39:da:e7:63:d9:b8:55:49:bf:e6:49:e1:af:bd:
68:53:3f:9a:0f:fe:ae:c9:89:af:96:2d:2e:35:5a:
6e:91:ef:1b:f9:3c:50:7a:4d:48:d7:d1:c5:81:bd:
70:34:eb:a1:97:37:11:b5:63:6a:72:7b:45:52:02:
db:37:0a:b4:b9:13:26:8c:bb:e6:4a:b2:c6:4c:ad:
09:57:ad:f2:5c:c0:9d:d3:d2:c4:ea:b6:5f:3f:fb:
2c:a8:34:a5:10:b0:8b:f7:06:c0:b4:cf:62:f9:24:
5b:36:6d:50:1e:84:ec:1b:63:b7:ef:d0:b7:1f:fc:
f4:2e:cf:a4:2f:3f:fa:60:9e:1c:76:7d:73:39:ba:
d3:3b:6a:ca:ba:60:98:67:19:87:26:aa:c9:83:63:
ab:42:ff:e3:a4:12:e9:9d:e7:e3:ab:66:26:f3:42:
e5:d5:ac:05:36:f4:59:98:d1:05:e6:89:43:9e:89:
ed:87:67:1b:08:07:83:d1:eb:8b:05:89:77:60:16:
16:cc:8a:fa:ff:3c:5f:49:61:83:b9:ac:78:4d:38:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:E1:4E:EE:C4:E0:31:49:1B:79:90:92:5A:58:67:50:1C:3A:A8
X509v3 Authority Key Identifier:
keyid:F3:45:86:E5:FE:AD:D6:24:20:5C:A9:CA:A1:75:D3:DC:A5:9D:32:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/1/F34586E5FEADD624205CA9CAA175D3DCA59D32B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d4:b1:00:31:a8:95:77:ed:84:b4:1b:ab:e5:e9:f8:55:7f:
ee:7f:51:7e:69:69:c6:a5:3b:9c:d9:fb:40:dd:78:67:dd:d3:
81:0e:2a:05:7b:b3:42:be:a2:1c:b6:d7:f6:e0:b3:17:a4:78:
da:f2:a0:68:9b:62:ce:26:81:c4:47:a0:39:1c:3b:25:fe:98:
ed:c3:61:26:08:5b:63:e0:7d:3b:e4:a0:7d:3a:39:ff:15:f4:
69:5a:00:09:da:80:2d:22:53:67:a3:a0:86:83:5e:a7:34:d9:
6a:2c:af:03:3c:27:23:e2:2f:64:e6:d3:bb:56:b7:af:5d:7e:
3c:5f:13:fd:52:ae:3f:68:37:73:b8:8a:42:42:fa:05:a9:8f:
90:13:9f:2b:d0:41:2b:39:44:19:83:b8:c3:88:49:9b:02:4f:
e8:03:91:36:99:8e:78:2c:30:72:a0:22:d6:a1:a9:35:91:36:
08:4f:c5:10:e1:64:33:c8:fa:27:e3:23:96:39:d0:24:2a:f8:
af:24:df:c9:fa:37:2b:0d:19:81:40:f8:e9:7f:eb:ed:c1:9e:
dc:80:a9:dd:74:34:b7:21:80:02:44:3a:e2:e6:a2:f7:28:1a:
03:aa:b2:ee:be:d7:dd:2d:2d:8f:49:9d:d4:d0:9a:0d:9b:26:
16:34:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:39 2025 by rpki-client