
$ rpki-client -vvf rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
File: 8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft (raw, json)
Hash identifier: o0c3tweoJX4NcxphmL8F/UrBnqIfwCi9w3oolONNsCs=
Subject key identifier: E9:4D:62:2B:E5:B6:29:0D:F5:7E:E7:0D:C5:0E:CC:5F:E1:F8:23:C1
Authority key identifier: 8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41
Certificate issuer: /CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41
Certificate serial: 56802C1F5BE97DEDB64241384A4A7E804CEE5687
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
Manifest number: BB
Signing time: Mon 20 Oct 2025 06:38:25 +0000
Manifest this update: Mon 20 Oct 2025 06:33:25 +0000
Manifest next update: Tue 21 Oct 2025 07:41:25 +0000
Files and hashes: 1: 3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa (hash: GbLn53lVwmZV/KM9ZK4ywi7kXxK/ooiAIOAwJLgXDDA=)
2: 8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl (hash: 94Qs8vxeNMxQJ/fnwGxqTz+6cYG4uR86c7x9wxwncoU=)
3: 323830343a326631303a3a2f33322d313238203d3e20323634383639.roa (hash: haGQzrr28ZiQjHzuCQOTrEMszBlmFytBSTZxEBxcvlY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl
rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 07:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:80:2c:1f:5b:e9:7d:ed:b6:42:41:38:4a:4a:7e:80:4c:ee:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41
Validity
Not Before: Oct 20 06:33:25 2025 GMT
Not After : Oct 21 07:41:25 2025 GMT
Subject: CN=E94D622BE5B6290DF57EE70DC50ECC5FE1F823C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:51:19:a0:3b:b3:bc:8d:b9:3a:fb:27:de:
21:26:72:63:c5:d4:84:10:2a:59:7a:d5:05:01:6f:
96:17:05:74:cb:43:84:24:4f:53:95:8a:de:63:70:
5b:29:54:cb:39:43:40:73:94:24:80:09:eb:18:0f:
fc:eb:31:69:da:7e:1a:9e:1d:3d:f0:a8:5b:7a:49:
57:00:e3:90:89:8d:8a:3d:f3:73:77:c7:39:77:e4:
03:fe:b1:4a:93:09:f6:67:8a:8e:ee:ef:de:86:5d:
b6:fb:8b:f3:82:3c:91:9b:c7:25:10:d4:3f:0d:c9:
32:7f:73:2a:42:63:e1:69:16:40:3c:4a:af:61:66:
bb:21:97:8e:9b:1a:0d:39:2e:0e:84:49:a3:29:fd:
58:d0:e2:ef:f9:6f:19:52:99:8c:a5:9d:b3:24:87:
4a:f3:c9:c5:ad:e1:da:95:89:66:04:a3:c6:32:13:
e7:e6:26:71:ca:9c:ad:d6:ff:c3:ee:c6:52:5a:b5:
52:9f:e4:9f:3d:a3:46:e0:9a:73:8f:3b:65:f8:3f:
c5:eb:4e:38:76:1d:71:f4:69:5a:b5:2a:be:d0:47:
bf:71:40:41:44:08:fd:94:01:34:48:8b:ef:16:07:
0d:46:4e:82:a4:62:45:c4:d6:fd:3e:cf:9f:24:30:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:62:2B:E5:B6:29:0D:F5:7E:E7:0D:C5:0E:CC:5F:E1:F8:23:C1
X509v3 Authority Key Identifier:
keyid:8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4a:1c:16:6e:fc:38:08:3a:17:17:9e:e7:60:42:1d:2f:7a:
62:49:47:ba:da:16:bf:af:cd:cd:16:16:1d:d0:5e:e6:f9:e7:
15:9c:99:83:83:f4:2a:05:f6:b2:8d:46:a1:3b:4e:c8:57:b9:
11:a8:f4:64:01:28:e8:77:96:1a:04:8a:52:dc:e0:93:8c:ac:
f2:86:a4:10:41:e1:bf:81:9d:eb:b2:65:e7:c6:05:ab:4f:5e:
b2:d5:ed:a5:3a:d8:e9:12:b8:d2:78:08:9d:ed:e9:ca:36:48:
e2:31:5a:9a:e7:51:7f:01:0f:34:d4:c1:22:d7:07:5c:fd:9d:
e7:2d:b9:d9:10:66:02:de:9e:03:4a:a4:b4:ab:4d:3b:e8:3c:
e9:65:df:1f:0b:48:fc:56:d9:89:2f:53:05:05:70:e8:bd:cf:
2c:5d:84:8f:6c:45:0e:da:db:d2:eb:63:7f:0a:03:2c:21:28:
22:78:54:ca:4a:a0:b3:f6:92:e2:af:25:8f:70:3d:f2:1e:23:
04:e1:b8:07:0c:57:fb:6f:3a:c0:8b:c9:db:52:12:23:8e:4f:
f7:67:3f:f2:25:10:04:48:22:68:f4:60:82:7b:18:73:3f:9a:
3e:7f:9e:bb:ae:6a:be:74:90:5c:4a:25:76:4e:76:c3:ba:4c:
01:95:77:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUVoAsH1vpfe22QkE4Skp+gEzuVocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDOUJGMUFERTM3OTk1OTU5M0ZDMTM3Mjk4QUI1RjdG
MTEzQ0E0MTAeFw0yNTEwMjAwNjMzMjVaFw0yNTEwMjEwNzQxMjVaMDMxMTAvBgNV
BAMTKEU5NEQ2MjJCRTVCNjI5MERGNTdFRTcwREM1MEVDQzVGRTFGODIzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQVEZoDuzvI25Ovsn3iEmcmPF
1IQQKll61QUBb5YXBXTLQ4QkT1OVit5jcFspVMs5Q0BzlCSACesYD/zrMWnafhqe
HT3wqFt6SVcA45CJjYo983N3xzl35AP+sUqTCfZnio7u796GXbb7i/OCPJGbxyUQ
1D8NyTJ/cypCY+FpFkA8Sq9hZrshl46bGg05Lg6ESaMp/VjQ4u/5bxlSmYylnbMk
h0rzycWt4dqViWYEo8YyE+fmJnHKnK3W/8PuxlJatVKf5J89o0bgmnOPO2X4P8Xr
Tjh2HXH0aVq1Kr7QR79xQEFECP2UATRIi+8WBw1GToKkYkXE1v0+z58kMHpNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6U1iK+W2KQ31fucNxQ7MX+H4I8EwHwYDVR0j
BBgwFoAUjcm/Gt43mVlZP8E3KYq19/ETykEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjQzUFFXdXBRMktzTWJRcXFSMll0V3VBYzI4TldyWEQxNzZwTHM0R0tv
RWYvMC84REM5QkYxQURFMzc5OTU5NTkzRkMxMzcyOThBQjVGN0YxMTNDQTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzlCRjFBREUzNzk5NTk1
OTNGQzEzNzI5OEFCNUY3RjExM0NBNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NjQzUFFXdXBRMktzTWJRcXFSMll0V3VBYzI4TldyWEQxNzZwTHM0R0tvRWYvMC84
REM5QkYxQURFMzc5OTU5NTkzRkMxMzcyOThBQjVGN0YxMTNDQTQxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjUocFm78OAg6Fxee52BCHS96YklHutoWv6/NzRYWHdBe5vnnFZyZg4P0KgX2
so1GoTtOyFe5Eaj0ZAEo6HeWGgSKUtzgk4ys8oakEEHhv4Gd67Jl58YFq09estXt
pTrY6RK40ngIne3pyjZI4jFamudRfwEPNNTBItcHXP2d5y252RBmAt6eA0qktKtN
O+g86WXfHwtI/FbZiS9TBQVw6L3PLF2Ej2xFDtrb0utjfwoDLCEoInhUykqgs/aS
4q8lj3A98h4jBOG4BwxX+286wIvJ21ISI45P92c/8iUQBEgiaPRggnsYcz+aPn+e
u65qvnSQXEoldk52w7pMAZV3Sg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:35 2025 by rpki-client