
$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json)
Hash identifier: Yfzo5w76pKALbAoDyvdOF5oqUxQqmrsFg9LfDefse7o=
Subject key identifier: 93:DA:FA:03:3F:D4:6C:AD:D9:C0:28:28:38:94:82:8B:69:57:E5:FC
Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Certificate serial: 2514CA7EED4AAA70699F3A738C9B16484539AA3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
Manifest number: 16
Signing time: Mon 20 Oct 2025 09:06:12 +0000
Manifest this update: Mon 20 Oct 2025 09:01:12 +0000
Manifest next update: Tue 21 Oct 2025 12:03:12 +0000
Files and hashes: 1: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: gXb0/SVc/zYbFRcdaPGEK60jAsZjOVsjY49bAm2ISnA=)
2: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=)
3: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 12:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:14:ca:7e:ed:4a:aa:70:69:9f:3a:73:8c:9b:16:48:45:39:aa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A
Validity
Not Before: Oct 20 09:01:12 2025 GMT
Not After : Oct 21 12:03:12 2025 GMT
Subject: CN=93DAFA033FD46CADD9C028283894828B6957E5FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:61:be:c7:86:ef:71:bd:b5:17:b6:ef:08:
53:08:87:96:79:98:83:28:89:db:3d:f2:79:aa:19:
42:63:89:7e:df:31:63:5b:f3:1f:25:0b:39:a9:9b:
2d:41:d3:b4:8a:cc:30:fb:5c:a4:10:32:49:8b:dd:
4b:3f:9f:3e:a4:04:4f:a7:8e:2b:0e:cb:2d:2a:91:
61:ab:4a:c9:19:d4:d7:95:3e:34:20:06:e2:e0:c7:
9f:32:a3:24:4a:65:8a:ad:df:a6:37:8a:8e:de:cc:
58:73:64:e4:1d:2c:d1:98:04:4e:60:af:83:32:56:
11:a8:48:bf:ec:66:4e:62:49:27:76:e6:73:a7:ac:
66:69:07:19:6e:4a:70:e5:48:8b:74:83:46:4c:a1:
7f:7f:dc:0c:71:d4:98:0a:81:1c:45:52:40:f1:d2:
59:79:6e:40:c0:34:d9:93:b0:56:f2:a2:0b:3f:07:
fd:a4:da:5d:bf:87:7a:6f:2f:7b:b4:ee:ff:e2:d6:
c8:26:3d:95:af:81:49:22:ac:09:40:b8:65:5f:d7:
10:b0:ac:ab:f6:d4:ee:70:c3:7b:f9:8e:41:d0:50:
97:31:53:a3:b5:68:59:d8:bb:68:ef:99:28:32:cb:
2f:7b:92:f0:4e:61:bb:14:d7:d0:eb:a0:fd:ee:6b:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:FA:03:3F:D4:6C:AD:D9:C0:28:28:38:94:82:8B:69:57:E5:FC
X509v3 Authority Key Identifier:
keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:df:27:e2:3d:45:29:e6:9e:92:fa:18:80:b8:6e:8a:1b:01:
c0:1a:6a:7c:f4:83:7b:8a:ed:e6:a9:cd:18:26:e6:65:40:c9:
22:49:61:2c:f9:22:31:5c:21:7b:31:3f:bf:d6:e6:52:09:b8:
b3:b9:70:97:9e:76:0d:ea:e7:2a:84:fd:95:a0:a1:e0:be:8d:
60:27:c0:e1:26:d0:3f:89:4c:8b:b7:a7:ed:a6:6f:0e:f7:e0:
75:18:a8:16:48:09:38:96:f4:cc:ff:86:a4:07:99:f0:d8:96:
21:87:36:e7:5e:3e:39:7f:03:58:11:76:b3:62:31:a9:e7:42:
30:3d:7d:07:2b:3f:78:9a:37:59:c9:4e:45:eb:66:e1:1a:6c:
35:48:e1:75:db:60:78:d6:51:52:50:a3:3a:63:4a:51:31:8f:
0e:dc:48:6b:60:9e:d7:0d:b2:40:ef:00:4d:98:1d:7c:2c:53:
74:b0:c3:d4:cb:d6:bd:6b:85:7c:14:8a:0d:13:2f:58:75:4d:
03:5d:85:e4:40:1c:6e:7e:38:34:2c:f7:cd:8f:33:53:14:63:
b1:99:35:e2:e6:25:1d:2e:c2:e1:b7:4e:bd:f3:f9:6a:fe:88:
63:75:ec:d0:93:7d:98:6e:25:84:f0:17:9f:ac:74:87:ea:2a:
e7:02:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:02:02 2025 by rpki-client