
$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
File: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json)
Hash identifier: kv99wmM92mq5K0WdAPNe4rREtFdIM+dpgKVgIlUQ7hE=
Subject key identifier: 43:86:92:12:FC:68:2F:D2:48:01:C9:02:7A:AB:2B:E3:6F:09:0C:31
Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
Certificate issuer: /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Certificate serial: 3F9780CCD15A77CC61D9FAA5719C50529E4F44F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
Manifest number: 02EB
Signing time: Mon 20 Oct 2025 01:10:32 +0000
Manifest this update: Mon 20 Oct 2025 01:05:32 +0000
Manifest next update: Tue 21 Oct 2025 03:34:32 +0000
Files and hashes: 1: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=)
2: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=)
3: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=)
4: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: irpWGquXL+5gEGNZVw8xdMlNgBc178Okm1JZ+B/BNaU=)
5: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=)
6: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=)
7: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=)
8: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 21 Oct 2025 03:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:97:80:cc:d1:5a:77:cc:61:d9:fa:a5:71:9c:50:52:9e:4f:44:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7
Validity
Not Before: Oct 20 01:05:32 2025 GMT
Not After : Oct 21 03:34:32 2025 GMT
Subject: CN=43869212FC682FD24801C9027AAB2BE36F090C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:5c:67:31:b1:e0:a5:6c:a2:c1:76:c2:d4:
c3:68:c2:48:85:84:f5:39:65:f6:46:e6:99:04:d6:
a2:68:b3:85:8e:d2:6a:41:ec:59:d8:fc:c2:eb:d2:
f8:cd:bb:0c:39:51:8b:7f:27:b1:65:35:d0:8f:ce:
4e:d4:98:71:bc:e6:64:41:a8:48:89:8c:1f:75:03:
e4:f6:c5:9f:e0:cc:f5:31:d0:8a:93:5c:cc:d8:47:
5b:0c:09:23:ea:d5:55:b9:7a:f4:a5:80:5e:b2:d0:
1e:03:bf:28:4a:1d:c1:b1:21:c4:73:78:f2:31:14:
42:92:e6:f7:3c:67:1f:34:9b:47:ef:84:9e:82:91:
ad:67:e8:12:cb:d3:f7:f3:d5:e6:b3:53:d5:02:8a:
cd:28:7b:f2:3e:73:32:e6:55:3f:3d:62:f1:1a:d1:
04:6d:b0:ca:b9:bc:73:bb:b1:27:ff:c9:d6:71:8a:
85:06:d0:74:f7:f3:c3:60:69:10:cf:92:ee:57:fa:
cf:31:a6:49:f1:05:ff:2f:4e:38:cb:b3:c8:0c:05:
14:ae:9a:be:e0:89:12:07:ca:2f:fe:92:65:5c:c3:
24:c3:ce:24:52:f5:a3:3a:d4:cb:0d:52:90:55:77:
ab:6c:5c:3c:af:08:9d:a9:9a:06:e5:9b:63:f7:3b:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:86:92:12:FC:68:2F:D2:48:01:C9:02:7A:AB:2B:E3:6F:09:0C:31
X509v3 Authority Key Identifier:
keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:b7:8d:52:4b:f3:01:d3:4e:ab:cb:6f:61:4a:be:f3:75:
f1:a7:ef:91:48:28:e1:84:5d:14:3c:49:32:53:89:7e:aa:a1:
f6:e4:bd:14:1d:1b:30:29:b8:28:69:14:b3:48:f7:0c:fb:27:
79:f8:98:ca:ce:0e:3e:e1:aa:c7:d5:b4:a6:d9:45:f1:a3:9f:
95:7e:42:c9:0b:df:08:2c:c6:a3:d9:4b:06:e8:08:10:44:43:
67:36:8d:13:ca:f2:67:1c:0f:c5:67:70:c8:db:fd:d9:7c:64:
1f:54:db:26:0a:c7:c9:75:62:b4:e3:43:c8:3d:a4:80:69:74:
05:ce:78:d1:42:e1:10:b1:4e:67:81:dd:a8:3d:e3:b8:13:11:
93:e2:fa:25:72:9c:13:e8:24:60:a8:db:da:3c:a8:e3:42:b4:
fe:ef:a9:f3:e9:40:88:f6:e9:56:a5:df:ae:b2:15:aa:43:5e:
b0:8a:2d:f0:c5:b9:7b:a0:0f:d1:d8:07:e8:67:42:fe:f5:c1:
3f:3b:2f:e2:a1:1f:57:24:f7:33:eb:7e:26:3a:ad:e6:c7:73:
40:ba:9c:cf:19:7c:e4:d7:8f:96:4d:0f:4b:eb:97:90:b1:0d:
c5:30:50:45:27:3e:1a:1e:78:3d:4b:be:d3:28:33:92:40:09:
6c:2e:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:41 2025 by rpki-client