
$ rpki-client -vvf rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
File: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft (raw, json)
Hash identifier: yJsST95hHYnXyhA8pbk/WS5ep68DjLdJ1eVx5pFChFk=
Subject key identifier: F8:B1:25:03:60:14:78:43:D2:45:AE:65:BA:24:D0:A0:97:AF:CB:2A
Authority key identifier: 16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2
Certificate issuer: /CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2
Certificate serial: 0D8BB3438E3A1DBFC1DEF3B654FB458DFAAF71C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
Manifest number: CE
Signing time: Wed 05 Nov 2025 05:05:28 +0000
Manifest this update: Wed 05 Nov 2025 05:00:28 +0000
Manifest next update: Thu 06 Nov 2025 08:08:28 +0000
Files and hashes: 1: 3138372e3130332e3139362e302f32322d3234203d3e20323730353233.roa (hash: PGi32eLOlSnhPw5J0SZ6oEdg+SG2e7g5GjCW+zS2fKA=)
2: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl (hash: RZJFqNLgbfLQQh1ZFkWNxfIkEuB3unMTambbDM0r4+U=)
3: 323830343a366434633a3a2f33322d3438203d3e20323730353233.roa (hash: 2SpWKqeZtpyvOk2iIU96KE99DLd99IqbFLz/vOFGwHs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl
rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8b:b3:43:8e:3a:1d:bf:c1:de:f3:b6:54:fb:45:8d:fa:af:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2
Validity
Not Before: Nov 5 05:00:28 2025 GMT
Not After : Nov 6 08:08:28 2025 GMT
Subject: CN=F8B1250360147843D245AE65BA24D0A097AFCB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:f6:fa:5e:83:fd:b7:5b:40:99:01:1e:54:
62:8d:4e:cb:f9:0c:41:55:b7:76:c4:68:2e:f4:e2:
77:5d:76:ce:75:ff:b6:e4:fd:98:6d:f7:ed:95:35:
a8:a6:00:af:2f:55:64:f3:ae:9e:e1:50:85:9c:96:
83:cc:00:41:41:e9:68:e0:d7:39:75:a8:a9:6d:7f:
0f:8f:64:f8:a6:0e:9d:47:35:91:da:28:25:ca:35:
1a:3d:de:1e:dd:d5:a3:2d:51:4a:02:4e:86:5a:f1:
9f:ba:82:a0:45:ec:05:60:13:cf:84:b2:aa:2b:89:
87:33:0f:6c:f8:66:11:f2:b9:64:b9:9f:0c:cc:da:
8c:d2:ae:97:91:8e:f9:63:a5:84:de:1e:51:88:63:
a8:8b:f8:12:57:c2:2e:2a:f8:e7:62:10:7f:56:15:
b2:37:f5:ba:5d:aa:f4:14:ab:6c:7c:c4:62:f3:84:
62:1b:fd:d9:d9:31:4c:f7:6a:02:e8:3e:e4:e2:8b:
4e:18:bc:42:28:7a:4a:89:0b:de:8b:93:11:7d:29:
a1:f9:b6:00:4c:9c:b7:8a:dd:19:b2:35:fc:45:ac:
65:81:2b:56:3f:3b:4c:8e:0d:2a:df:88:14:d9:d6:
62:54:d3:77:1f:5e:7c:44:c5:61:4d:d8:09:f8:da:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:25:03:60:14:78:43:D2:45:AE:65:BA:24:D0:A0:97:AF:CB:2A
X509v3 Authority Key Identifier:
keyid:16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:ad:24:9a:ba:96:d1:0f:97:39:0d:c6:31:81:f6:3d:e6:
4f:96:ab:84:bb:1d:0e:c5:ff:b2:76:44:4d:53:dd:ac:06:39:
ff:12:58:58:b0:58:a5:87:a0:ec:a2:fb:1d:e6:54:af:bc:1f:
f0:96:8f:ab:71:9d:62:dc:db:5b:3e:bd:aa:4d:2b:6b:34:7d:
5a:62:6f:14:ef:fd:6b:22:d6:ba:04:1c:c5:c7:81:ce:db:69:
e4:a8:a1:60:6c:f9:43:0b:ec:a5:09:bc:52:2d:b3:d5:05:b4:
13:32:10:52:84:64:06:20:e0:6e:00:1c:f3:99:19:e9:f2:5f:
a1:d3:9b:d8:6a:51:ef:c0:20:3f:0a:4e:08:cf:b4:98:06:e3:
52:a5:f8:b6:48:aa:4c:13:28:0a:d6:4f:ff:ab:75:ce:b8:39:
6d:b0:72:03:a6:52:a5:f8:b7:68:88:80:dc:07:b3:28:2c:bf:
23:10:86:dc:5f:20:10:a9:70:1d:6f:9f:86:9a:08:1b:74:c4:
29:7f:14:44:e4:b4:df:f7:b8:e7:4f:29:b2:a9:22:94:73:91:
96:cb:94:84:d6:47:04:7d:38:8b:9e:26:c3:63:ff:cd:58:5a:
b3:45:c0:5a:bb:45:9e:d5:c4:f3:d8:d9:97:8f:5c:3c:3e:b4:
ac:91:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:22 2025 by rpki-client