
$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
File: 165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft (raw, json)
Hash identifier: LXu02FtGCVJohMtTletunSe/Pk2DWZsydeKzVLGYkL4=
Subject key identifier: 9D:4D:40:7E:0A:B7:B3:7E:EF:62:3A:67:36:BC:56:A1:C4:2B:34:68
Authority key identifier: 16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0
Certificate issuer: /CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
Certificate serial: 28B0D4AB54F817AE7397B732770D3E6A10C25F65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
Manifest number: D8
Signing time: Tue 04 Nov 2025 07:41:44 +0000
Manifest this update: Tue 04 Nov 2025 07:36:44 +0000
Manifest next update: Wed 05 Nov 2025 10:29:44 +0000
Files and hashes: 1: 3137302e38302e33362e302f32322d3332203d3e20323636323037.roa (hash: KtrPDzDMt2J5gpUpvNGofwJSiHUxs7c5w1oORXGzWPE=)
2: 34352e3138372e3233322e302f32322d3332203d3e20323636323037.roa (hash: KhKbCSYg2zcuyc0vqW5OWHwIecy2sp5+qnMo9kGDBd8=)
3: 323830343a336336303a3a2f33322d313238203d3e20323636323037.roa (hash: SoUKIEfhbFTW8l3BBJ4UrqfwJxte5BAOwfMb2s2SsNM=)
4: 165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl (hash: s2poUb5WFNRNXk+zLIFTKmYcKbZ+W3PeJgY0WFwhPVA=)
5: 3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa (hash: +RsS1nEos1cR1/sb/KuovUMN89Yjnr49Lh1CVloHLgk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl
rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 10:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b0:d4:ab:54:f8:17:ae:73:97:b7:32:77:0d:3e:6a:10:c2:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
Validity
Not Before: Nov 4 07:36:44 2025 GMT
Not After : Nov 5 10:29:44 2025 GMT
Subject: CN=9D4D407E0AB7B37EEF623A6736BC56A1C42B3468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:86:94:13:f3:6f:7b:32:ab:7b:9a:bb:43:
7a:3c:94:d3:17:bd:76:67:5f:07:27:1b:47:94:0e:
0a:8c:f0:a2:0a:fd:f6:01:cf:34:f5:7b:2c:12:09:
5f:47:96:32:bd:8a:88:1a:fa:40:bc:fc:10:90:ad:
1b:c9:5b:42:f4:cc:85:7b:54:2c:91:a6:3e:2e:ec:
35:91:fe:cc:b8:5e:ed:29:2c:0f:95:ec:e4:9b:4b:
67:1c:9a:9c:21:d3:60:a7:68:8f:0b:86:a5:6d:d6:
84:50:b2:89:d0:38:90:b7:41:b9:c6:e9:6f:11:0d:
ab:91:91:cd:a8:e6:b8:52:fd:dd:07:39:8e:be:b5:
87:d9:4b:fb:28:42:a7:c1:61:88:52:61:dd:a5:1c:
ef:89:29:e8:6f:91:89:6f:8a:54:ec:bd:34:60:6a:
df:8b:2b:af:54:b5:9b:a6:83:48:3a:0d:f0:c0:a1:
1e:a6:ec:af:d4:0d:91:e8:67:c7:24:24:5d:06:3f:
46:ac:e9:07:15:3a:82:f4:8d:06:97:85:df:b5:5d:
6d:87:62:93:25:7c:bf:87:e1:3e:25:d1:bc:fd:4a:
27:2b:05:26:fb:a7:25:94:74:58:34:e9:38:bd:83:
7d:ee:dd:4c:b4:88:ce:e7:56:6a:59:cd:b0:55:59:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:40:7E:0A:B7:B3:7E:EF:62:3A:67:36:BC:56:A1:C4:2B:34:68
X509v3 Authority Key Identifier:
keyid:16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:97:6c:90:b5:39:ec:48:d3:be:35:5f:3d:ba:a2:a0:f2:1b:
8d:42:1f:28:4b:21:75:5d:77:f1:19:77:57:bd:e2:38:25:6b:
fa:4e:37:ad:e6:d8:d3:d8:08:49:f0:de:39:9c:ba:ed:e9:b5:
c9:b8:d1:0b:5d:dc:3f:4b:cf:16:53:cc:92:47:d1:4c:c2:4a:
17:2b:cd:19:78:19:2a:dc:17:f3:23:e3:5a:e5:2f:81:d4:24:
6d:5b:db:1d:7a:41:a4:e4:25:0a:8b:ff:48:54:06:78:72:74:
e2:eb:1a:1a:b9:0f:54:7a:35:6d:f5:82:da:6f:33:8c:97:b8:
e0:6c:37:9f:e7:27:ac:c6:f5:59:7d:0e:9d:c0:1d:ae:00:17:
33:b3:c0:07:e1:61:96:ba:09:b6:92:d2:90:f7:29:b5:d2:ec:
13:48:be:3a:44:77:97:e0:8d:2a:84:bd:44:30:5d:19:c6:ac:
d0:20:33:8e:7d:b3:fb:0f:c0:3b:49:3d:43:38:26:e8:e6:e5:
55:f4:f6:3d:e7:0a:da:d7:e2:47:25:b1:ba:b5:2b:15:b3:0f:
c1:f0:a6:ab:08:91:12:7d:76:f3:76:e2:e5:d4:ed:16:c2:58:
9a:19:6a:df:c2:98:3a:b4:22:e4:ee:28:e5:93:d2:d9:e1:34:
67:8e:f1:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKLDUq1T4F65zl7cydw0+ahDCX2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1RDVDRTFBRDc1NzA3RjBFQkFENzQyNDZBODUwOUND
NDkzNERFMDAeFw0yNTExMDQwNzM2NDRaFw0yNTExMDUxMDI5NDRaMDMxMTAvBgNV
BAMTKDlENEQ0MDdFMEFCN0IzN0VFRjYyM0E2NzM2QkM1NkExQzQyQjM0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9YaUE/NvezKre5q7Q3o8lNMX
vXZnXwcnG0eUDgqM8KIK/fYBzzT1eywSCV9HljK9ioga+kC8/BCQrRvJW0L0zIV7
VCyRpj4u7DWR/sy4Xu0pLA+V7OSbS2ccmpwh02CnaI8LhqVt1oRQsonQOJC3QbnG
6W8RDauRkc2o5rhS/d0HOY6+tYfZS/soQqfBYYhSYd2lHO+JKehvkYlvilTsvTRg
at+LK69UtZumg0g6DfDAoR6m7K/UDZHoZ8ckJF0GP0as6QcVOoL0jQaXhd+1XW2H
YpMlfL+H4T4l0bz9SicrBSb7pyWUdFg06Ti9g33u3Uy0iM7nVmpZzbBVWSeXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnU1Afgq3s37vYjpnNrxWocQrNGgwHwYDVR0j
BBgwFoAUFl1c4a11cH8OutdCRqhQnMSTTeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0QyU1gycjg2TWJRZTJ2Y2dUTHMyamNMcEtUUE1Ua1NLc0VLWDRYRmpF
Wk0vMC8xNjVENUNFMUFENzU3MDdGMEVCQUQ3NDI0NkE4NTA5Q0M0OTM0REUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NUQ1Q0UxQUQ3NTcwN0Yw
RUJBRDc0MjQ2QTg1MDlDQzQ5MzRERTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0QyU1gycjg2TWJRZTJ2Y2dUTHMyamNMcEtUUE1Ua1NLc0VLWDRYRmpFWk0vMC8x
NjVENUNFMUFENzU3MDdGMEVCQUQ3NDI0NkE4NTA5Q0M0OTM0REUwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5JdskLU57EjTvjVfPbqioPIbjUIfKEshdV138Rl3V73iOCVr+k43rebY09gI
SfDeOZy67em1ybjRC13cP0vPFlPMkkfRTMJKFyvNGXgZKtwX8yPjWuUvgdQkbVvb
HXpBpOQlCov/SFQGeHJ04usaGrkPVHo1bfWC2m8zjJe44Gw3n+cnrMb1WX0OncAd
rgAXM7PAB+FhlroJtpLSkPcptdLsE0i+OkR3l+CNKoS9RDBdGcas0CAzjn2z+w/A
O0k9Qzgm6OblVfT2PecK2tfiRyWxurUrFbMPwfCmqwiREn1283bi5dTtFsJYmhlq
38KYOrQi5O4o5ZPS2eE0Z47x8A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:10 2025 by rpki-client