
$ rpki-client -vvvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.mft
File: 32577A972AD1B4B07CC2A40139BB2E70F312CEAD.mft (raw, json)
Hash identifier: yiJPKFtZGJaIbTMC0SyOVeXybhPLiVmNSqZAodo1nQg=
Subject key identifier: 5A:9F:F2:D8:38:4E:E4:08:D1:D0:DF:71:D9:2A:7F:AD:2C:5E:17:97
Authority key identifier: 32:57:7A:97:2A:D1:B4:B0:7C:C2:A4:01:39:BB:2E:70:F3:12:CE:AD
Certificate issuer: /CN=32577A972AD1B4B07CC2A40139BB2E70F312CEAD
Certificate serial: 5EE066D15173FAA39EAB02C93593BF02F77A2399
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.mft
Manifest number: 01E3
Signing time: Fri 30 Oct 2026 10:52:22 +0000
Manifest this update: Fri 30 Oct 2026 10:47:22 +0000
Manifest next update: Sat 31 Oct 2026 12:25:22 +0000
Files and hashes: 1: 3136382e3139362e382e302f32322d3332203d3e20323634323431.roa (hash: jVCijU2fHGLKKQzsHjFUAsOPz9GUGgY3m0UArFh/DJY=)
2: 32577A972AD1B4B07CC2A40139BB2E70F312CEAD.crl (hash: vo06g6uJNOjGxnGh7eZYgsMdfJ6GSySPghSFaHXwcZ0=)
3: 3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (hash: rCOJVA1vWK91mAJipM3H380/pnHeIdRDrHgiFHunalY=)
4: 323830343a323463343a3a2f33322d313238203d3e20323634323431.roa (hash: QUGsWjBCKwmSTp7Z57Zx9Usgm4QkeFsJrO1TjEUbbgQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.crl
rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 31 Oct 2026 12:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e0:66:d1:51:73:fa:a3:9e:ab:02:c9:35:93:bf:02:f7:7a:23:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32577A972AD1B4B07CC2A40139BB2E70F312CEAD
Validity
Not Before: Oct 30 10:47:22 2026 GMT
Not After : Oct 31 12:25:22 2026 GMT
Subject: CN=5A9FF2D8384EE408D1D0DF71D92A7FAD2C5E1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:a4:6f:1d:95:bc:7a:3e:af:a7:34:21:93:
1e:31:ed:b9:6e:eb:2d:99:b3:dc:a6:0e:de:b1:b3:
31:4e:b8:d4:da:ca:68:e8:da:28:ba:85:2d:bb:32:
68:7b:99:78:0f:13:00:ca:53:cd:00:bb:c1:c0:ab:
e6:87:f2:7f:40:a5:bd:bd:6d:7f:78:de:b4:6d:3e:
68:33:53:ec:36:39:35:92:a0:96:14:99:6b:1b:68:
8b:0c:06:8c:81:31:18:5d:c2:dc:31:61:0e:44:75:
71:9c:d1:f4:52:ae:af:40:1b:25:f4:7c:c4:97:0b:
1c:4a:6a:95:e6:c6:82:df:63:b2:79:c1:a0:98:25:
cc:c0:8c:47:fc:5b:5e:fc:a7:fb:16:11:ed:50:58:
01:86:58:fe:1c:8b:8f:5b:42:88:b7:ff:c2:fe:0e:
a7:05:fe:0e:c5:ee:c8:b0:fb:c2:5f:4e:07:71:2a:
53:24:e5:cb:8a:e5:23:26:43:49:d4:3d:80:81:2e:
e5:cd:88:73:3f:49:e7:c6:dd:5b:d7:99:f5:9b:8f:
69:72:bb:d6:f1:f5:3b:f0:b0:7e:19:20:ba:f5:8f:
19:dc:05:1d:1d:45:1b:9f:85:48:ba:de:29:6a:24:
43:63:78:61:40:80:0a:29:85:5a:0a:2c:a5:c4:7d:
16:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:F2:D8:38:4E:E4:08:D1:D0:DF:71:D9:2A:7F:AD:2C:5E:17:97
X509v3 Authority Key Identifier:
keyid:32:57:7A:97:2A:D1:B4:B0:7C:C2:A4:01:39:BB:2E:70:F3:12:CE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/32577A972AD1B4B07CC2A40139BB2E70F312CEAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fc:b1:28:56:1d:dc:ca:26:94:13:c1:93:5f:b8:c8:f8:bb:
c0:52:3e:f6:6b:e1:45:9b:ce:6b:f0:99:79:e9:a7:a2:4f:f5:
b9:fe:be:2f:dd:9c:26:53:a0:8a:15:90:01:72:d6:be:cb:41:
d7:37:8a:bc:f6:dc:2a:48:eb:27:3d:5b:ce:31:a4:b3:bf:a1:
bd:5c:57:80:01:f9:c5:b2:a3:83:43:16:a4:20:9a:8c:70:89:
10:9f:1d:dd:21:4b:4c:b4:8e:f2:6b:67:2a:16:5e:cb:5c:83:
a9:b2:d0:98:bc:41:42:da:e1:15:e3:fb:3f:31:b9:31:c1:d6:
bb:dc:04:90:fb:12:8f:5c:48:60:c3:b7:a0:c6:68:91:41:4a:
e3:1c:fa:3d:f9:a5:fa:de:9c:96:0c:9d:12:2e:71:e5:93:0c:
1f:76:4c:95:0b:85:8c:c9:20:41:b5:f0:d7:07:c2:47:02:9a:
a4:06:60:5d:e8:dd:eb:bd:c0:56:50:29:7c:e3:b8:ad:23:8c:
01:7c:be:23:c5:ac:32:68:2d:9c:94:ef:50:84:2b:57:81:b2:
7b:ce:07:45:c5:de:84:95:fd:73:15:95:e5:2c:d2:e7:4e:03:
7a:09:8c:da:de:51:2d:90:88:9e:a6:ac:97:7d:bb:2f:6f:f6:
8d:5c:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:28:54 2026 by rpki-client