
$ rpki-client -vvvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
File: DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft (raw, json)
Hash identifier: KEO68a1Qa4+P+A10PT2myK5SZLh81SJkhL8p5tjp6xo=
Subject key identifier: 67:EF:B5:80:7B:6D:CB:2D:89:89:96:9E:4D:EA:84:6D:C4:B4:D6:33
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Certificate issuer: /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial: 560A0D5E98F70575AE059A817D482E0A8CAF560A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
Manifest number: 0230
Signing time: Thu 29 Oct 2026 07:45:53 +0000
Manifest this update: Thu 29 Oct 2026 07:40:53 +0000
Manifest next update: Fri 30 Oct 2026 10:53:53 +0000
Files and hashes: 1: 34352e3137312e3232382e302f32322d3234203d3e20323638373436.roa (hash: tEz0p+H27tdiZuhSSK7kUmnMXwsu9eiD3h/FUQN6Hu0=)
2: 323830343a356131303a3a2f33322d3438203d3e20323638373436.roa (hash: XXtM4gWOuIw5uETvxyCSVo5160xIH1BFByXUmIeHI8k=)
3: DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl (hash: XtDLxh07X2pazBnJf0160yqZFj0/yDNiK/NjpHLPH3w=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 10:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0a:0d:5e:98:f7:05:75:ae:05:9a:81:7d:48:2e:0a:8c:af:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Validity
Not Before: Oct 29 07:40:53 2026 GMT
Not After : Oct 30 10:53:53 2026 GMT
Subject: CN=67EFB5807B6DCB2D8989969E4DEA846DC4B4D633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:d2:b7:86:e8:90:db:3f:fc:17:cc:76:ab:
6a:2b:7b:82:32:bb:1b:28:ba:c0:46:1e:74:9e:42:
9f:01:ea:86:2f:e6:a3:77:e9:34:f5:f8:e9:12:a4:
58:87:58:dc:f5:48:5b:64:86:2e:ee:4a:b0:59:ad:
bf:cf:16:37:6e:de:0d:ef:f7:8c:42:ff:3b:69:8b:
64:19:5b:6a:ac:64:89:8a:6b:a3:c6:b3:55:b3:ac:
3b:9d:b4:fb:cb:46:08:e0:71:2d:02:14:89:41:9c:
73:bc:cf:db:4b:ad:10:2e:da:35:dc:7b:c5:33:8d:
27:19:03:54:4f:bd:0d:47:09:80:21:79:6b:7f:f0:
8a:de:81:58:fc:16:67:7a:69:15:32:8d:7c:e6:7f:
2b:3c:ce:7a:df:9d:62:00:5a:9f:d7:e5:90:09:24:
bf:2b:82:70:16:55:77:f1:ee:8b:a4:d7:85:28:2f:
8f:e5:7b:ba:82:ca:7d:40:af:58:ad:80:ca:b0:9e:
1d:60:15:a6:bc:3b:76:26:c5:4c:0c:4d:52:48:3d:
fe:07:af:10:45:34:ca:9c:d3:37:0c:26:4f:5d:15:
57:f5:84:b0:8e:b0:7b:44:c5:8b:4d:d6:f6:f8:41:
7a:0e:0b:d9:c7:a4:f0:7f:a0:61:4d:d8:a0:16:26:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:B5:80:7B:6D:CB:2D:89:89:96:9E:4D:EA:84:6D:C4:B4:D6:33
X509v3 Authority Key Identifier:
keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5c:08:22:9a:37:72:0b:50:a5:47:a9:49:ec:fa:f1:74:37:
ef:fc:e6:50:b4:69:53:9a:ba:9b:f0:0e:75:2a:6a:71:c2:ea:
99:ca:ea:33:df:65:a7:4b:fc:87:c8:0c:e3:21:46:ec:38:6b:
3a:72:0c:16:4c:68:10:fa:6f:ef:5d:50:9e:37:3b:8f:12:b0:
35:8d:80:47:93:37:40:71:f6:45:25:1d:c3:d4:11:ef:ee:15:
68:b2:e2:de:56:4b:64:89:36:a6:a1:93:02:68:d6:ad:c8:69:
4a:34:58:cc:c7:48:bf:57:b3:85:8c:e3:da:83:ef:d6:13:ff:
4b:e7:2c:38:41:b0:0c:3b:f5:0a:8f:bb:cc:15:b0:ba:b4:f8:
ec:59:84:5f:22:77:09:84:f7:18:2e:8d:bf:bb:cb:11:b0:8b:
3f:48:82:88:57:58:97:a8:19:c7:b7:f6:ea:45:94:0f:71:b4:
da:c5:8a:c6:9c:a6:ee:84:2e:ac:b4:67:67:8e:ff:4e:d9:64:
25:29:20:c6:3a:33:a5:8c:3f:53:9f:18:90:d6:60:19:1b:4a:
7f:99:bc:38:b2:fc:f6:1a:43:0e:85:68:f2:3d:1f:19:3d:5e:
12:6d:7e:b8:18:7f:1c:4d:c4:d1:4d:81:85:c4:18:33:09:38:
ae:9e:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:05:39 2026 by rpki-client