
$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
File: 32D842DEE7974134E5B4C88618DC7A30F4029092.mft (raw, json)
Hash identifier: NZpwM8Wqvuo02IYW68Sc+HWQwul+v1riJCsheW2fU2A=
Subject key identifier: 16:CA:23:9C:84:8B:80:DC:4F:65:56:B6:AF:F2:2D:53:56:12:27:C5
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Certificate issuer: /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial: 36B86096B0B96F11D3C54050E64AB5A3BC8F49C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
Manifest number: DF
Signing time: Tue 04 Nov 2025 23:16:03 +0000
Manifest this update: Tue 04 Nov 2025 23:11:03 +0000
Manifest next update: Thu 06 Nov 2025 02:15:03 +0000
Files and hashes: 1: 3136382e3139372e3233322e302f32322d3234203d3e20323635343836.roa (hash: YJPbZrvwzSSWSjZuPHgpa8o7Dw9WTOzm4P+Lnl2+R5U=)
2: 32D842DEE7974134E5B4C88618DC7A30F4029092.crl (hash: iUsSRc6CT6AwNKWxJx4hVbrNXuvaAL/HJzwwczTbeEk=)
3: 323830343a333465303a3a2f33322d3336203d3e20323635343836.roa (hash: 4klcD7t5hexwDr8cLiyMtHpRwuumdH8GWpggWQVNH1A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 02:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b8:60:96:b0:b9:6f:11:d3:c5:40:50:e6:4a:b5:a3:bc:8f:49:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Validity
Not Before: Nov 4 23:11:03 2025 GMT
Not After : Nov 6 02:15:03 2025 GMT
Subject: CN=16CA239C848B80DC4F6556B6AFF22D53561227C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:68:6d:76:0b:de:5f:04:7c:c2:39:da:7a:
f4:c9:93:42:5b:fc:e5:97:6a:b2:c8:f4:11:b8:a9:
49:71:87:0c:4e:40:0a:63:3b:87:66:87:17:86:4e:
05:cf:d3:00:e5:e8:f9:0e:0f:fc:0d:fe:fc:93:8e:
63:ff:8d:7f:1d:ec:0d:b5:7b:72:43:0e:21:a2:6e:
dd:97:34:03:7f:f8:e3:54:10:1f:fc:2a:bd:67:88:
80:7b:52:bd:07:b7:4a:d5:1a:6a:e7:fc:65:a3:d0:
1f:d6:e6:90:3d:27:96:da:81:7f:93:eb:12:10:4f:
db:3f:df:a3:2b:e4:86:21:47:c8:0c:2d:08:02:22:
28:12:60:e9:fe:50:80:59:bc:4e:10:e5:53:72:a4:
99:16:b6:72:ed:f4:d3:6c:37:22:31:ec:0a:17:aa:
99:02:66:88:94:11:9f:77:ed:d6:cb:52:33:c7:8b:
87:d8:38:7a:2e:dd:3f:fe:58:9b:68:9e:0b:8a:83:
5d:07:a7:27:de:83:7b:71:68:59:2b:33:23:e7:4e:
f5:f7:aa:21:bf:f4:cb:59:11:2b:b2:39:7e:d9:23:
4c:8d:5d:95:11:44:fb:cc:33:cc:58:5b:97:30:fe:
55:4a:ea:86:e0:d7:23:c8:65:fc:c6:ea:bc:c2:46:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:23:9C:84:8B:80:DC:4F:65:56:B6:AF:F2:2D:53:56:12:27:C5
X509v3 Authority Key Identifier:
keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:84:d5:64:3a:58:72:6a:29:88:fc:b9:c2:44:09:a9:ea:fe:
75:e2:c4:7f:34:82:11:02:20:2b:c5:0c:79:7d:ee:10:d2:75:
77:e1:56:60:59:3c:6b:17:bd:47:3b:56:63:a5:4e:bd:c1:01:
b9:1f:54:38:4b:cf:d7:0d:56:0e:74:b8:e8:5e:9c:e0:a0:40:
7d:4b:87:4b:fa:0e:82:2a:80:ba:81:b5:54:23:11:98:21:94:
c4:c6:6b:1b:47:4b:86:f6:89:62:68:57:67:05:f2:9c:07:1f:
fa:56:8a:9e:9d:cb:de:11:a7:2e:4f:b5:8e:ce:8f:0e:65:e2:
ae:4d:aa:0d:c3:14:a5:09:89:98:78:06:40:ad:f8:01:f7:2e:
6c:5e:79:d0:9e:98:89:16:53:32:a8:3a:37:ca:db:82:8d:21:
a7:14:93:16:3b:39:38:f1:2e:35:51:b6:37:2d:2e:ab:92:b5:
a3:69:3e:8e:f8:04:88:08:2c:11:10:fa:1b:4a:b4:24:57:7c:
8d:6c:33:bd:f6:e6:b4:b1:a9:90:4c:7a:31:19:08:6e:5a:39:
32:b4:f7:11:5b:7b:dd:50:56:01:16:d5:f5:30:23:58:c6:de:
67:a0:9e:00:90:f9:16:d5:9d:8b:f6:2c:ae:55:2c:69:93:0c:
a8:7a:4a:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNrhglrC5bxHTxUBQ5kq1o7yPScMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEODQyREVFNzk3NDEzNEU1QjRDODg2MThEQzdBMzBG
NDAyOTA5MjAeFw0yNTExMDQyMzExMDNaFw0yNTExMDYwMjE1MDNaMDMxMTAvBgNV
BAMTKDE2Q0EyMzlDODQ4QjgwREM0RjY1NTZCNkFGRjIyRDUzNTYxMjI3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslWhtdgveXwR8wjnaevTJk0Jb
/OWXarLI9BG4qUlxhwxOQApjO4dmhxeGTgXP0wDl6PkOD/wN/vyTjmP/jX8d7A21
e3JDDiGibt2XNAN/+ONUEB/8Kr1niIB7Ur0Ht0rVGmrn/GWj0B/W5pA9J5bagX+T
6xIQT9s/36Mr5IYhR8gMLQgCIigSYOn+UIBZvE4Q5VNypJkWtnLt9NNsNyIx7AoX
qpkCZoiUEZ937dbLUjPHi4fYOHou3T/+WJtonguKg10Hpyfeg3txaFkrMyPnTvX3
qiG/9MtZESuyOX7ZI0yNXZURRPvMM8xYW5cw/lVK6obg1yPIZfzG6rzCRgahAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFsojnISLgNxPZVa2r/ItU1YSJ8UwHwYDVR0j
BBgwFoAUMthC3ueXQTTltMiGGNx6MPQCkJIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWNKclBSWFZaY2hhTmJ6dUV6UlhlaXRaZ1FUSzV0SGs4U2tMWHRnVnFL
ZlMvMC8zMkQ4NDJERUU3OTc0MTM0RTVCNEM4ODYxOERDN0EzMEY0MDI5MDkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRDg0MkRFRTc5NzQxMzRF
NUI0Qzg4NjE4REM3QTMwRjQwMjkwOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RWNKclBSWFZaY2hhTmJ6dUV6UlhlaXRaZ1FUSzV0SGs4U2tMWHRnVnFLZlMvMC8z
MkQ4NDJERUU3OTc0MTM0RTVCNEM4ODYxOERDN0EzMEY0MDI5MDkyLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASoTVZDpYcmopiPy5wkQJqer+deLEfzSCEQIgK8UMeX3uENJ1d+FWYFk8axe9
RztWY6VOvcEBuR9UOEvP1w1WDnS46F6c4KBAfUuHS/oOgiqAuoG1VCMRmCGUxMZr
G0dLhvaJYmhXZwXynAcf+laKnp3L3hGnLk+1js6PDmXirk2qDcMUpQmJmHgGQK34
AfcubF550J6YiRZTMqg6N8rbgo0hpxSTFjs5OPEuNVG2Ny0uq5K1o2k+jvgEiAgs
ERD6G0q0JFd8jWwzvfbmtLGpkEx6MRkIblo5MrT3EVt73VBWARbV9TAjWMbeZ6Ce
AJD5FtWdi/YsrlUsaZMMqHpKGQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:19:11 2025 by rpki-client