
$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
File: 3252E783D98B854BCC439007DE017EB6E4E2FF51.mft (raw, json)
Hash identifier: TXgJIPHcWfuPMhdyGiL1T+Bophhzr2w+octX0iYDNdM=
Subject key identifier: BC:98:09:12:F9:95:8B:D5:C6:7F:09:44:AA:8A:D7:64:01:90:7F:E2
Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
Certificate issuer: /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Certificate serial: 7F61B576F01CBF0BB4F4D17A325CE8B887D0D818
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
Manifest number: 0134
Signing time: Fri 24 Jul 2026 03:52:49 +0000
Manifest this update: Fri 24 Jul 2026 03:47:49 +0000
Manifest next update: Sat 25 Jul 2026 04:48:49 +0000
Files and hashes: 1: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: TGqKcq5hhQvs292+DCyMD6YCLTrai4dDENZfetKhjsc=)
2: 3252E783D98B854BCC439007DE017EB6E4E2FF51.crl (hash: B7Y7bhScjJjtedBOmYAgzqppmS7bzCX5x/XgKUtNLPQ=)
3: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: Gp1PMxDQ40LAoeo7u3FrJiFb2mSa2LoBqbgag3h7iyw=)
4: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 25 Jul 2026 04:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:61:b5:76:f0:1c:bf:0b:b4:f4:d1:7a:32:5c:e8:b8:87:d0:d8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51
Validity
Not Before: Jul 24 03:47:49 2026 GMT
Not After : Jul 25 04:48:49 2026 GMT
Subject: CN=BC980912F9958BD5C67F0944AA8AD76401907FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:a5:2f:22:40:30:74:6f:b8:e9:e4:22:f5:
0f:3a:08:8a:a2:d0:89:db:f2:df:85:cd:e5:11:80:
7b:78:e4:9b:c0:4d:56:01:74:1f:76:98:f7:7c:d4:
ff:85:59:b1:9b:0b:72:6f:7f:02:4f:4a:2b:91:27:
f9:db:a6:29:20:b8:2d:c4:85:5d:5e:77:14:b8:15:
96:03:22:9e:3c:0d:a0:e7:25:04:e5:a6:2d:2e:10:
ed:6a:27:ee:2c:02:40:f6:25:7f:7d:49:7d:a7:7f:
e2:1a:59:1e:0d:5d:56:12:5b:a6:de:33:5d:97:b8:
ad:e7:23:8c:e3:99:1c:a0:41:9b:3d:39:ec:88:c0:
62:a7:af:bd:45:82:59:a9:a8:57:4c:2e:d6:f8:72:
4f:3b:33:98:7d:fe:55:4d:d2:dc:a7:f2:13:84:e5:
62:ed:16:cf:de:4d:b2:5a:a0:eb:f6:ec:3c:0d:8d:
29:9c:e3:19:fe:ff:c5:e9:f0:56:14:f3:46:23:88:
2c:8a:f7:2d:91:93:0f:a6:00:e3:e1:f9:85:bd:a1:
f6:38:d8:92:52:25:90:80:fb:1a:02:83:c3:1c:79:
99:c5:54:b0:54:54:8a:49:b5:11:b0:60:5a:1c:8c:
f7:0b:97:05:cd:d4:41:f8:dd:dd:8c:77:47:31:0f:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:09:12:F9:95:8B:D5:C6:7F:09:44:AA:8A:D7:64:01:90:7F:E2
X509v3 Authority Key Identifier:
keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:f0:73:9c:3b:25:0c:33:b0:35:af:16:71:07:3e:71:60:
92:f6:57:85:24:c8:5f:db:bc:58:dc:58:8c:17:e6:21:58:b9:
ed:5f:56:d5:d5:0a:05:85:a4:87:1f:97:a7:e9:92:00:f5:74:
d8:56:0c:32:c1:91:00:fa:38:12:5b:46:9a:cd:1c:13:1b:6e:
75:1d:d1:20:3e:ee:75:af:bf:b0:c9:f4:3b:ad:98:08:74:8d:
38:ef:57:1a:8f:34:ed:20:db:3b:60:4c:ea:3f:b0:d3:b0:34:
b4:69:be:7d:3c:e4:fd:21:32:ed:4f:78:1f:4e:f9:44:7c:f1:
66:16:d5:89:05:f8:56:5d:01:1b:6c:e7:30:38:5d:5d:7e:23:
11:d1:04:01:6b:5d:e2:00:e2:28:a1:ba:55:95:59:1a:7c:f3:
7b:95:66:41:ef:7d:1f:da:5c:11:8d:a3:43:fe:9c:84:55:c4:
59:2a:df:fb:85:ce:2a:d8:b1:b6:48:c2:63:dd:8c:2a:50:b4:
4e:f6:30:99:ec:1d:fc:6a:f4:b2:ad:ab:75:50:40:45:8b:e8:
1b:ea:13:5e:64:32:01:0f:7f:1c:a0:ed:2d:d8:3a:ef:ce:68:
06:c7:80:33:87:9a:4c:fd:12:25:65:c5:37:27:ef:de:25:66:
a4:bb:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:35 2026 by rpki-client