
$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
File: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft (raw, json)
Hash identifier: BIE+jBxVOnRvpYHGSCUFUHE++HCVkXed24vN8n4+zRc=
Subject key identifier: 8C:49:7C:7C:C4:48:87:BD:11:9B:94:FF:4C:D1:76:DD:4A:0A:5C:75
Authority key identifier: 42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88
Certificate issuer: /CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88
Certificate serial: 5814986D191BAC9046C232BA86E10B36183F10C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
Manifest number: 1B
Signing time: Wed 08 Jul 2026 13:21:55 +0000
Manifest this update: Wed 08 Jul 2026 13:16:55 +0000
Manifest next update: Thu 09 Jul 2026 14:37:55 +0000
Files and hashes: 1: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: 8bTI6STV9myie2O7jjWabFesGEs4DvpRnx5NUft7YyM=)
2: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: S+1YM580MYl2/Ez26cZdvbOuNQSh+xfPKBssmmPx6uY=)
3: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl (hash: hdu/l7K1WL56tpSo76+0txGfRAOuTRXpIUPn/NQ7Y9E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl
rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Jul 2026 14:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:14:98:6d:19:1b:ac:90:46:c2:32:ba:86:e1:0b:36:18:3f:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88
Validity
Not Before: Jul 8 13:16:55 2026 GMT
Not After : Jul 9 14:37:55 2026 GMT
Subject: CN=8C497C7CC44887BD119B94FF4CD176DD4A0A5C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:76:43:7c:e8:19:90:1e:83:ad:2c:b8:c3:
c1:b3:1e:cf:77:1e:ea:da:56:cb:43:30:40:6c:cd:
5d:69:5b:b4:60:a9:27:ea:ff:9e:67:42:e1:04:67:
a6:d6:2c:31:23:98:bc:5d:b5:73:cf:80:f5:af:6b:
52:23:8d:23:02:a1:e1:d4:7a:bd:a8:51:2e:64:dd:
f6:93:16:2c:c0:50:05:bb:f6:29:44:91:77:20:7a:
3b:9b:09:f4:bb:2a:ec:0d:03:03:2a:07:c7:67:fd:
d4:8e:b9:75:ca:15:e8:15:7f:29:a9:7a:0d:d1:2c:
44:bd:e5:f9:1f:d5:41:7d:f7:51:4e:18:ba:9d:1e:
63:89:6c:ec:3e:a1:db:59:c2:41:45:ce:fb:a2:9b:
d2:cb:91:3d:51:0d:ce:1b:13:16:3c:2a:77:a3:7f:
82:a5:1d:11:ce:f8:eb:46:33:e1:5c:83:83:d3:25:
bc:2d:81:eb:84:36:ca:54:26:2d:a5:82:40:1a:76:
56:76:42:87:79:34:a6:ff:75:80:bc:85:ea:d9:d5:
1d:ce:8a:1f:84:da:48:22:9a:54:5b:a6:5e:51:41:
42:27:e4:14:bb:18:92:2a:95:0c:1a:e2:45:02:1c:
67:d4:28:bf:76:9d:f3:ed:ca:37:53:bf:ee:18:59:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:7C:7C:C4:48:87:BD:11:9B:94:FF:4C:D1:76:DD:4A:0A:5C:75
X509v3 Authority Key Identifier:
keyid:42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:20:82:6d:e3:ed:96:27:94:2f:f5:f5:b5:bd:85:5e:d0:
d0:86:d2:80:48:a8:28:3c:dd:f3:a4:7b:cb:a8:f9:55:87:2d:
9c:bc:30:a3:6f:8c:17:e3:02:76:87:f9:b6:73:7f:e0:d8:58:
78:90:48:44:9c:21:81:04:f4:b9:6a:f6:23:63:ef:f8:c8:82:
9b:43:94:a1:81:b6:0e:35:3d:a9:ac:09:e1:a7:24:b3:9f:e2:
8b:a3:47:a6:5f:62:91:7c:52:a7:c5:8e:2a:fb:98:07:ba:f4:
ef:fb:74:4c:3c:20:bf:74:7d:c5:bc:cf:26:41:fa:07:1d:ee:
41:01:26:92:fb:b9:86:f9:fc:be:91:05:3a:09:7a:23:4f:16:
c9:3f:3f:39:2e:37:9b:29:8c:ae:dc:6e:34:b9:11:c7:fa:72:
04:21:96:15:53:dc:88:31:3d:c6:35:74:e3:30:46:ff:7b:1a:
83:9c:33:7b:4b:01:36:6b:51:9a:cc:04:b2:d3:dd:a2:be:ef:
81:a8:e1:26:c3:13:a7:2e:b3:42:5f:46:4c:35:bd:b4:2f:f8:
24:58:d2:5d:eb:72:fc:2f:a8:6f:b8:d2:53:36:b3:a6:9f:7d:
29:ee:cd:ea:8b:1b:c9:99:80:b2:d5:65:9e:63:e2:ca:f9:88:
8c:d2:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:18:29 2026 by rpki-client