
$ rpki-client -vvvf rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft
File: 42CF8AF950150224F27B677F4A1AD4BA306A610F.mft (raw, json)
Hash identifier: Ybh9qlCvtK5ELRp0TKfE9hnaNLSv6Bym/+7/tyyg64o=
Subject key identifier: FE:50:B6:9D:74:9B:D8:4F:98:B0:0B:90:CE:57:AD:60:1B:D1:54:89
Authority key identifier: 42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F
Certificate issuer: /CN=42CF8AF950150224F27B677F4A1AD4BA306A610F
Certificate serial: 210C2EC2BFDFA63C4B0E3B93CC53A1F8F195FA3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft
Manifest number: BB
Signing time: Sun 23 Aug 2026 09:41:27 +0000
Manifest this update: Sun 23 Aug 2026 09:36:27 +0000
Manifest next update: Mon 24 Aug 2026 13:31:27 +0000
Files and hashes: 1: 42CF8AF950150224F27B677F4A1AD4BA306A610F.crl (hash: VezcAu8GQxnuy20TJwP+ZOriQKnvMe8He0mYTK8NT94=)
2: 3230312e33332e38342e302f32332d3234203d3e20323734333431.roa (hash: 95qIQvYnJfjKbrID4RzZJKv3odmiEq00ghYPv5iZw7k=)
3: 323830343a393638383a3a2f33322d3332203d3e20323734333431.roa (hash: UdS0smRxzRrN/o++xx+mb89JXMJY5LSywGnNxwY9uM4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl
rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 13:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0c:2e:c2:bf:df:a6:3c:4b:0e:3b:93:cc:53:a1:f8:f1:95:fa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CF8AF950150224F27B677F4A1AD4BA306A610F
Validity
Not Before: Aug 23 09:36:27 2026 GMT
Not After : Aug 24 13:31:27 2026 GMT
Subject: CN=FE50B69D749BD84F98B00B90CE57AD601BD15489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:a9:bb:6b:b4:2f:c7:45:fd:17:a3:d7:4d:
c3:fb:a1:e7:de:5b:72:7f:24:15:73:8d:82:e0:0e:
16:32:47:02:55:f4:a4:ed:e5:70:f0:29:be:50:62:
40:ba:fb:c5:54:ef:81:b8:3a:16:42:aa:c3:3d:06:
8d:f8:a2:32:e4:44:ac:57:f2:e5:cf:24:10:27:07:
31:c0:6a:fc:6b:38:97:ef:a6:da:28:d1:9b:89:06:
aa:ec:f3:95:f9:cb:3c:d9:a9:e8:11:ad:8e:a1:29:
19:03:1a:f2:9e:05:84:77:38:b5:b4:b4:c2:94:6d:
7c:65:54:70:f3:ec:b0:0a:2e:fa:35:6f:59:01:90:
e1:c1:80:24:3a:0b:74:f5:07:a9:1c:86:0d:8f:47:
bd:d7:f6:f6:0e:71:54:56:cf:53:d4:5f:26:25:21:
3c:3e:62:cf:ea:2c:7e:bc:f9:8a:aa:23:e4:4c:8c:
af:4a:49:27:a7:34:e6:77:02:61:76:26:6c:85:bb:
f1:fe:33:5c:df:6e:2f:e8:87:2f:07:37:a1:39:06:
08:ef:a5:3c:5a:30:cf:f7:c6:84:17:09:c2:9f:d8:
d2:02:ff:61:77:f1:29:bc:a4:c4:60:5b:53:29:5e:
a2:b8:c6:01:4f:67:23:92:f1:b1:09:57:93:dc:c1:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:B6:9D:74:9B:D8:4F:98:B0:0B:90:CE:57:AD:60:1B:D1:54:89
X509v3 Authority Key Identifier:
keyid:42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:dc:a2:b2:36:dd:ad:11:53:18:f3:89:14:0a:ae:1d:60:26:
93:a9:df:b4:16:98:23:c8:1b:de:6a:58:8f:84:5a:d6:7f:04:
5c:e9:a7:28:92:52:bb:03:9f:94:f3:25:86:81:eb:ed:4f:e1:
7c:a1:01:fb:6e:29:a0:99:ae:1a:fb:03:b3:27:28:4c:b0:86:
09:6a:16:5a:55:7e:ee:4e:a3:81:e5:1f:d1:4c:ee:82:68:a3:
54:ea:f5:be:30:33:0b:b9:ea:39:f6:d1:f9:b6:da:ae:c5:cc:
e4:bc:db:93:b6:5f:4d:9e:e1:3e:5d:e4:ba:71:99:12:d0:ca:
f1:9a:e0:9a:00:59:d8:4c:ee:40:82:f3:a4:f3:c4:b1:bc:d8:
75:ae:94:38:fe:6e:68:12:c4:a1:02:03:7b:e4:47:7a:2a:14:
f3:89:70:44:6b:08:7d:b0:82:00:44:68:19:60:49:2f:e1:d2:
ee:8e:b4:4f:cb:58:d2:fe:6f:ae:c6:eb:37:53:94:db:6f:c7:
6f:57:40:fd:85:0a:f9:45:a4:94:36:db:12:3d:86:39:5f:4a:
1c:b1:2b:a6:0e:35:84:73:09:f9:cc:d5:51:98:0d:b7:38:0b:
66:38:87:48:aa:88:ef:45:43:69:ed:76:8f:2a:83:de:7e:fc:
cf:3c:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:23:28 2026 by rpki-client