
$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
File: 42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json)
Hash identifier: aoJ+n3kUT9cUZkTFWFl/Ke6Hsf5xlkyvdfJT5RzfIu8=
Subject key identifier: 72:BB:BB:DF:1F:B1:6C:F0:CC:9C:AC:54:42:EF:A4:28:85:70:17:3A
Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
Certificate issuer: /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Certificate serial: 02D220DC3139AA2B16081892E4609AD60A6E0DAE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
Manifest number: 8A
Signing time: Sun 22 Feb 2026 16:07:56 +0000
Manifest this update: Sun 22 Feb 2026 16:02:56 +0000
Manifest next update: Mon 23 Feb 2026 18:37:56 +0000
Files and hashes: 1: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=)
2: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=)
3: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: GAoQYm8Sh7Eapdit6Lp+AQDUR2HV0/1jFJ1EZoE0dlI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 23 Feb 2026 18:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d2:20:dc:31:39:aa:2b:16:08:18:92:e4:60:9a:d6:0a:6e:0d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Validity
Not Before: Feb 22 16:02:56 2026 GMT
Not After : Feb 23 18:37:56 2026 GMT
Subject: CN=72BBBBDF1FB16CF0CC9CAC5442EFA4288570173A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:c3:c0:7e:b2:04:e5:7d:80:9f:89:cf:45:
1a:3e:b1:b3:b7:9f:b4:dc:63:89:4d:62:1b:77:a5:
54:b7:ee:7e:e3:fd:9b:47:d8:8d:82:bc:fb:4e:e8:
24:aa:b5:6a:cb:74:3d:f3:c0:0a:c2:8a:8d:d2:eb:
5c:28:63:57:ca:72:35:9c:3f:55:7c:42:43:8a:7b:
f0:31:02:b3:42:a0:71:36:94:7c:c4:d9:0c:3b:22:
dc:85:6b:b5:cb:be:00:bf:6e:4a:58:d3:d5:cc:87:
bf:91:1a:64:0b:6e:15:71:55:a3:7b:b7:53:15:58:
a2:d3:31:5e:2c:75:88:41:02:0f:38:7f:53:de:91:
26:1d:04:92:68:d1:2b:21:0b:a1:6f:6c:f7:36:a1:
b5:0f:fd:a5:5f:90:9d:2d:d8:80:cb:8b:d0:83:70:
ac:05:0a:1a:78:70:a6:ac:02:b1:d8:56:ac:de:00:
db:b5:d0:8c:ff:ba:36:87:3c:1a:1f:f2:f3:96:04:
20:68:32:19:1a:d9:b2:5d:e3:8c:16:f5:85:fe:f5:
32:33:92:1b:f8:37:04:aa:f0:15:94:28:b9:30:51:
f9:66:9c:84:db:0f:33:1b:70:19:0a:5f:89:f5:8a:
dd:22:fe:b6:f3:0b:82:09:1e:9f:5f:b3:bd:2f:16:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:BB:DF:1F:B1:6C:F0:CC:9C:AC:54:42:EF:A4:28:85:70:17:3A
X509v3 Authority Key Identifier:
keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1b:35:69:71:c5:8b:c8:f8:8c:84:62:0a:bf:9d:fd:f3:dd:
e1:a1:7c:0c:52:50:28:a9:6d:fe:3f:07:d8:dd:f0:38:80:bb:
4d:94:df:e7:06:a8:8f:10:90:0d:b0:e1:8c:32:1e:bb:91:4f:
d0:67:6a:49:93:04:ec:65:e1:30:a7:cc:2c:bd:b3:ef:93:ad:
27:69:2f:23:39:df:a1:d4:bf:94:b0:af:42:0c:38:e7:e7:f8:
6a:e1:43:87:43:f9:c4:28:e7:65:7f:35:75:d9:d8:5d:ff:9a:
8b:e1:13:30:16:76:60:2a:c4:18:69:4f:4e:bb:4c:cf:cb:0b:
87:e4:72:9f:a5:28:f4:f6:a6:9f:46:b3:89:e8:a9:12:73:02:
dc:b5:9f:e6:b6:3e:da:3c:91:7c:30:dd:4f:5f:a9:8e:52:a9:
4f:6f:13:ca:46:60:3a:85:c9:7a:be:f6:cf:a5:e1:63:9e:35:
88:e4:08:eb:a9:86:9c:8d:b0:5d:77:00:d8:ce:c7:b2:e0:f0:
b8:5a:c0:60:6b:58:d0:cf:b1:e3:ed:55:ef:a2:ed:ba:07:88:
a9:a7:c9:6f:a8:cb:a7:f1:19:4e:e3:25:8d:e5:c4:6e:95:8f:
ae:cb:a4:dd:99:9a:61:b6:1e:2a:6f:6d:f1:27:ef:31:b8:d3:
46:64:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:34:51 2026 by rpki-client