
$ rpki-client -vvvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
File: 2C425257AE7B63529EB88108AC7DEA60648B43E5.mft (raw, json)
Hash identifier: oXHGDGDcUTvLO3Q5yIJFW1/yd3mX5iBNhTM2KiX1rmA=
Subject key identifier: 43:4D:DC:F9:06:BB:B0:D9:67:2B:A3:91:F2:D5:15:C4:62:26:58:BF
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Certificate issuer: /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial: 681A98B63F2701FC6751FDDC2168343CBC04E674
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
Manifest number: 0514
Signing time: Mon 24 Aug 2026 11:58:39 +0000
Manifest this update: Mon 24 Aug 2026 11:53:39 +0000
Manifest next update: Tue 25 Aug 2026 14:43:39 +0000
Files and hashes: 1: 323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (hash: N4VGJmgCa+nRIRw1veRc/4Q5MScpjZJXFiygzSDeI6w=)
2: 323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (hash: 9VzaQ7vDmNrMa4deko9XK8+Pr/jUWjlpX8PpBjNLnak=)
3: 3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (hash: klDBb+/bFR7ZmSokue+sj4oDGi4pIXmffEq4mhcUzV0=)
4: 323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (hash: kg4D3OUQl7VyP0EOT1sqrFor/X1vPyfsQh0euNYjK5o=)
5: 3138312e3233322e3233302e302f32332d3233203d3e20323732353439.roa (hash: wwa6fzPN5lamHJSujdCR7c5+Dz0yZ5YJCRcnr95Io7I=)
6: 2C425257AE7B63529EB88108AC7DEA60648B43E5.crl (hash: EJA/98RpWF4nzBTqjL3OVcNHluEIVeJleGtbhPR8Pq0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 14:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:98:b6:3f:27:01:fc:67:51:fd:dc:21:68:34:3c:bc:04:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Validity
Not Before: Aug 24 11:53:39 2026 GMT
Not After : Aug 25 14:43:39 2026 GMT
Subject: CN=434DDCF906BBB0D9672BA391F2D515C4622658BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:28:71:67:83:11:37:de:61:2f:9c:6a:3c:
fe:6d:3e:43:b0:41:39:1f:8b:ef:6f:5f:8d:9c:f5:
c0:f1:34:1d:7f:f9:d8:65:53:1f:5e:b0:47:f6:8d:
0f:66:ec:ac:7f:18:fa:b2:f9:63:53:41:ee:ea:7a:
e2:b5:02:be:bf:37:a4:ba:17:f7:f6:47:05:d2:b0:
e2:b3:e9:70:2b:27:b2:0d:b0:e4:aa:87:97:96:ed:
ce:de:b3:62:5b:a0:5d:e9:7a:fa:4c:9b:1a:ec:5d:
e5:b7:27:0e:dd:51:bb:ac:e8:14:81:8b:b8:a7:e7:
8b:c1:75:aa:06:3c:65:c0:19:ce:15:ad:e5:09:83:
f8:15:7d:e7:a6:be:c7:e6:ac:ab:08:74:c9:22:61:
40:16:f6:a3:57:86:5c:9a:41:08:28:b4:26:52:ee:
18:cb:69:e7:c4:f2:19:90:07:30:78:bc:c1:88:75:
af:98:7f:24:c7:2f:77:af:09:22:7c:80:dd:c6:3c:
67:36:8c:87:c1:c5:cd:73:cf:1a:b2:5c:0d:52:9b:
94:09:bc:2e:43:fc:a0:39:90:ad:aa:a5:b1:f9:51:
19:b0:8a:f2:a1:a8:27:9c:f1:b5:ce:a8:19:1d:fd:
3f:e7:7e:52:08:2b:ed:2d:d5:bc:f3:2e:4d:06:60:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:DC:F9:06:BB:B0:D9:67:2B:A3:91:F2:D5:15:C4:62:26:58:BF
X509v3 Authority Key Identifier:
keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0b:df:e7:e3:ee:b5:44:d0:49:e3:3a:0c:d6:60:a1:d1:f7:
25:3c:fe:5b:4f:88:b9:06:e2:dc:53:40:85:41:0a:9e:ab:80:
ba:d9:6f:93:63:08:d5:8f:c7:8f:1e:b2:81:e5:69:48:09:43:
49:53:02:b4:30:37:b3:42:d8:f5:18:70:59:ab:c2:5f:0d:85:
27:ee:ee:25:6c:a9:f9:e2:43:b2:fb:e7:fa:b5:a7:c9:0e:ac:
dc:cb:3a:24:32:40:95:4a:71:97:d5:68:1e:a9:95:d0:72:e4:
47:3c:df:37:da:c5:23:92:f9:da:1f:87:dc:88:48:7e:d5:3a:
18:63:a5:33:71:c4:16:3e:21:4a:45:8d:9d:2b:0a:e6:52:95:
62:e2:86:ab:d8:53:48:05:0c:58:25:61:a9:ba:f8:3c:d6:9b:
81:63:28:ba:3c:50:b8:f4:a1:e0:ca:53:70:b5:b6:3d:cb:a8:
95:db:b9:93:c1:34:a6:fa:39:32:65:48:72:47:70:ba:1c:36:
60:3f:5e:d8:d3:1f:8f:f6:29:2f:78:de:92:40:99:1c:3b:68:
c2:87:54:f3:35:a0:44:50:2f:c2:c8:40:df:7a:86:95:2a:30:
6b:c8:08:d2:e3:94:9a:f1:bd:94:a2:ee:7a:79:10:3b:81:a3:
56:e6:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 00:08:03 2026 by rpki-client