
$ rpki-client -vvvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
File: 42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json)
Hash identifier: yT8lz8qyCdxKhvAWnxUMr9kulpI1UqoWdu1bPMO8YcA=
Subject key identifier: 46:80:85:F8:64:8D:2C:7C:BB:4B:BC:0E:9B:FC:18:E6:82:59:3D:BA
Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
Certificate issuer: /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Certificate serial: 4989C4233864BDFF8028C046B06F89749FD2441C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
Manifest number: 01C2
Signing time: Wed 14 Oct 2026 16:37:59 +0000
Manifest this update: Wed 14 Oct 2026 16:32:59 +0000
Manifest next update: Thu 15 Oct 2026 17:11:59 +0000
Files and hashes: 1: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=)
2: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: JZqpra96mmClFquBb9hTaXtHnoAlMKBFfVOCoWkYO3s=)
3: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 15 Oct 2026 17:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:89:c4:23:38:64:bd:ff:80:28:c0:46:b0:6f:89:74:9f:d2:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Validity
Not Before: Oct 14 16:32:59 2026 GMT
Not After : Oct 15 17:11:59 2026 GMT
Subject: CN=468085F8648D2C7CBB4BBC0E9BFC18E682593DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:d0:f1:c6:05:2c:2e:92:26:23:68:f1:f9:
71:fb:bb:14:fa:d2:66:5b:d8:28:1a:15:49:1f:6c:
e1:33:37:f4:67:47:b1:e8:32:56:1f:dc:4f:1e:83:
a6:cb:0b:68:36:5a:14:e3:69:64:bd:6e:e7:e4:f5:
ad:14:07:f7:f0:1e:ad:90:8b:85:17:46:11:70:3a:
8c:6d:83:f9:8d:fa:cc:7e:b6:81:45:2c:4b:84:d5:
70:27:47:6e:3d:15:04:36:f9:13:05:ad:a0:2f:29:
3f:82:26:8a:56:32:43:10:dd:40:e3:2a:96:7e:25:
06:cd:c7:2b:ae:12:d3:c7:7f:75:39:2e:52:80:90:
1d:81:c0:57:51:d1:66:d2:7e:69:38:50:2c:ad:db:
10:05:5c:3a:52:fe:63:67:24:9b:54:ef:27:0a:c9:
f0:f3:54:7f:eb:af:d0:8d:63:86:34:8f:d2:c7:71:
d2:2f:21:61:0e:e3:13:6f:c9:c1:37:b5:2a:0c:8d:
f5:b0:66:65:02:c3:2e:a0:89:0d:e7:c9:81:55:32:
fb:9a:99:15:ee:37:a4:8e:7e:74:af:c2:86:5a:d1:
0e:8f:02:9e:da:47:38:02:b9:4a:c0:78:b0:43:d6:
22:3e:be:a0:53:e9:66:c5:de:cd:97:60:26:50:06:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:85:F8:64:8D:2C:7C:BB:4B:BC:0E:9B:FC:18:E6:82:59:3D:BA
X509v3 Authority Key Identifier:
keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:da:ec:62:bd:a8:bf:07:da:bd:2e:4c:57:c1:38:7f:a2:5e:
69:1d:93:08:f5:13:c3:70:bd:d1:d0:4c:cc:5c:23:01:b0:fc:
5b:f7:45:d5:d1:ee:90:6a:7d:74:e2:04:2d:d5:95:bf:a3:e7:
34:fd:65:99:2e:6e:c3:7d:a3:a3:f5:09:31:18:1c:fe:d1:0a:
0b:45:2e:52:cb:8b:cc:4e:4d:c6:68:36:4f:af:50:1a:27:db:
ad:51:5d:df:b2:86:b9:09:c8:31:2e:91:b0:de:af:93:e7:8d:
54:79:cf:38:61:04:50:b4:9c:42:87:1f:42:df:aa:db:f2:13:
5c:40:a2:c3:3e:c5:13:c6:8c:6f:28:3a:f4:0d:ab:b0:c9:fb:
87:d4:85:bc:75:79:73:88:2d:f0:91:a4:06:db:6f:44:f7:71:
10:f8:bd:5f:a8:2c:d2:ac:38:d4:cf:81:b1:66:6e:3b:89:35:
35:30:d5:53:97:52:cf:1f:24:d8:ef:4a:24:d5:83:85:e7:f0:
e5:a9:a0:b4:79:08:53:c8:d8:7d:68:3c:dd:a9:46:dc:9f:6f:
d3:03:e7:f4:7b:29:39:2b:92:a1:f7:9e:bc:1a:e6:91:d4:f4:
07:65:4b:09:c9:09:de:38:a8:a1:5a:db:f7:59:67:5c:17:b9:
1e:08:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:13:27 2026 by rpki-client