
$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json)
Hash identifier: zMbeNkPIcVr+bljg/11ywhQclwytTIgTkm/ivFHpmHE=
Subject key identifier: 6D:F1:E3:8C:E7:1D:45:6B:9C:67:64:3A:EB:DF:7E:7A:0D:90:0C:34
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial: 742C8AD01694405CB97B0C14799A7E3DAB50ADDF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
Manifest number: 042A
Signing time: Sat 13 Jun 2026 09:12:55 +0000
Manifest this update: Sat 13 Jun 2026 09:07:55 +0000
Manifest next update: Sun 14 Jun 2026 11:52:55 +0000
Files and hashes: 1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: 3hYoya6ANFaKoW535qdPR6jcR6oCfDWHaBQds8AayKg=)
2: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: i8+BQeejxdYGbOOOiybVGQ8Qna0h5Ij7Tx/PHa1VbYo=)
3: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: 7lCIMu9oEv2kVPXwQp1GssQpm/Az1KqVAOJgt+01WZ0=)
4: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: BScz2I5iQT+7rCvWP0qw7jFvdiEXKt6y7lg7OZfYlKo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 11:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2c:8a:d0:16:94:40:5c:b9:7b:0c:14:79:9a:7e:3d:ab:50:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Validity
Not Before: Jun 13 09:07:55 2026 GMT
Not After : Jun 14 11:52:55 2026 GMT
Subject: CN=6DF1E38CE71D456B9C67643AEBDF7E7A0D900C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:13:aa:7f:a9:e2:a8:d9:03:7f:92:5b:3d:
5c:8d:ad:38:97:29:e6:59:8a:ef:06:bd:fe:55:d6:
e8:17:92:66:e0:b9:eb:45:75:0b:00:81:88:63:59:
f1:95:0c:79:6f:db:c8:63:5d:12:01:65:ae:b4:5c:
f5:95:a5:92:bf:2a:43:5d:89:2c:36:fe:46:04:10:
f4:40:74:ba:93:6d:c3:a7:90:bc:a2:98:7e:7f:4c:
7e:0f:26:8a:80:59:9b:ec:b5:fa:ad:a2:1a:89:f7:
fb:c9:8e:4b:24:eb:0e:8b:fd:2d:44:84:93:ea:9c:
5f:cc:c7:0d:7b:75:cc:d7:c2:06:14:77:2b:02:fa:
d6:d5:8e:b1:04:b0:d9:3f:bf:79:3b:ad:7b:da:f9:
ad:60:4f:62:77:ac:61:14:4b:df:18:21:05:e1:86:
7d:88:e7:a4:a2:df:39:48:eb:39:50:1a:b9:4b:08:
86:08:64:c0:13:53:fb:38:be:0b:67:97:ab:17:3f:
74:a4:da:9f:75:16:53:d3:1c:71:c1:4c:8e:c1:74:
66:c0:19:d7:b5:d9:98:76:59:4c:43:8b:f2:45:33:
4f:98:4a:f2:0d:0b:74:6f:4e:a4:89:5d:12:2b:41:
de:7a:9c:73:f4:89:c0:e8:43:68:14:48:85:76:ca:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:E3:8C:E7:1D:45:6B:9C:67:64:3A:EB:DF:7E:7A:0D:90:0C:34
X509v3 Authority Key Identifier:
keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:6b:f2:66:34:b1:f1:96:b2:55:bb:9e:04:23:ef:80:c0:
c3:88:6c:bf:e4:95:76:81:1b:87:f9:08:c5:69:33:9d:a6:b1:
09:01:b2:3c:39:c4:67:e0:31:81:fb:63:6f:81:94:e8:d1:93:
00:f9:0b:20:38:a5:76:2a:c9:fa:aa:23:a1:b2:02:61:9d:83:
4f:93:03:9f:b8:21:0a:a6:f3:b8:34:15:f1:4b:99:82:ce:63:
03:ab:32:a0:01:13:b5:80:be:50:19:58:58:1a:46:a2:08:be:
13:42:e4:41:9b:76:60:3f:99:f3:9b:f3:d9:ec:e7:56:da:56:
f3:47:7e:57:af:47:00:8c:9c:87:74:65:fd:48:87:79:9e:1f:
dd:12:1b:a3:4c:f0:76:fd:28:4d:c2:c3:cb:68:f5:34:4b:bf:
84:da:6a:24:64:e0:89:3d:31:34:b9:71:9e:f4:29:07:da:62:
4a:14:b2:e4:2d:76:89:b3:6e:ba:51:53:ca:0f:46:1f:ca:fb:
1a:d4:db:78:ce:30:ca:8a:d3:dc:6b:56:22:07:57:16:d0:81:
6f:85:4c:98:7f:46:b4:f1:57:65:46:61:96:ce:fd:8e:14:76:
6a:2f:a8:50:9d:aa:ac:a2:56:58:79:80:b9:85:42:80:b1:9e:
d7:3a:30:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdCyK0BaUQFy5ewwUeZp+PatQrd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4
QzAwMjhGQjAeFw0yNjA2MTMwOTA3NTVaFw0yNjA2MTQxMTUyNTVaMDMxMTAvBgNV
BAMTKDZERjFFMzhDRTcxRDQ1NkI5QzY3NjQzQUVCREY3RTdBMEQ5MDBDMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpNhOqf6niqNkDf5JbPVyNrTiX
KeZZiu8Gvf5V1ugXkmbguetFdQsAgYhjWfGVDHlv28hjXRIBZa60XPWVpZK/KkNd
iSw2/kYEEPRAdLqTbcOnkLyimH5/TH4PJoqAWZvstfqtohqJ9/vJjksk6w6L/S1E
hJPqnF/Mxw17dczXwgYUdysC+tbVjrEEsNk/v3k7rXva+a1gT2J3rGEUS98YIQXh
hn2I56Si3zlI6zlQGrlLCIYIZMATU/s4vgtnl6sXP3Sk2p91FlPTHHHBTI7BdGbA
Gde12Zh2WUxDi/JFM0+YSvINC3RvTqSJXRIrQd56nHP0icDoQ2gUSIV2ynsnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbfHjjOcdRWucZ2Q6699+eg2QDDQwHwYDVR0j
BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy
aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB
RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y
QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd6Br8mY0sfGWslW7ngQj74DAw4hsv+SVdoEbh/kIxWkznaaxCQGyPDnEZ+Ax
gftjb4GU6NGTAPkLIDildirJ+qojobICYZ2DT5MDn7ghCqbzuDQV8UuZgs5jA6sy
oAETtYC+UBlYWBpGogi+E0LkQZt2YD+Z85vz2eznVtpW80d+V69HAIych3Rl/UiH
eZ4f3RIbo0zwdv0oTcLDy2j1NEu/hNpqJGTgiT0xNLlxnvQpB9piShSy5C12ibNu
ulFTyg9GH8r7GtTbeM4wyorT3GtWIgdXFtCBb4VMmH9GtPFXZUZhls79jhR2ai+o
UJ2qrKJWWHmAuYVCgLGe1zowOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:29:10 2026 by rpki-client