
$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
File: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft (raw, json)
Hash identifier: JIEA072sg7J/uKxHwsy9UwEK9aloZqoAtpkQ2mtJ5IY=
Subject key identifier: AF:E8:4C:35:27:82:3C:DC:3B:5A:23:0A:36:03:E1:5E:DA:3C:49:51
Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D
Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D
Certificate serial: 07B563F7118E02033ECA424FC3D319C321CD53F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
Manifest number: 48
Signing time: Mon 02 Mar 2026 09:32:35 +0000
Manifest this update: Mon 02 Mar 2026 09:27:35 +0000
Manifest next update: Tue 03 Mar 2026 12:39:35 +0000
Files and hashes: 1: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl (hash: F/f6mrETnh7LvUYl2A+g0TUoFgEUJS2GNPPMU4m/Pa0=)
2: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: EXEgFqBvttmF5ktT401dLdibdAL47+eANSkTz2upTnU=)
3: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl
rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b5:63:f7:11:8e:02:03:3e:ca:42:4f:c3:d3:19:c3:21:cd:53:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D
Validity
Not Before: Mar 2 09:27:35 2026 GMT
Not After : Mar 3 12:39:35 2026 GMT
Subject: CN=AFE84C3527823CDC3B5A230A3603E15EDA3C4951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:82:77:88:9b:1c:27:68:97:b8:38:3a:96:
70:d0:74:d0:b3:39:36:4a:66:82:f9:9e:fe:fa:11:
03:85:18:69:df:cf:3e:b0:20:95:ee:65:69:4a:10:
37:85:91:c4:79:64:8a:3b:32:2d:a3:f9:5a:78:1e:
f9:c5:d9:35:07:8b:ba:73:5c:46:b6:54:8f:24:e6:
21:3b:d9:41:0c:b0:38:86:c3:75:d8:28:29:27:ac:
15:af:ea:57:cb:4c:c3:af:04:2c:fa:1a:f8:2b:91:
5a:9a:80:59:66:ab:ac:db:3a:ac:5e:7c:67:af:ab:
63:63:75:61:00:ba:2b:d6:31:67:bf:50:24:20:68:
9b:34:60:46:fd:c2:c3:d1:6b:43:ee:d1:8a:c5:58:
0a:7a:8e:16:00:6f:b4:b7:57:a2:e6:53:b2:6f:cc:
b5:45:92:b7:8a:6d:23:28:8f:75:b1:3c:13:23:25:
98:57:3f:6f:21:6a:ff:2b:0a:24:6a:93:48:b5:8c:
f5:e8:29:79:08:3f:9f:14:ed:b1:58:3f:2a:f6:91:
06:25:60:84:5e:03:f2:bb:4a:a3:74:00:d0:79:df:
4e:30:f5:6f:17:b8:b0:c9:05:9a:c2:ed:06:d6:8f:
48:36:e9:9d:e6:01:86:f7:c0:c0:4d:06:1a:00:70:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:4C:35:27:82:3C:DC:3B:5A:23:0A:36:03:E1:5E:DA:3C:49:51
X509v3 Authority Key Identifier:
keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:05:d9:c4:e4:59:e7:f7:af:ff:c1:00:d9:1b:95:16:e2:55:
bf:b5:20:16:56:05:b7:54:a7:72:ae:c7:3b:19:85:69:3e:9e:
13:c5:c2:19:29:7d:b1:0b:e7:e6:f5:ef:8e:d1:3a:ea:e9:82:
49:16:bf:ed:90:9f:bc:7b:f6:5f:d3:5d:17:af:3a:d4:2f:17:
a5:6f:9d:82:7e:d7:71:0b:82:fe:f4:b4:22:27:c3:fb:5a:ae:
e4:e5:6f:96:ef:fa:1e:7b:41:96:dd:22:89:43:e2:ac:47:57:
74:ec:cc:2c:40:f4:4d:37:4f:b0:e8:24:b8:03:2c:ba:4c:65:
4f:29:52:c6:33:5f:8d:64:d8:6f:27:0b:9c:3d:9b:67:fe:1e:
a7:3a:7c:2c:fb:dc:bb:aa:91:74:7b:d3:26:d2:6c:d2:58:10:
d7:2c:69:58:51:f8:94:73:96:37:a0:1f:71:38:62:b6:06:09:
49:6a:8e:61:ce:3c:22:9c:39:5e:fb:b2:4b:f4:57:83:c1:01:
87:29:59:77:89:a6:45:a9:70:05:c1:04:96:79:bc:fd:e8:4f:
48:73:f4:7f:2f:58:a6:33:18:72:3b:35:48:11:82:cf:91:cd:
a6:d7:9d:56:bc:d3:2d:8b:c1:96:59:5f:08:f4:af:b3:98:39:
5d:57:d5:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUB7Vj9xGOAgM+ykJPw9MZwyHNU/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI1RTcyOEFFMUZBRTg1QTVENkQxN0NDNTNENjhDREUy
MUZBNjM5RDAeFw0yNjAzMDIwOTI3MzVaFw0yNjAzMDMxMjM5MzVaMDMxMTAvBgNV
BAMTKEFGRTg0QzM1Mjc4MjNDREMzQjVBMjMwQTM2MDNFMTVFREEzQzQ5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotYJ3iJscJ2iXuDg6lnDQdNCz
OTZKZoL5nv76EQOFGGnfzz6wIJXuZWlKEDeFkcR5ZIo7Mi2j+Vp4HvnF2TUHi7pz
XEa2VI8k5iE72UEMsDiGw3XYKCknrBWv6lfLTMOvBCz6GvgrkVqagFlmq6zbOqxe
fGevq2NjdWEAuivWMWe/UCQgaJs0YEb9wsPRa0Pu0YrFWAp6jhYAb7S3V6LmU7Jv
zLVFkreKbSMoj3WxPBMjJZhXP28hav8rCiRqk0i1jPXoKXkIP58U7bFYPyr2kQYl
YIReA/K7SqN0ANB5304w9W8XuLDJBZrC7QbWj0g26Z3mAYb3wMBNBhoAcOLLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUr+hMNSeCPNw7WiMKNgPhXto8SVEwHwYDVR0j
BBgwFoAUQl5yiuH66FpdbRfMU9aM3iH6Y50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL
MUovMC80MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNUU3MjhBRTFGQUU4NUE1
RDZEMTdDQzUzRDY4Q0RFMjFGQTYzOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC80
MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATgXZxORZ5/ev/8EA2RuVFuJVv7UgFlYFt1Sncq7HOxmFaT6eE8XCGSl9sQvn
5vXvjtE66umCSRa/7ZCfvHv2X9NdF6861C8XpW+dgn7XcQuC/vS0IifD+1qu5OVv
lu/6HntBlt0iiUPirEdXdOzMLED0TTdPsOgkuAMsukxlTylSxjNfjWTYbycLnD2b
Z/4epzp8LPvcu6qRdHvTJtJs0lgQ1yxpWFH4lHOWN6AfcThitgYJSWqOYc48Ipw5
XvuyS/RXg8EBhylZd4mmRalwBcEElnm8/ehPSHP0fy9YpjMYcjs1SBGCz5HNpted
VrzTLYvBlllfCPSvs5g5XVfVUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:12:18 2026 by rpki-client