
$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
File: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft (raw, json)
Hash identifier: xJ8w66Ch3VsXmiTLtRvd3B7sHW+Rq6jNLHnbGp+PkzE=
Subject key identifier: 9A:1E:5D:63:DB:2F:BB:77:E0:16:69:4C:3A:51:28:CB:F2:3E:2C:EA
Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D
Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D
Certificate serial: 640E90EC4CB2F848FF6CAEB838F3EB854B3BB280
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
Manifest number: D2
Signing time: Sat 13 Jun 2026 08:53:06 +0000
Manifest this update: Sat 13 Jun 2026 08:48:06 +0000
Manifest next update: Sun 14 Jun 2026 11:12:06 +0000
Files and hashes: 1: AS267077.asa (hash: iIKJNdlKgT2Ijci7gMiJk/XJdetXV8uwuYtrTudDdeM=)
2: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl (hash: WsDOYqhV3biV0Q6Jg5jzMGBNw6jIS2zZ1lc5V5eSpAM=)
3: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA=)
4: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: EXEgFqBvttmF5ktT401dLdibdAL47+eANSkTz2upTnU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl
rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 14 Jun 2026 11:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0e:90:ec:4c:b2:f8:48:ff:6c:ae:b8:38:f3:eb:85:4b:3b:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D
Validity
Not Before: Jun 13 08:48:06 2026 GMT
Not After : Jun 14 11:12:06 2026 GMT
Subject: CN=9A1E5D63DB2FBB77E016694C3A5128CBF23E2CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:57:9a:42:1a:2b:81:8c:cf:1f:af:98:1a:c6:
f5:7f:7d:7d:79:24:9b:d5:9c:29:06:e0:a5:21:ea:
c5:39:30:58:83:5e:a8:54:ca:56:f1:be:8c:be:74:
39:e9:ad:30:76:e5:61:db:8b:b0:c2:23:60:c0:04:
17:12:63:23:44:08:88:0c:e5:d3:45:83:d3:b2:70:
99:44:da:b6:65:15:ad:f7:c3:16:f5:37:a2:27:a4:
d0:a4:ce:dc:62:14:17:4e:10:9b:98:8f:25:99:17:
83:49:01:90:0c:64:0a:c8:dd:6b:85:28:71:13:42:
45:42:11:bb:3e:a9:07:10:4d:79:ff:a0:82:dd:6b:
47:65:cb:92:e3:ec:bc:e7:5a:73:02:9e:0f:73:57:
2b:76:4d:2b:34:6d:7f:86:08:53:e3:91:3e:93:33:
51:e7:da:34:cb:1f:9f:77:fc:a7:f5:ed:08:68:a0:
a2:f0:27:2f:1a:3b:9d:1e:fc:a3:66:d4:56:a4:e2:
fd:ad:a4:68:ba:f5:ec:47:46:f2:94:62:06:67:1e:
9a:ad:1a:c7:8e:d6:71:f6:33:44:50:1a:be:a4:4c:
9f:c2:7a:6b:36:96:02:01:5b:70:0d:43:25:41:b7:
a0:7f:d6:b7:ef:a3:a7:94:57:0c:82:5f:3a:b7:ac:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:5D:63:DB:2F:BB:77:E0:16:69:4C:3A:51:28:CB:F2:3E:2C:EA
X509v3 Authority Key Identifier:
keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4c:c7:d4:60:90:a9:d9:3f:b1:9b:f1:9d:ca:37:5c:d7:74:
8d:a3:55:33:fc:0d:43:8f:3e:88:80:09:cc:af:b7:ef:a6:dd:
f7:ce:06:33:79:c1:f9:30:14:b2:cb:f7:ef:af:8e:f3:d3:04:
5c:91:60:95:5a:4d:06:65:b7:40:5f:81:92:07:5a:bd:31:50:
63:76:7b:51:0b:77:ee:e2:1c:2f:42:aa:29:9d:0b:6c:56:84:
9d:68:ae:d9:72:d6:f2:28:0a:a9:ab:8a:45:e2:79:4f:f8:3b:
6d:97:62:f5:4a:e9:4d:61:ce:a6:60:ce:14:a1:73:fb:e7:a5:
d9:cc:38:8a:92:2f:3a:2d:27:f2:1a:7c:50:48:ba:9b:43:32:
c9:42:45:cf:21:df:db:25:43:35:68:85:f1:b9:94:55:2c:43:
88:7f:95:f2:f0:ef:47:f3:af:39:fe:69:92:37:a2:88:d1:2d:
97:c1:66:33:37:7b:16:0a:bf:a2:c1:51:aa:f8:92:d6:fa:1f:
5e:f0:93:57:54:e4:1c:e1:8e:91:71:a2:92:01:df:54:fa:a5:
73:09:af:fa:1a:ec:3b:f5:fc:51:b4:b8:bc:0c:ec:47:fa:55:
61:25:de:1e:e1:23:59:5b:2c:8d:5c:79:09:aa:63:3e:6e:26:
8c:11:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:44:09 2026 by rpki-client