
$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
File: 2C425257AE7B63529EB88108AC7DEA60648B43E5.mft (raw, json)
Hash identifier: Lx61AFdGrBIrK28W61ky75i7pyo/FU75AyoGUEnXopU=
Subject key identifier: 6E:2D:36:CD:B8:63:94:A6:A4:03:3A:DD:64:DA:78:78:88:21:2E:64
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Certificate issuer: /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial: 0AF9C55E900A1DA79AAC69D1C2969E5A07CB80BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
Manifest number: 042C
Signing time: Mon 02 Mar 2026 09:13:48 +0000
Manifest this update: Mon 02 Mar 2026 09:08:48 +0000
Manifest next update: Tue 03 Mar 2026 12:28:48 +0000
Files and hashes: 1: 323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (hash: N4VGJmgCa+nRIRw1veRc/4Q5MScpjZJXFiygzSDeI6w=)
2: 3138312e3233322e3233302e302f32332d3233203d3e20323732353439.roa (hash: wwa6fzPN5lamHJSujdCR7c5+Dz0yZ5YJCRcnr95Io7I=)
3: 3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (hash: klDBb+/bFR7ZmSokue+sj4oDGi4pIXmffEq4mhcUzV0=)
4: 323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (hash: 9VzaQ7vDmNrMa4deko9XK8+Pr/jUWjlpX8PpBjNLnak=)
5: 2C425257AE7B63529EB88108AC7DEA60648B43E5.crl (hash: G2qGz39vvuEKQK0nwqDL8aQLB5d0vK+uCZWuEf/1WfA=)
6: 323830343a383466383a3a2f33322d3332203d3e20323732353439.roa (hash: kg4D3OUQl7VyP0EOT1sqrFor/X1vPyfsQh0euNYjK5o=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 12:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f9:c5:5e:90:0a:1d:a7:9a:ac:69:d1:c2:96:9e:5a:07:cb:80:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Validity
Not Before: Mar 2 09:08:48 2026 GMT
Not After : Mar 3 12:28:48 2026 GMT
Subject: CN=6E2D36CDB86394A6A4033ADD64DA787888212E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:16:4f:92:9e:10:cc:93:a1:b8:c5:94:4c:
f5:73:fe:17:a8:e1:5e:14:3c:81:3c:86:75:1e:74:
bb:2d:12:cb:b4:00:69:44:94:14:57:b9:1c:ad:8d:
d6:9d:08:e7:38:a3:d0:56:da:27:98:71:84:6c:5d:
ec:bb:00:20:8f:74:cd:7f:57:f3:c2:9d:6f:1a:dc:
8b:78:d3:f5:4d:ca:a1:03:ee:f7:85:ba:f8:18:31:
69:20:eb:3a:e3:3d:31:8f:ea:01:a7:8c:34:f8:26:
9d:cb:cc:d0:73:1f:ef:2c:ca:93:f3:07:54:b0:86:
36:d1:9f:37:cd:79:b5:25:40:30:8a:88:bf:e6:05:
81:d7:56:36:92:26:5f:5b:11:fc:85:66:54:5c:e0:
14:ee:8e:d4:18:1f:83:cc:1b:2e:26:14:51:a9:ce:
66:5b:e7:11:05:6c:05:01:42:17:ca:bf:9f:7f:2a:
c8:5d:c1:aa:9a:0d:2a:27:00:49:7a:84:93:95:f3:
23:ed:4f:1f:8d:ff:fd:68:4c:5b:64:21:18:90:11:
56:0e:5a:36:b1:90:ea:c0:26:f1:ec:0e:41:ed:24:
1b:48:98:84:5f:22:b6:b1:05:b2:45:60:ef:6a:f9:
b9:95:47:05:ff:57:f6:ee:54:6d:82:33:0e:4c:c1:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:36:CD:B8:63:94:A6:A4:03:3A:DD:64:DA:78:78:88:21:2E:64
X509v3 Authority Key Identifier:
keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:72:47:10:71:6d:f1:25:b2:fc:36:fe:ba:92:ba:b0:cb:34:
5f:e5:7a:df:8d:a0:48:be:a8:6a:bb:fc:7a:86:51:df:5b:6c:
64:2a:5e:ea:9b:11:8d:90:07:de:40:0a:44:1e:b0:dc:7c:83:
74:da:9a:c8:97:a0:8b:f1:e8:e0:a9:bb:89:2f:d4:1a:64:fa:
c7:46:a0:27:dd:62:1c:ed:83:ff:08:b1:17:20:88:b9:97:1a:
aa:65:f9:20:09:2b:3f:3f:ea:44:47:68:ef:c3:41:4c:b2:07:
ed:8d:a7:97:89:b2:f2:c9:23:9b:12:29:2c:f9:59:d7:88:a1:
0d:5e:2a:33:a0:f5:4d:26:e7:19:72:af:21:2f:12:8f:b5:5d:
99:d0:25:d5:d1:f3:c2:21:78:54:c4:d9:d7:b3:de:15:8f:29:
af:af:c2:e9:95:2b:f7:d0:db:07:05:f0:1f:d2:23:1e:d9:9f:
d3:a9:40:67:5a:72:b5:09:e4:e0:3b:cb:67:da:5e:d4:36:df:
ac:57:24:a4:a6:a1:86:1d:d4:39:04:06:d6:ea:03:ba:3c:38:
58:ab:d1:99:b2:9e:3f:c0:77:96:5d:64:2b:b1:25:f4:c4:41:
34:52:b8:bf:f9:29:9e:5e:7f:78:14:f4:b9:95:c6:80:1c:55:
3d:50:6f:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCvnFXpAKHaearGnRwpaeWgfLgL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0MjUyNTdBRTdCNjM1MjlFQjg4MTA4QUM3REVBNjA2
NDhCNDNFNTAeFw0yNjAzMDIwOTA4NDhaFw0yNjAzMDMxMjI4NDhaMDMxMTAvBgNV
BAMTKDZFMkQzNkNEQjg2Mzk0QTZBNDAzM0FERDY0REE3ODc4ODgyMTJFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdqhZPkp4QzJOhuMWUTPVz/heo
4V4UPIE8hnUedLstEsu0AGlElBRXuRytjdadCOc4o9BW2ieYcYRsXey7ACCPdM1/
V/PCnW8a3It40/VNyqED7veFuvgYMWkg6zrjPTGP6gGnjDT4Jp3LzNBzH+8sypPz
B1SwhjbRnzfNebUlQDCKiL/mBYHXVjaSJl9bEfyFZlRc4BTujtQYH4PMGy4mFFGp
zmZb5xEFbAUBQhfKv59/KshdwaqaDSonAEl6hJOV8yPtTx+N//1oTFtkIRiQEVYO
WjaxkOrAJvHsDkHtJBtImIRfIraxBbJFYO9q+bmVRwX/V/buVG2CMw5MwSYnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUbi02zbhjlKakAzrdZNp4eIghLmQwHwYDVR0j
BBgwFoAULEJSV657Y1KeuIEIrH3qYGSLQ+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGRpTm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhk
ckwvMS8yQzQyNTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0M0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDNDI1MjU3QUU3QjYzNTI5
RUI4ODEwOEFDN0RFQTYwNjQ4QjQzRTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OGRpTm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMS8y
QzQyNTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0M0U1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjHJHEHFt8SWy/Db+upK6sMs0X+V6342gSL6oarv8eoZR31tsZCpe6psRjZAH
3kAKRB6w3HyDdNqayJegi/Ho4Km7iS/UGmT6x0agJ91iHO2D/wixFyCIuZcaqmX5
IAkrPz/qREdo78NBTLIH7Y2nl4my8skjmxIpLPlZ14ihDV4qM6D1TSbnGXKvIS8S
j7VdmdAl1dHzwiF4VMTZ17PeFY8pr6/C6ZUr99DbBwXwH9IjHtmf06lAZ1pytQnk
4DvLZ9pe1DbfrFckpKahhh3UOQQG1uoDujw4WKvRmbKeP8B3ll1kK7El9MRBNFK4
v/kpnl5/eBT0uZXGgBxVPVBvYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:17:21 2026 by rpki-client