
$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
File: 42361EAB494B759A64EFEB313189F9E2DF6603C8.mft (raw, json)
Hash identifier: CLgQA32QmVPQWlsbOEzk/SDK/Fz8afroNoSb/HkkMxM=
Subject key identifier: 66:02:E8:15:BE:CC:99:BB:37:EC:47:1F:AC:AA:CF:4B:F6:70:26:81
Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Certificate serial: 048E330B84A1561CABCD1A63ACD02E6544683DF1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
Manifest number: 03A4
Signing time: Sun 01 Mar 2026 20:42:13 +0000
Manifest this update: Sun 01 Mar 2026 20:37:13 +0000
Manifest next update: Mon 02 Mar 2026 22:48:13 +0000
Files and hashes: 1: 42361EAB494B759A64EFEB313189F9E2DF6603C8.crl (hash: YHerzhAGKIB0IYfnrUDlZKObEXrxbOUvX8oSFbDqGjE=)
2: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (hash: fNq23+VDsU4Ouh5C0oCYZT+xpHTII0NCbBkHZpppb50=)
3: 323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (hash: rfZGH25q51CNYLfSmIxoGFPHqDv/D46uQDFF2hx2HsM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Mar 2026 22:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8e:33:0b:84:a1:56:1c:ab:cd:1a:63:ac:d0:2e:65:44:68:3d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Validity
Not Before: Mar 1 20:37:13 2026 GMT
Not After : Mar 2 22:48:13 2026 GMT
Subject: CN=6602E815BECC99BB37EC471FACAACF4BF6702681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:11:ce:b8:ad:0e:a1:78:13:3c:72:92:4f:
81:c9:98:f0:e2:45:db:8b:e4:c0:4f:c6:3a:91:3f:
18:50:e9:b0:0d:c4:0c:bc:64:96:93:b3:49:9a:f0:
b1:cd:18:dc:fb:f2:a2:67:e6:b1:df:3e:7d:f1:7a:
24:73:35:7f:84:7d:2f:ea:fa:9c:67:6e:08:96:de:
4e:92:85:8b:8c:76:e9:9e:d1:62:72:7a:ed:12:2c:
5c:47:3c:bb:38:1a:bd:d9:81:93:43:95:99:c0:a7:
7c:81:aa:be:15:62:39:56:d8:f7:cb:1d:7c:82:80:
eb:d2:11:d8:05:1b:8a:35:15:00:66:f4:72:77:c6:
24:7c:c5:e4:2a:81:d3:8e:9f:ae:7a:47:2c:aa:27:
28:bc:e2:4c:a2:d5:f1:f2:cb:96:bb:14:96:e6:7d:
ff:9d:53:a4:ef:dc:6f:3c:63:7a:1b:1e:a4:41:9b:
a1:3e:af:aa:5a:48:31:1e:8d:f4:b3:ab:b3:a4:ff:
eb:e1:13:a7:30:f4:b2:91:28:30:68:01:79:c1:5b:
3d:39:4b:3e:0c:47:6f:b9:44:4a:a2:8b:2f:0d:53:
e4:98:9b:d6:f0:a5:30:58:d2:33:10:45:23:79:6d:
61:ae:ae:4e:57:f2:c0:3e:12:c8:d6:9f:95:73:f0:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:E8:15:BE:CC:99:BB:37:EC:47:1F:AC:AA:CF:4B:F6:70:26:81
X509v3 Authority Key Identifier:
keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b4:9f:ae:a5:12:f7:81:ed:dc:b8:55:77:5e:d2:9e:d3:3f:
d5:29:f5:7d:4d:c4:4a:09:b0:70:3f:1e:a1:3b:a8:cf:c6:fb:
a9:10:8d:a9:03:8e:5a:73:f5:f7:e9:d4:dd:fa:e2:b4:94:81:
87:c2:a7:77:a2:ad:95:68:58:f4:c4:25:5c:10:99:d1:92:4a:
f8:83:23:0f:42:b2:23:b9:e6:0c:eb:1e:83:27:a4:f2:88:b5:
81:4a:30:2c:f5:a1:e1:db:41:2c:64:e0:ad:71:db:3d:79:5a:
92:2e:8c:78:2a:03:25:50:57:3b:c9:0d:ee:5a:d9:b8:0d:f0:
9c:9f:67:fc:be:74:41:58:f2:99:4b:ac:a8:09:3d:3c:bb:3f:
fd:ec:bd:4d:2e:85:18:f3:5c:5b:c0:30:72:b2:92:b4:ee:6b:
75:53:0c:29:a8:ff:50:05:a3:88:c0:2a:76:a6:4f:16:c2:0f:
fe:21:62:d5:d3:7a:5a:d2:87:60:89:9f:a9:c6:b4:7b:9c:39:
5f:62:18:3f:e8:62:b1:b9:99:3c:a5:de:5f:52:95:63:49:53:
4f:c7:01:d3:c2:ad:32:80:64:01:f7:68:db:fc:21:c7:8e:f4:
2f:ce:5c:93:06:bc:bf:6c:83:48:1d:95:b1:78:29:cc:3a:19:
e1:e8:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:17:47 2026 by rpki-client