
$ rpki-client -vvf rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
File: 420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft (raw, json)
Hash identifier: arhS36EFXwAI8BFpW67mLWA/4CzHTXCNYPoFcQGXc3E=
Subject key identifier: 0A:28:8A:99:C7:5C:AB:A7:18:E3:20:B2:F3:11:3B:E6:A5:C5:4A:66
Authority key identifier: 42:0B:44:21:48:6D:4B:3F:3F:DD:A7:8B:EF:DC:D0:4B:11:4F:A3:91
Certificate issuer: /CN=420B4421486D4B3F3FDDA78BEFDCD04B114FA391
Certificate serial: 43E82B5F4EF32FD4F53C3774F674BCA6A4EAEE7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
Manifest number: 29
Signing time: Fri 12 Jun 2026 22:26:36 +0000
Manifest this update: Fri 12 Jun 2026 22:21:36 +0000
Manifest next update: Sat 13 Jun 2026 23:13:36 +0000
Files and hashes: 1: 323830343a323130303a323130303a3a2f34302d3430203d3e20323634353236.roa (hash: EDkPNnGpx5Yb5J6CSumegKnJZUyX/Fh5UiCRat2Wlpk=)
2: 420B4421486D4B3F3FDDA78BEFDCD04B114FA391.crl (hash: 7kUV1Eg8JsmU5VTY6n6fT0rYU7D3NXkgnfHFSJQGYiw=)
3: 323830343a323130303a323030303a3a2f34302d3430203d3e20323634353236.roa (hash: KZQdS22vlZ8KOPwAEuF6cFXY3jxqy4YTLIFWgY8qJrM=)
4: 3133322e3235352e3230342e302f32322d3232203d3e20323634353236.roa (hash: PRoGkw6cXTu644ds9q77NNCoDo1jmwV/0XvY6icluWM=)
5: 323830343a323130303a3a2f33322d3332203d3e20323634353236.roa (hash: K4GcJHpCUqGC+6ctDi3uT6QpLuKyALsmc9DMX32bYvw=)
6: 3133322e3235352e3230372e302f32342d3234203d3e20323634353236.roa (hash: DroBzyA0qjfNjZRDHYBH2MRePyKuY+wRvUsxPwOMACk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.crl
rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 13 Jun 2026 23:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e8:2b:5f:4e:f3:2f:d4:f5:3c:37:74:f6:74:bc:a6:a4:ea:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420B4421486D4B3F3FDDA78BEFDCD04B114FA391
Validity
Not Before: Jun 12 22:21:36 2026 GMT
Not After : Jun 13 23:13:36 2026 GMT
Subject: CN=0A288A99C75CABA718E320B2F3113BE6A5C54A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:12:95:55:93:e0:75:78:84:e8:d6:7e:e3:
f1:89:ac:b8:ad:af:47:50:d4:b4:10:56:98:20:3c:
c4:fe:7e:02:c3:6d:4d:84:22:22:b6:70:7d:23:06:
fd:b4:ef:f0:07:14:33:b1:e8:51:da:5b:f8:7a:5c:
b0:28:01:14:4d:b0:dc:96:4f:6f:66:d8:11:c3:49:
d5:b0:ae:aa:e6:2e:a0:b9:bd:34:ca:54:8b:d6:77:
fc:96:b2:fe:5c:bb:3d:01:91:48:3e:6c:8f:f7:9b:
74:04:55:46:05:c7:90:ca:d3:16:64:a5:bb:bc:fe:
93:1f:57:20:b1:d3:f6:cc:a8:ab:4b:19:27:47:27:
de:7d:8f:4e:66:e4:03:62:20:ed:e6:fa:a1:73:76:
50:61:f2:0e:0c:21:84:51:8c:af:4a:a9:ba:5d:55:
fb:0e:ef:b7:6c:d5:58:e6:45:c6:35:69:14:f7:43:
8c:06:21:7b:0b:13:2c:38:70:6e:dd:bb:47:6c:13:
8b:a2:d5:85:69:b1:2b:dd:9b:81:5b:ee:9a:86:88:
c5:93:c0:0f:67:d1:5d:7e:9d:0f:3e:6d:15:24:2f:
e7:94:95:9f:a6:b7:2b:d5:d2:3a:54:2e:83:04:c3:
96:d2:bd:ea:ea:fb:a7:8e:ee:87:3f:57:ba:62:3d:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:8A:99:C7:5C:AB:A7:18:E3:20:B2:F3:11:3B:E6:A5:C5:4A:66
X509v3 Authority Key Identifier:
keyid:42:0B:44:21:48:6D:4B:3F:3F:DD:A7:8B:EF:DC:D0:4B:11:4F:A3:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/420B4421486D4B3F3FDDA78BEFDCD04B114FA391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e4:79:46:fc:42:38:78:4a:00:8e:c0:1d:1c:0f:1c:4e:89:
ec:64:ed:3b:e2:6a:7d:40:9f:51:4e:47:a5:2e:6e:30:93:c4:
34:7d:f3:e2:9c:8b:fd:a6:35:bc:5a:e3:13:9b:5d:9b:4d:de:
ab:a4:8b:a8:6b:1c:44:9a:53:a7:82:aa:55:ad:e6:2e:3f:40:
dd:4a:cb:3f:4f:21:59:9e:ad:87:81:ee:bc:cc:20:17:b3:89:
7b:0b:9f:7c:0e:4d:4b:b7:c9:b9:58:c9:99:d1:9e:9d:56:58:
0d:70:3a:ba:52:e5:40:b0:3e:58:77:c0:fd:bd:80:d7:10:da:
70:f1:9e:05:9f:28:19:81:2a:ea:39:df:39:a0:8b:3e:b8:c1:
d3:a5:b6:84:14:0a:8c:42:3b:f6:78:30:cc:ca:bb:9c:82:f2:
22:5f:d6:9b:c4:06:a4:d6:f0:e9:8d:d7:7e:50:fb:41:c7:ce:
a9:50:2e:2f:45:b2:52:67:de:e5:20:bf:b0:c7:8b:0d:3a:2e:
64:5b:ef:05:1f:da:10:eb:30:a1:3c:af:5c:51:f9:51:1d:95:
9a:c0:ce:22:f6:bf:94:e0:2c:8a:da:0f:7d:17:6c:a1:85:58:
2e:17:33:48:0c:b2:9f:5f:ba:4b:d4:4e:ea:69:aa:3b:d9:2d:
ff:7d:13:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:27:06 2026 by rpki-client