
$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
File: 68DD457AFD87757729E657881786601BF56ED45F.mft (raw, json)
Hash identifier: zOjQB0e2v9Fveq4jWTQT3mK3LCv98tlZYRMcgnRpMB8=
Subject key identifier: F3:DA:F0:08:8B:FC:95:B4:A1:6C:E7:41:B0:D1:CC:96:6E:0A:D7:D8
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial: 2724EEAA2894FD2203180153DC000E67D98B23C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
Manifest number: D8
Signing time: Mon 02 Mar 2026 04:54:39 +0000
Manifest this update: Mon 02 Mar 2026 04:49:39 +0000
Manifest next update: Tue 03 Mar 2026 08:48:39 +0000
Files and hashes: 1: 323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa (hash: eMHbpvQgswRZVwXpdLiCqm5u80LIeU0ewBIU4ClX0EA=)
2: 3138392e35302e35352e302f32342d3234203d3e20323730393035.roa (hash: iDGr5F2PnwedBBe+x8uqhHnhvoHpNVzvQZV2xJFQ9Sw=)
3: 3138392e35302e35322e302f32332d3233203d3e20323730393035.roa (hash: hikPtDugUlkzkEgh8v3ypYGv8i4assWt4gSsuKVQby4=)
4: 323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa (hash: ttC17iKoaXN/NHlBJJiZDxSbyY0c4jv5VcBx7nhU3HY=)
5: 323830343a373334343a3a2f33322d3332203d3e20323730393035.roa (hash: b0E96RajeTelki/RKd4yUSyPNuDlQOK6caHY9E0TRNU=)
6: 68DD457AFD87757729E657881786601BF56ED45F.crl (hash: 18q+DDK4calzzQwwHEDYnfe4cFMjVTHVQihXMFdV0YA=)
7: 323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (hash: 4oa2Pqqjk+v9zjeeAZuE9nPiU+p6xlCBHnTjnFWf3r4=)
8: 323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (hash: W6gEhC0BdyjXA01tT7J7K2zLIa0l8RKWQqfOCow1TBM=)
9: 3138392e35302e35332e302f32342d3234203d3e20323730393035.roa (hash: gL+ccQ4alihUg3XraYKW83JDWF98wjKhykPSIRaI5Do=)
10: 323830343a373334343a3a2f33332d3333203d3e20323730393035.roa (hash: f+IuAr2PdhB8vRwaHvOEUwIs2xnnXXsBPgFKYRki9wQ=)
11: 3138392e35302e35322e302f32322d3232203d3e20323730393035.roa (hash: ALsUwVg1b91mWEVv1JossW/UxBJrUroC7KfEigoH8iA=)
12: 323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa (hash: zSZBOT/eEVH4NopCJ1NOtzvZrj354yQ3o7Ai1Ha7OrM=)
13: 3138392e35302e35342e302f32342d3234203d3e20323730393035.roa (hash: BnDJoD7mm5smVqJlLLxtTMXUDEMSimPQmN20SZOwM2Y=)
14: 3138392e35302e35342e302f32332d3233203d3e20323730393035.roa (hash: r34Bj3NOi8J7wSWAiNV1mRpqUrAk2TST4VuligD84dg=)
15: 3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (hash: 82plwJJTMXjlj2xQonVnYthoRgLBPcbTFJrwjSmx/Qo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 08:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:24:ee:aa:28:94:fd:22:03:18:01:53:dc:00:0e:67:d9:8b:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
Validity
Not Before: Mar 2 04:49:39 2026 GMT
Not After : Mar 3 08:48:39 2026 GMT
Subject: CN=F3DAF0088BFC95B4A16CE741B0D1CC966E0AD7D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:6b:36:84:d8:33:09:b7:8b:eb:a3:45:d6:
91:46:e9:6f:05:da:c4:4a:9b:bd:68:dd:32:9c:7f:
08:6b:61:ea:bd:ae:1b:08:a1:39:de:fc:3a:73:85:
6a:28:12:1e:ab:7c:8f:57:cc:b1:dd:bd:5f:67:c0:
62:6d:67:55:a1:62:70:85:06:98:09:57:ee:5e:aa:
f0:9f:f8:42:41:2b:b6:3b:e9:13:f1:8f:ce:1b:15:
7b:dc:08:51:a9:ec:9d:bc:84:b7:d1:43:22:1d:29:
56:c2:3d:db:30:7a:f0:34:f5:ac:5d:dd:85:ba:3e:
7f:f6:dc:9a:4e:06:94:89:53:29:7a:2f:5c:a2:a7:
58:95:2f:0d:6c:1b:fd:83:b9:0a:c2:7a:a8:e1:19:
04:35:0b:c0:2b:7f:b3:b1:44:4f:85:e7:35:d4:77:
cd:e4:5d:5b:ee:cc:b3:fc:20:99:0a:99:5f:01:fe:
e4:92:47:c7:1d:53:81:68:4c:1c:76:90:a6:ce:80:
5a:b4:86:dc:92:9b:8c:86:54:a9:fd:81:25:37:6f:
c9:1d:81:46:3e:8a:7c:30:62:61:22:3f:b6:1f:1b:
1a:b9:13:8a:20:d7:cb:a3:99:51:dd:3a:68:37:8a:
35:6a:f0:fd:6b:93:5d:be:b3:32:a4:30:e8:5b:4c:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:F0:08:8B:FC:95:B4:A1:6C:E7:41:B0:D1:CC:96:6E:0A:D7:D8
X509v3 Authority Key Identifier:
keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f0:99:d1:8d:77:21:ff:f7:b0:51:eb:88:60:e5:cf:14:b8:
45:41:53:21:e6:4b:40:a9:0b:bf:61:e0:03:45:94:07:b3:58:
2a:67:22:11:34:09:1c:56:01:5d:ed:f1:53:e1:ec:ee:bc:ee:
8d:e7:12:03:a7:64:cb:2f:77:68:12:88:f6:8b:fc:6b:3f:f0:
d4:92:a3:cd:ad:a4:4a:e5:f0:76:1d:ab:12:63:25:cb:c0:04:
88:30:4e:ee:c1:3b:41:8c:ea:88:82:59:06:a6:11:ac:d6:0f:
7f:b4:b1:00:9e:5c:44:0d:5b:1c:f3:c1:32:da:ef:03:37:4c:
67:c4:93:4b:ab:c5:fc:bc:d8:98:d2:a4:82:7b:0e:38:03:43:
f5:b3:e3:4c:cd:16:0a:5a:23:00:af:84:5e:86:68:a3:11:26:
03:0d:1c:29:19:8b:01:3f:1e:47:64:d0:56:44:15:b7:a0:67:
c5:6d:c3:26:f2:75:2d:0e:b5:a0:33:ad:ed:56:e8:d5:32:13:
15:01:15:32:a1:17:12:d0:d8:41:75:8a:44:d9:32:99:f9:54:
bc:82:76:0a:5d:2e:17:6d:fc:76:8b:a9:96:ca:e5:79:a1:c0:
dc:1f:e4:38:fa:a4:b6:1a:43:79:8a:cc:01:37:c1:db:a8:ef:
2f:5b:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:38 2026 by rpki-client