
$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
File: 68DD457AFD87757729E657881786601BF56ED45F.mft (raw, json)
Hash identifier: fvQAO4GqDVS8YnhYDYUHQla0+dLDKD7weTeNmS0M70k=
Subject key identifier: 00:5D:0E:1A:2C:D5:55:A6:98:ED:0E:1D:CD:15:B7:9C:E1:A8:FA:81
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial: 37258497D16E328993E2DC5166C29FFD9777095F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
Manifest number: 3D
Signing time: Tue 04 Nov 2025 22:56:09 +0000
Manifest this update: Tue 04 Nov 2025 22:51:09 +0000
Manifest next update: Thu 06 Nov 2025 00:55:09 +0000
Files and hashes: 1: 323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (hash: 4oa2Pqqjk+v9zjeeAZuE9nPiU+p6xlCBHnTjnFWf3r4=)
2: 323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (hash: W6gEhC0BdyjXA01tT7J7K2zLIa0l8RKWQqfOCow1TBM=)
3: 3138392e35302e35332e302f32342d3234203d3e20323730393035.roa (hash: gL+ccQ4alihUg3XraYKW83JDWF98wjKhykPSIRaI5Do=)
4: 3138392e35302e35342e302f32342d3234203d3e20323730393035.roa (hash: BnDJoD7mm5smVqJlLLxtTMXUDEMSimPQmN20SZOwM2Y=)
5: 68DD457AFD87757729E657881786601BF56ED45F.crl (hash: pAaA9YJVd91Yx5HzfHEo3e3v2G0O9cFNQPHjkt5FzTM=)
6: 3138392e35302e35352e302f32342d3234203d3e20323730393035.roa (hash: iDGr5F2PnwedBBe+x8uqhHnhvoHpNVzvQZV2xJFQ9Sw=)
7: 323830343a373334343a3a2f33322d3332203d3e20323730393035.roa (hash: b0E96RajeTelki/RKd4yUSyPNuDlQOK6caHY9E0TRNU=)
8: 3138392e35302e35342e302f32332d3233203d3e20323730393035.roa (hash: r34Bj3NOi8J7wSWAiNV1mRpqUrAk2TST4VuligD84dg=)
9: 3138392e35302e35322e302f32332d3233203d3e20323730393035.roa (hash: hikPtDugUlkzkEgh8v3ypYGv8i4assWt4gSsuKVQby4=)
10: 323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa (hash: zSZBOT/eEVH4NopCJ1NOtzvZrj354yQ3o7Ai1Ha7OrM=)
11: 323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa (hash: ttC17iKoaXN/NHlBJJiZDxSbyY0c4jv5VcBx7nhU3HY=)
12: 323830343a373334343a3a2f33332d3333203d3e20323730393035.roa (hash: f+IuAr2PdhB8vRwaHvOEUwIs2xnnXXsBPgFKYRki9wQ=)
13: 3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (hash: 82plwJJTMXjlj2xQonVnYthoRgLBPcbTFJrwjSmx/Qo=)
14: 323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa (hash: eMHbpvQgswRZVwXpdLiCqm5u80LIeU0ewBIU4ClX0EA=)
15: 3138392e35302e35322e302f32322d3232203d3e20323730393035.roa (hash: ALsUwVg1b91mWEVv1JossW/UxBJrUroC7KfEigoH8iA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 00:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:25:84:97:d1:6e:32:89:93:e2:dc:51:66:c2:9f:fd:97:77:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
Validity
Not Before: Nov 4 22:51:09 2025 GMT
Not After : Nov 6 00:55:09 2025 GMT
Subject: CN=005D0E1A2CD555A698ED0E1DCD15B79CE1A8FA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:4b:18:a4:f6:7b:77:4e:39:0c:cd:9d:3e:
49:8a:29:47:15:7c:09:b5:77:fa:f0:f1:9b:05:d9:
cb:a1:42:03:93:10:4c:d8:3e:dc:ae:de:05:30:de:
46:5a:60:af:79:67:96:28:ad:07:0c:e9:a0:24:8f:
9c:38:da:60:9d:44:2d:12:bc:6f:09:4b:d3:83:16:
2d:ce:d6:3b:07:80:36:30:73:a6:6b:74:e0:15:13:
7a:f2:af:63:a4:51:95:5a:87:20:fd:9b:21:1a:2b:
99:3f:72:f9:ba:0a:53:43:ee:1a:5b:5d:38:bb:19:
cc:ef:98:a4:77:3a:b7:87:72:a4:fc:c4:62:5d:8a:
b3:bf:21:bd:aa:9f:22:08:9d:0b:5c:ae:eb:dd:c7:
bd:04:17:9d:da:10:ca:af:1f:c4:56:d9:bd:f2:2b:
94:04:77:6f:f6:1d:05:bb:e5:76:3a:c0:92:32:b5:
0a:6e:37:00:42:b5:c2:4d:01:2b:90:33:71:2f:23:
4c:bc:88:f3:bc:a8:e6:a6:56:ff:2a:83:21:52:71:
af:13:bf:bb:ba:b9:d7:be:c3:2a:f5:57:42:9b:56:
8e:15:14:aa:2f:63:9c:81:8d:85:bc:ad:af:b2:15:
1e:00:05:ba:fe:f4:aa:44:03:7a:0c:dc:ae:5c:25:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5D:0E:1A:2C:D5:55:A6:98:ED:0E:1D:CD:15:B7:9C:E1:A8:FA:81
X509v3 Authority Key Identifier:
keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:52:77:49:b2:b3:2d:9f:15:b0:27:22:98:80:28:25:4a:
ba:2c:e5:97:69:dc:5f:3e:15:6f:d4:de:fc:9b:95:19:56:7b:
7d:e7:99:ec:5e:06:db:f8:d1:8f:1b:2d:39:b9:45:cc:f6:b8:
7a:b5:b5:6c:a7:98:0e:b1:01:11:19:d9:af:f0:d5:9e:05:ad:
44:3a:7c:c9:2e:a6:e8:60:33:5b:65:f0:33:e3:78:34:08:02:
98:ca:9f:48:a1:80:05:79:73:a7:d0:fb:af:1b:c7:6d:51:31:
52:e1:cf:6d:00:7c:f4:e0:b8:88:bd:d2:4d:9e:8e:0d:6f:7f:
d2:cd:c9:51:d1:b7:6e:4a:3d:82:e2:8e:a1:82:9b:9a:66:98:
fd:e9:c6:e9:a7:cb:0f:55:b9:2e:4d:cc:99:ff:29:b2:c3:89:
dd:d9:b6:d5:8c:90:7c:a6:8d:ff:30:e1:48:34:3f:d6:c2:74:
1a:68:90:54:8c:b3:ab:c1:53:be:58:37:dc:25:20:b3:a0:ee:
76:6c:f3:be:88:6a:26:ca:cc:6f:01:43:76:3f:c7:96:31:7f:
d8:de:61:e4:15:7b:71:f3:80:5a:01:12:d5:bb:96:b7:e4:be:
0a:5e:9d:a5:40:44:4c:d2:6b:b0:fb:bd:c4:ff:47:06:df:fd:
c6:df:21:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:58:40 2025 by rpki-client