
$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
File: 68DD457AFD87757729E657881786601BF56ED45F.mft (raw, json)
Hash identifier: 0UsKXneM5e+N3VBeRy9W3JeOL8sDK4hwE5+9AK5VJi4=
Subject key identifier: 64:AE:31:31:5D:DC:15:41:7D:C4:2A:23:02:AA:E8:8E:6C:74:8C:79
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial: 47A91ADD425F3194DC4F13F2B9250A3DC242A36E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
Manifest number: 3B
Signing time: Mon 03 Nov 2025 10:26:05 +0000
Manifest this update: Mon 03 Nov 2025 10:21:05 +0000
Manifest next update: Tue 04 Nov 2025 12:54:05 +0000
Files and hashes: 1: 3138392e35302e35342e302f32342d3234203d3e20323730393035.roa (hash: BnDJoD7mm5smVqJlLLxtTMXUDEMSimPQmN20SZOwM2Y=)
2: 323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa (hash: eMHbpvQgswRZVwXpdLiCqm5u80LIeU0ewBIU4ClX0EA=)
3: 3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (hash: 82plwJJTMXjlj2xQonVnYthoRgLBPcbTFJrwjSmx/Qo=)
4: 3138392e35302e35322e302f32322d3232203d3e20323730393035.roa (hash: ALsUwVg1b91mWEVv1JossW/UxBJrUroC7KfEigoH8iA=)
5: 323830343a373334343a3a2f33322d3332203d3e20323730393035.roa (hash: b0E96RajeTelki/RKd4yUSyPNuDlQOK6caHY9E0TRNU=)
6: 3138392e35302e35352e302f32342d3234203d3e20323730393035.roa (hash: iDGr5F2PnwedBBe+x8uqhHnhvoHpNVzvQZV2xJFQ9Sw=)
7: 323830343a373334343a3a2f33332d3333203d3e20323730393035.roa (hash: f+IuAr2PdhB8vRwaHvOEUwIs2xnnXXsBPgFKYRki9wQ=)
8: 323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa (hash: ttC17iKoaXN/NHlBJJiZDxSbyY0c4jv5VcBx7nhU3HY=)
9: 3138392e35302e35342e302f32332d3233203d3e20323730393035.roa (hash: r34Bj3NOi8J7wSWAiNV1mRpqUrAk2TST4VuligD84dg=)
10: 323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa (hash: zSZBOT/eEVH4NopCJ1NOtzvZrj354yQ3o7Ai1Ha7OrM=)
11: 68DD457AFD87757729E657881786601BF56ED45F.crl (hash: sJhYBaNBWvN9Wk6G6jAiLCDpQ3lTUM1IFGUls/kfrtw=)
12: 323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (hash: 4oa2Pqqjk+v9zjeeAZuE9nPiU+p6xlCBHnTjnFWf3r4=)
13: 3138392e35302e35322e302f32332d3233203d3e20323730393035.roa (hash: hikPtDugUlkzkEgh8v3ypYGv8i4assWt4gSsuKVQby4=)
14: 323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (hash: W6gEhC0BdyjXA01tT7J7K2zLIa0l8RKWQqfOCow1TBM=)
15: 3138392e35302e35332e302f32342d3234203d3e20323730393035.roa (hash: gL+ccQ4alihUg3XraYKW83JDWF98wjKhykPSIRaI5Do=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 04 Nov 2025 12:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a9:1a:dd:42:5f:31:94:dc:4f:13:f2:b9:25:0a:3d:c2:42:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
Validity
Not Before: Nov 3 10:21:05 2025 GMT
Not After : Nov 4 12:54:05 2025 GMT
Subject: CN=64AE31315DDC15417DC42A2302AAE88E6C748C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:1f:37:1f:a7:27:39:da:c8:74:ef:6f:08:
a3:81:a7:ae:aa:57:a5:d6:29:10:57:68:fe:6e:26:
34:57:ec:22:17:5d:1f:4a:10:52:60:d0:aa:84:96:
40:2e:f2:a8:0c:15:50:9a:de:8d:44:95:76:91:20:
d3:9c:ce:da:c7:2a:09:d8:0f:ac:99:77:fb:00:81:
18:4d:fb:37:e7:71:ed:2f:6b:fb:a8:14:5e:46:2e:
d7:58:42:e8:1e:66:85:63:b1:28:16:6f:44:aa:4b:
e3:06:dd:44:f1:44:82:19:14:3a:db:85:e9:a7:16:
f4:be:46:99:e3:07:58:77:72:b2:fb:10:c9:64:eb:
4c:9c:39:6a:8b:e7:e9:9f:fc:57:5e:e9:04:7d:96:
a6:f6:20:3e:44:e0:4d:91:6a:c0:9e:55:dd:41:e6:
32:3a:b2:5b:d0:cb:bc:8e:6b:05:c6:6b:6f:6b:79:
c6:b0:f1:27:02:0c:61:95:18:04:b8:f2:a4:79:c0:
ae:e5:f5:44:1f:cd:39:d8:12:dc:b7:37:e0:75:f2:
17:37:c2:d0:8b:d5:09:c0:46:52:be:79:ab:dd:54:
06:f8:93:0f:fb:84:60:7a:fe:bc:09:e1:28:27:65:
86:f4:ba:47:33:b4:f9:bd:42:97:35:64:41:82:93:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:31:31:5D:DC:15:41:7D:C4:2A:23:02:AA:E8:8E:6C:74:8C:79
X509v3 Authority Key Identifier:
keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:89:74:3c:6d:24:30:a6:fd:67:b1:35:11:9c:bc:ab:1b:9c:
e5:92:17:ec:64:03:09:b8:89:99:75:33:c6:ae:57:14:dc:98:
07:b2:dd:19:71:e9:88:34:34:f4:34:af:17:4b:3f:ac:93:14:
a9:05:16:6a:bc:a4:de:34:ad:12:69:e3:f0:26:4a:dc:20:11:
4c:4c:21:e2:5f:b8:bd:ac:91:53:e0:12:5f:51:e5:be:56:bd:
4e:5c:e4:95:9c:26:41:d1:31:de:b5:a0:c8:32:f2:57:fc:df:
4a:21:94:0a:24:80:3a:f2:2c:06:d8:3e:18:44:c7:58:55:85:
99:ee:0f:74:9a:a7:76:a2:1b:ed:a3:2f:8f:87:3b:36:13:c2:
cb:2e:ef:1c:ae:96:f4:31:b7:4c:e0:20:ba:ab:c0:00:31:04:
41:c2:e9:2f:26:da:cd:4e:b2:38:07:97:34:bd:1a:fa:08:f8:
62:07:90:a8:22:08:1c:23:96:23:23:7e:18:1c:11:db:7c:95:
2c:2a:8e:15:fd:23:2b:bd:40:b7:9e:a1:d5:6a:a8:d0:c8:c2:
ff:79:f0:45:7c:cc:09:65:90:1f:3a:a7:d8:f7:57:63:6f:7d:
7f:05:09:87:aa:98:9c:ce:f9:f7:23:dd:9e:13:81:1f:d0:19:
46:5a:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:11:52 2025 by rpki-client