
$ rpki-client -vvvf rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.mft
File: 686C2A5E6458EFDC4EB683675D32A235E6A80A68.mft (raw, json)
Hash identifier: RKZB0rfQBVy8SmhLJW7huFEbXyXmGjkwXVXoERWr9gs=
Subject key identifier: F4:32:EB:0E:DF:13:28:F2:B7:93:A6:ED:F8:BD:EC:51:06:68:BC:F0
Authority key identifier: 68:6C:2A:5E:64:58:EF:DC:4E:B6:83:67:5D:32:A2:35:E6:A8:0A:68
Certificate issuer: /CN=686C2A5E6458EFDC4EB683675D32A235E6A80A68
Certificate serial: 4CDB55FBAF9E3F0916F0A9341D048EE7FD8371EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686C2A5E6458EFDC4EB683675D32A235E6A80A68.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.mft
Manifest number: 28
Signing time: Tue 13 Oct 2026 06:31:40 +0000
Manifest this update: Tue 13 Oct 2026 06:26:40 +0000
Manifest next update: Wed 14 Oct 2026 08:53:40 +0000
Files and hashes: 1: 323830343a323034383a3a2f33322d3332203d3e20323634343833.roa (hash: 4qEJpWo1BzvHRIVA9UP6hY1CK5iUGqDYUPzFslKsBcA=)
2: 323830343a323034383a633030303a3a2f33342d3334203d3e20323634343833.roa (hash: 1Bx8pqgdrrS6gJLkJyJGztF0R5aNvlwVUJxd2hZuvFk=)
3: 3133312e3235352e38382e302f32322d3232203d3e20323634343833.roa (hash: VlriyzxTy3o09QhMyG3Bg/Z8br3JN1IFJcHxKdZnPtw=)
4: 686C2A5E6458EFDC4EB683675D32A235E6A80A68.crl (hash: VFZr4JaWXCONAPDA8TPhq7JFm0lInYwzquPWpe7e/bE=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.crl
rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686C2A5E6458EFDC4EB683675D32A235E6A80A68.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 14 Oct 2026 08:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:db:55:fb:af:9e:3f:09:16:f0:a9:34:1d:04:8e:e7:fd:83:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686C2A5E6458EFDC4EB683675D32A235E6A80A68
Validity
Not Before: Oct 13 06:26:40 2026 GMT
Not After : Oct 14 08:53:40 2026 GMT
Subject: CN=F432EB0EDF1328F2B793A6EDF8BDEC510668BCF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:19:9a:1d:5c:31:e2:0c:df:6f:5e:1a:06:
62:a6:93:c8:77:1b:a5:50:1a:fb:15:38:3e:9a:72:
bd:25:52:30:40:ba:1e:46:f6:bb:6f:d8:62:91:3b:
6c:1c:b6:ae:8e:a9:64:98:24:b7:3d:6d:01:09:32:
da:63:24:67:17:60:00:74:b9:f8:34:0b:17:80:82:
24:5e:af:ee:91:ab:b7:c9:ed:78:87:5e:98:be:c0:
d3:a3:1a:55:3e:4a:10:e7:f1:d3:2d:52:59:33:37:
53:f8:21:cf:f5:6d:2c:8b:5b:8f:97:9f:d8:82:17:
3d:33:90:c4:7f:da:ee:16:4f:c1:91:0f:ba:d3:8c:
c7:bc:41:d9:ed:09:51:e3:b3:50:db:68:d6:4d:df:
d7:c0:a1:1b:47:b5:05:d2:fb:d4:15:af:a5:2f:10:
55:10:13:82:94:c2:56:00:8f:f4:03:1a:9d:96:2c:
b6:70:88:3b:27:ea:19:0f:3a:3d:5b:92:bb:d8:b3:
7d:7b:15:34:64:6e:0c:1a:4b:d6:63:96:32:79:4b:
15:d0:60:e7:99:56:b3:d1:6c:9d:51:67:be:df:37:
f2:70:94:e6:1e:22:98:8e:54:ac:53:1b:fe:2a:2b:
00:ef:6e:95:f2:2d:a0:75:0e:1b:cb:39:b4:36:88:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:EB:0E:DF:13:28:F2:B7:93:A6:ED:F8:BD:EC:51:06:68:BC:F0
X509v3 Authority Key Identifier:
keyid:68:6C:2A:5E:64:58:EF:DC:4E:B6:83:67:5D:32:A2:35:E6:A8:0A:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686C2A5E6458EFDC4EB683675D32A235E6A80A68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:db:c1:25:58:cf:20:d9:26:b5:fc:0f:04:c5:52:25:34:ac:
d3:37:f8:98:5c:3d:fd:8f:51:5b:2d:bb:96:e7:55:4a:fb:75:
a4:43:4e:c2:0e:5a:a5:e6:c3:dd:c3:b2:f2:d3:52:c3:73:96:
44:35:17:f5:ae:07:1a:6a:32:3e:a4:2c:85:f5:db:df:86:36:
b7:0a:04:40:ce:3f:48:e4:ed:4c:18:49:c8:7a:ca:21:fd:0d:
da:df:90:98:22:78:7f:22:cb:a8:90:84:c3:ca:43:61:ce:b8:
65:45:a3:63:b5:65:93:86:55:aa:4d:90:9a:07:fb:a4:de:57:
45:1f:8c:49:63:63:f7:27:2f:da:fb:26:b7:b8:3e:ed:24:1d:
17:68:52:de:c7:22:8f:0c:95:fa:a8:03:4e:9d:ce:44:31:85:
0e:92:84:66:79:46:4e:96:e1:eb:1b:07:a3:0a:78:78:16:ed:
3d:60:cb:5f:0d:98:c4:ae:9e:bb:bc:bb:55:3d:c0:3f:b9:6c:
20:07:ad:82:87:56:19:39:70:be:0b:db:6e:32:b9:da:82:e8:
52:22:73:d7:8a:61:87:7c:b4:94:f8:c6:7e:09:27:c0:0b:71:
ab:bc:b8:e0:77:f6:b1:f4:15:bd:fa:ff:df:57:38:8c:bc:8f:
04:93:0d:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTNtV+6+ePwkW8Kk0HQSO5/2DceowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg2QzJBNUU2NDU4RUZEQzRFQjY4MzY3NUQzMkEyMzVF
NkE4MEE2ODAeFw0yNjEwMTMwNjI2NDBaFw0yNjEwMTQwODUzNDBaMDMxMTAvBgNV
BAMTKEY0MzJFQjBFREYxMzI4RjJCNzkzQTZFREY4QkRFQzUxMDY2OEJDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKhmaHVwx4gzfb14aBmKmk8h3
G6VQGvsVOD6acr0lUjBAuh5G9rtv2GKRO2wctq6OqWSYJLc9bQEJMtpjJGcXYAB0
ufg0CxeAgiRer+6Rq7fJ7XiHXpi+wNOjGlU+ShDn8dMtUlkzN1P4Ic/1bSyLW4+X
n9iCFz0zkMR/2u4WT8GRD7rTjMe8QdntCVHjs1DbaNZN39fAoRtHtQXS+9QVr6Uv
EFUQE4KUwlYAj/QDGp2WLLZwiDsn6hkPOj1bkrvYs317FTRkbgwaS9ZjljJ5SxXQ
YOeZVrPRbJ1RZ77fN/JwlOYeIpiOVKxTG/4qKwDvbpXyLaB1DhvLObQ2iLaRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9DLrDt8TKPK3k6bt+L3sUQZovPAwHwYDVR0j
BBgwFoAUaGwqXmRY79xOtoNnXTKiNeaoCmgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1SVmc5ZUJ2R25iMU5aamtoWGY0c0tvVU1OU0VvR2F1U0VXa2lqYThm
cVkvMC82ODZDMkE1RTY0NThFRkRDNEVCNjgzNjc1RDMyQTIzNUU2QTgwQTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NkMyQTVFNjQ1OEVGREM0
RUI2ODM2NzVEMzJBMjM1RTZBODBBNjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rk1SVmc5ZUJ2R25iMU5aamtoWGY0c0tvVU1OU0VvR2F1U0VXa2lqYThmcVkvMC82
ODZDMkE1RTY0NThFRkRDNEVCNjgzNjc1RDMyQTIzNUU2QTgwQTY4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANNvBJVjPINkmtfwPBMVSJTSs0zf4mFw9/Y9RWy27ludVSvt1pENOwg5apebD
3cOy8tNSw3OWRDUX9a4HGmoyPqQshfXb34Y2twoEQM4/SOTtTBhJyHrKIf0N2t+Q
mCJ4fyLLqJCEw8pDYc64ZUWjY7Vlk4ZVqk2Qmgf7pN5XRR+MSWNj9ycv2vsmt7g+
7SQdF2hS3scijwyV+qgDTp3ORDGFDpKEZnlGTpbh6xsHowp4eBbtPWDLXw2YxK6e
u7y7VT3AP7lsIAetgodWGTlwvgvbbjK52oLoUiJz14phh3y0lPjGfgknwAtxq7y4
4Hf2sfQVvfr/31c4jLyPBJMNGw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:46:00 2026 by rpki-client