
$ rpki-client -vvvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft
File: 00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft (raw, json)
Hash identifier: RV9MVvz79PYk7nP2KA5wJjBjmCukWvkAgcTskFtKUz8=
Subject key identifier: 3A:9D:50:00:1D:9D:3B:66:48:DA:52:D0:E2:BF:78:7B:AC:99:06:30
Authority key identifier: 00:68:9E:8D:22:12:FB:49:7B:22:6E:0F:3C:68:38:7F:FD:2D:22:B3
Certificate issuer: /CN=00689E8D2212FB497B226E0F3C68387FFD2D22B3
Certificate serial: 63E4BEFE17BDE334747E0755C1E320B8B52AFC4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft
Manifest number: 99
Signing time: Tue 27 Oct 2026 18:02:19 +0000
Manifest this update: Tue 27 Oct 2026 17:57:19 +0000
Manifest next update: Wed 28 Oct 2026 19:32:19 +0000
Files and hashes: 1: 00689E8D2212FB497B226E0F3C68387FFD2D22B3.crl (hash: l+B0ZAZalPOwxX+GDz4CVHsmm78SndvWIUhJ8mA9tbw=)
2: 323830343a393335633a3a2f33322d3634203d3e20323734373732.roa (hash: vn9ehD7ygHLp3tOVBLANknU7UWzgQHwSYTyA795bhUs=)
3: AS274772.asa (hash: Vz0yCIZXZKR3pbtze2/PxGeEly1CvDKKj9hcVNPGBOo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.crl
rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Oct 2026 19:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e4:be:fe:17:bd:e3:34:74:7e:07:55:c1:e3:20:b8:b5:2a:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00689E8D2212FB497B226E0F3C68387FFD2D22B3
Validity
Not Before: Oct 27 17:57:19 2026 GMT
Not After : Oct 28 19:32:19 2026 GMT
Subject: CN=3A9D50001D9D3B6648DA52D0E2BF787BAC990630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:1d:dc:96:95:4e:56:33:57:8f:30:e8:7a:
00:e2:29:38:da:ff:09:10:ef:fa:f8:10:96:7c:d3:
c1:19:19:fb:35:6c:33:cc:99:09:6e:23:e8:49:e0:
3f:d1:a2:a6:81:d2:2f:ef:9a:7f:77:1c:35:61:8f:
42:c2:9a:be:01:64:38:53:6a:8c:81:8b:c7:c8:0e:
35:e6:f7:56:95:da:f6:8e:df:8d:85:c3:54:1c:a2:
6f:fb:9e:21:63:24:91:fc:8a:ac:48:63:8b:ce:c1:
f4:a2:2d:6b:c1:f9:61:2f:09:5c:9c:ff:d8:76:84:
95:0a:a3:e5:66:d3:2f:51:99:87:68:65:b6:41:a1:
52:a9:da:d7:b6:09:22:23:e1:69:b5:73:9a:a4:40:
57:1b:3e:2d:a8:de:d8:7c:54:2f:f8:c2:57:af:64:
8c:9b:b8:55:a2:67:c8:73:a3:4f:b1:d2:91:48:4e:
22:99:8a:0e:79:d6:2a:0d:b7:d7:bc:48:e5:79:38:
6d:3d:42:42:03:ef:5d:c2:26:e2:35:40:31:b0:db:
c4:c6:3e:44:f7:94:b4:a2:79:75:b5:4e:25:16:4c:
29:b8:f0:17:70:d4:3d:4c:e7:7e:1a:0f:eb:e1:f7:
82:0c:c3:c9:eb:4e:cd:d7:cb:38:05:f3:29:3f:83:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:50:00:1D:9D:3B:66:48:DA:52:D0:E2:BF:78:7B:AC:99:06:30
X509v3 Authority Key Identifier:
keyid:00:68:9E:8D:22:12:FB:49:7B:22:6E:0F:3C:68:38:7F:FD:2D:22:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:4f:78:70:db:5b:e4:d1:60:0b:14:1d:e2:e2:93:aa:ae:
0d:b2:9c:b6:09:ac:8b:dc:94:19:1e:36:da:e3:4a:fc:ca:a8:
a0:fe:e9:4c:87:f4:00:eb:7c:31:f2:b0:87:2e:0e:f9:37:6e:
bd:38:85:6a:63:07:85:e8:f8:4e:91:fb:75:87:bb:ab:bb:8b:
a6:ca:54:15:54:fe:9c:af:e0:95:c1:e4:6e:72:73:1d:b6:23:
6b:be:79:61:e3:8e:67:d4:0f:f1:64:9d:c9:b9:aa:8a:d5:0c:
78:98:45:43:7c:6e:41:67:eb:9b:98:20:ba:be:2b:26:78:63:
d9:36:b4:a0:fc:e9:e9:70:37:16:49:0a:0b:2a:5e:06:35:e6:
11:63:ee:e0:6c:97:0e:de:11:a5:40:ef:5e:05:1f:8e:5d:ef:
ca:3a:f1:57:e5:d7:10:c7:56:0b:9e:a0:f3:c1:a9:c1:3b:0b:
ec:95:fa:11:be:a0:63:ce:b1:4b:f5:01:1d:2c:79:07:ca:5b:
9c:e1:87:dd:b2:fc:9a:b7:85:bc:04:21:97:f4:54:52:15:a0:
f5:e7:4e:2a:5e:c8:65:2c:e5:b7:f6:4b:92:84:86:82:4d:04:
23:79:c1:e6:3e:b2:4e:96:52:d4:77:6e:9f:ae:e4:79:85:82:
6f:84:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:59:38 2026 by rpki-client