
$ rpki-client -vvf rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.mft
File: 6B68B8C33AF16D3626625A435B03FEAA41F83B1C.mft (raw, json)
Hash identifier: IBJSsWzZs+4hdqq5CKkh0PEKRsDpi/V7gjot5OzjcXE=
Subject key identifier: 2E:DB:6A:B2:EC:19:83:8D:58:C4:70:FF:F0:48:25:C3:B2:A5:37:59
Authority key identifier: 6B:68:B8:C3:3A:F1:6D:36:26:62:5A:43:5B:03:FE:AA:41:F8:3B:1C
Certificate issuer: /CN=6B68B8C33AF16D3626625A435B03FEAA41F83B1C
Certificate serial: 74B1AF4EB23D34FB4C70ACDFA2D1E9FEDE199BCB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.mft
Manifest number: D9
Signing time: Thu 26 Mar 2026 13:18:42 +0000
Manifest this update: Thu 26 Mar 2026 13:13:42 +0000
Manifest next update: Fri 27 Mar 2026 16:48:42 +0000
Files and hashes: 1: 34352e362e32342e302f32322d3332203d3e20323636313138.roa (hash: ihN5lMzKHwUZqy7n0kcGvnKVDZZdtJBpB4jH9DURXfY=)
2: 323830343a336165633a3a2f33322d313238203d3e20323636313138.roa (hash: 8dqn1ua8/XaaVtMgf+jZicrsvMtzbjuTegTP9K6rHn0=)
3: 6B68B8C33AF16D3626625A435B03FEAA41F83B1C.crl (hash: DjORCYtZIYh+3nqUBGaN5L45Lw4QqCwRRE249YPEqTo=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.crl
rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 16:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b1:af:4e:b2:3d:34:fb:4c:70:ac:df:a2:d1:e9:fe:de:19:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B68B8C33AF16D3626625A435B03FEAA41F83B1C
Validity
Not Before: Mar 26 13:13:42 2026 GMT
Not After : Mar 27 16:48:42 2026 GMT
Subject: CN=2EDB6AB2EC19838D58C470FFF04825C3B2A53759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:3c:24:2e:56:3a:d5:96:9e:9c:24:cc:bc:
50:4d:a3:a4:0f:7e:35:d2:38:0a:a0:48:68:b7:b8:
2d:25:bd:eb:cb:a2:1f:11:89:bb:06:d9:bb:65:61:
ac:f5:79:22:b2:c9:25:97:f4:fe:25:b3:bb:52:ad:
bd:1c:eb:8f:01:ff:f4:e3:0f:f6:dd:5b:06:98:48:
70:86:a2:30:54:d1:b8:c5:ef:c6:5f:68:61:ea:d8:
14:88:96:8a:a1:83:a3:72:98:9d:a6:92:f0:46:af:
1f:48:95:98:44:08:84:ef:25:33:8e:06:3b:e4:3c:
09:d6:53:0f:f5:35:cd:3c:82:36:c6:f1:24:84:f8:
7e:38:a4:b7:85:9a:38:5b:2c:9a:8b:99:a5:50:9e:
31:48:60:28:4b:90:78:eb:3f:c6:12:10:12:bf:13:
c2:c6:bd:36:96:ca:bd:57:7c:6e:28:70:2e:e0:ef:
ea:eb:5b:0f:f1:11:b8:7b:d9:5a:86:ac:74:f6:e9:
ef:e5:82:ad:44:79:30:bc:0b:e5:b7:5d:74:93:0c:
fa:2a:b5:ad:d4:19:cb:78:64:12:12:79:c9:e4:52:
a1:8a:7c:91:06:4e:7e:b4:bf:18:ec:cb:be:f8:d1:
2f:45:8f:21:fc:0a:22:2d:18:f2:0d:f6:82:96:5b:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DB:6A:B2:EC:19:83:8D:58:C4:70:FF:F0:48:25:C3:B2:A5:37:59
X509v3 Authority Key Identifier:
keyid:6B:68:B8:C3:3A:F1:6D:36:26:62:5A:43:5B:03:FE:AA:41:F8:3B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f0:bf:5d:69:c3:c9:37:04:5b:b5:d2:09:22:ce:37:9b:3a:
ab:21:ba:a1:d7:bd:c5:ef:a8:e3:38:05:c4:ab:8a:57:8d:fe:
8a:24:41:a3:80:d4:04:65:fa:f5:18:80:b7:34:4e:e4:f3:19:
68:ff:75:f4:e5:3d:d3:05:f5:ee:de:8d:65:6f:eb:8b:b7:50:
b2:8e:ba:a4:7a:58:ff:bd:cf:9a:4a:97:dc:59:5b:72:0c:02:
5d:b9:1d:77:cd:da:c2:dc:25:e4:93:f6:20:ee:f6:45:c8:cf:
c0:10:a8:d1:e0:c5:93:cb:96:76:98:ae:0e:f4:1e:7a:41:03:
2c:30:e9:14:b9:e4:f7:37:68:e7:c5:18:c4:20:2e:b4:2c:a5:
0f:e7:e0:ac:d4:6c:15:01:95:71:9c:81:e0:be:02:12:34:44:
d9:e3:7e:7a:35:1e:ce:f8:87:1e:77:64:d6:f5:09:5f:3c:a6:
8f:8c:02:d9:71:fd:db:59:6a:0e:09:3b:9e:5f:ee:b5:84:1d:
83:4b:5a:d8:bc:ac:3f:d2:ce:8e:25:74:4b:5c:c1:a0:c0:8d:
4a:4f:36:ed:02:3c:b4:62:56:17:e2:80:80:97:f5:18:80:fb:
2d:cb:b8:3f:eb:f2:b4:80:e7:e8:b5:66:17:88:44:56:61:57:
25:d4:e6:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdLGvTrI9NPtMcKzfotHp/t4Zm8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI2OEI4QzMzQUYxNkQzNjI2NjI1QTQzNUIwM0ZFQUE0
MUY4M0IxQzAeFw0yNjAzMjYxMzEzNDJaFw0yNjAzMjcxNjQ4NDJaMDMxMTAvBgNV
BAMTKDJFREI2QUIyRUMxOTgzOEQ1OEM0NzBGRkYwNDgyNUMzQjJBNTM3NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVTwkLlY61ZaenCTMvFBNo6QP
fjXSOAqgSGi3uC0lvevLoh8RibsG2btlYaz1eSKyySWX9P4ls7tSrb0c648B//Tj
D/bdWwaYSHCGojBU0bjF78ZfaGHq2BSIloqhg6NymJ2mkvBGrx9IlZhECITvJTOO
BjvkPAnWUw/1Nc08gjbG8SSE+H44pLeFmjhbLJqLmaVQnjFIYChLkHjrP8YSEBK/
E8LGvTaWyr1XfG4ocC7g7+rrWw/xEbh72VqGrHT26e/lgq1EeTC8C+W3XXSTDPoq
ta3UGct4ZBISecnkUqGKfJEGTn60vxjsy7740S9FjyH8CiItGPIN9oKWW0oZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULttqsuwZg41YxHD/8Eglw7KlN1kwHwYDVR0j
BBgwFoAUa2i4wzrxbTYmYlpDWwP+qkH4OxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU55dnlLVkw4MmN4VnNrOWlxOHU0M2EzZGZXdFhIWDRBN2M1Y20xQTNU
clAvMC82QjY4QjhDMzNBRjE2RDM2MjY2MjVBNDM1QjAzRkVBQTQxRjgzQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNjhCOEMzM0FGMTZEMzYy
NjYyNUE0MzVCMDNGRUFBNDFGODNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NU55dnlLVkw4MmN4VnNrOWlxOHU0M2EzZGZXdFhIWDRBN2M1Y20xQTNUclAvMC82
QjY4QjhDMzNBRjE2RDM2MjY2MjVBNDM1QjAzRkVBQTQxRjgzQjFDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsfC/XWnDyTcEW7XSCSLON5s6qyG6ode9xe+o4zgFxKuKV43+iiRBo4DUBGX6
9RiAtzRO5PMZaP919OU90wX17t6NZW/ri7dQso66pHpY/73PmkqX3FlbcgwCXbkd
d83awtwl5JP2IO72RcjPwBCo0eDFk8uWdpiuDvQeekEDLDDpFLnk9zdo58UYxCAu
tCylD+fgrNRsFQGVcZyB4L4CEjRE2eN+ejUezviHHndk1vUJXzymj4wC2XH921lq
Dgk7nl/utYQdg0ta2LysP9LOjiV0S1zBoMCNSk827QI8tGJWF+KAgJf1GID7Lcu4
P+vytIDn6LVmF4hEVmFXJdTmmQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:46:01 2026 by rpki-client