
$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
File: 68DD457AFD87757729E657881786601BF56ED45F.mft (raw, json)
Hash identifier: rpWGckft61GRPgR1yUoLyhUzQL64dW49YaFaE8L2z4c=
Subject key identifier: CE:A1:16:27:E5:8F:42:5D:99:B9:76:D1:9C:07:5E:3F:D6:6F:8C:ED
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Certificate issuer: /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial: 0E4B4D4A21D39DE95C0DE4204E6D28C39F55AFD4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
Manifest number: F7
Signing time: Wed 25 Mar 2026 19:28:01 +0000
Manifest this update: Wed 25 Mar 2026 19:23:01 +0000
Manifest next update: Thu 26 Mar 2026 21:31:01 +0000
Files and hashes: 1: 3138392e35302e35352e302f32342d3234203d3e20323730393035.roa (hash: iDGr5F2PnwedBBe+x8uqhHnhvoHpNVzvQZV2xJFQ9Sw=)
2: 3138392e35302e35322e302f32342d3234203d3e20323730393035.roa (hash: 82plwJJTMXjlj2xQonVnYthoRgLBPcbTFJrwjSmx/Qo=)
3: 3138392e35302e35322e302f32332d3233203d3e20323730393035.roa (hash: hikPtDugUlkzkEgh8v3ypYGv8i4assWt4gSsuKVQby4=)
4: 323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (hash: 4oa2Pqqjk+v9zjeeAZuE9nPiU+p6xlCBHnTjnFWf3r4=)
5: 68DD457AFD87757729E657881786601BF56ED45F.crl (hash: HRvY4UiHVULTuQxHefAkgqvs+2fRPmhBbMQ3Oc7tkFY=)
6: 323830343a373334343a3a2f33332d3333203d3e20323730393035.roa (hash: f+IuAr2PdhB8vRwaHvOEUwIs2xnnXXsBPgFKYRki9wQ=)
7: 3138392e35302e35342e302f32342d3234203d3e20323730393035.roa (hash: BnDJoD7mm5smVqJlLLxtTMXUDEMSimPQmN20SZOwM2Y=)
8: 323830343a373334343a383030303a3a2f33332d3333203d3e20323730393035.roa (hash: ttC17iKoaXN/NHlBJJiZDxSbyY0c4jv5VcBx7nhU3HY=)
9: 3138392e35302e35322e302f32322d3232203d3e20323730393035.roa (hash: ALsUwVg1b91mWEVv1JossW/UxBJrUroC7KfEigoH8iA=)
10: 323830343a373334343a383030303a3a2f33342d3334203d3e20323730393035.roa (hash: zSZBOT/eEVH4NopCJ1NOtzvZrj354yQ3o7Ai1Ha7OrM=)
11: 3138392e35302e35332e302f32342d3234203d3e20323730393035.roa (hash: gL+ccQ4alihUg3XraYKW83JDWF98wjKhykPSIRaI5Do=)
12: 323830343a373334343a3a2f33322d3332203d3e20323730393035.roa (hash: b0E96RajeTelki/RKd4yUSyPNuDlQOK6caHY9E0TRNU=)
13: 3138392e35302e35342e302f32332d3233203d3e20323730393035.roa (hash: r34Bj3NOi8J7wSWAiNV1mRpqUrAk2TST4VuligD84dg=)
14: 323830343a373334343a633030303a3a2f33342d3334203d3e20323730393035.roa (hash: eMHbpvQgswRZVwXpdLiCqm5u80LIeU0ewBIU4ClX0EA=)
15: 323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (hash: W6gEhC0BdyjXA01tT7J7K2zLIa0l8RKWQqfOCow1TBM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 21:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4b:4d:4a:21:d3:9d:e9:5c:0d:e4:20:4e:6d:28:c3:9f:55:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
Validity
Not Before: Mar 25 19:23:01 2026 GMT
Not After : Mar 26 21:31:01 2026 GMT
Subject: CN=CEA11627E58F425D99B976D19C075E3FD66F8CED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:a4:1e:2b:ff:07:04:0a:c2:16:ad:bb:f5:
dd:07:e6:24:ca:83:a0:8b:bd:c6:5b:2f:8b:f5:9b:
7f:a2:56:0e:7c:a0:92:06:51:5e:fe:2d:5b:7e:b9:
34:6a:cd:9a:2a:a2:f0:d6:e5:b7:0b:06:d9:b6:87:
e9:b4:12:f9:10:e7:bf:5e:f2:80:69:6e:50:c8:61:
be:1c:11:1e:10:e3:0f:73:dc:a7:e7:5a:70:c6:b1:
9f:4c:ee:ea:b1:89:88:5f:0e:04:0a:80:93:7d:a8:
77:24:63:d4:3b:1a:54:b7:13:d3:b9:38:29:15:5b:
9d:39:d1:ba:4d:64:bf:f9:95:fe:a0:68:e5:9f:99:
ab:86:9d:75:46:67:81:11:0b:78:82:fb:e8:41:4f:
aa:4c:ad:29:99:92:3d:1a:9c:55:73:e6:98:5a:53:
14:c3:fc:85:ba:8c:bf:34:78:56:65:09:81:f5:ae:
7c:99:f1:c9:4f:e0:92:3a:ec:17:0f:97:ec:26:d5:
53:a7:59:41:00:4a:16:a2:e3:07:3a:fd:e4:b3:84:
51:12:97:fd:14:de:2e:32:96:ee:d2:b0:05:08:37:
4c:88:47:1b:5f:9f:48:5a:70:03:ec:5c:1b:bf:cc:
a9:07:80:d6:62:08:d9:8b:f1:07:3a:27:d5:ca:6c:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:16:27:E5:8F:42:5D:99:B9:76:D1:9C:07:5E:3F:D6:6F:8C:ED
X509v3 Authority Key Identifier:
keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:30:cc:8a:d6:a0:03:a3:b2:65:02:a8:73:00:ca:d5:53:92:
55:3a:bd:43:e0:20:9e:22:e7:e3:04:56:f2:90:b7:9e:b7:2a:
2a:58:1a:49:fd:88:06:2e:8a:ee:8d:8f:59:ba:a4:6e:9c:88:
29:c5:cd:85:9d:da:64:f1:68:e6:a8:9b:16:97:2c:5f:87:48:
92:65:0e:f7:bf:6b:ea:71:fe:67:b1:51:aa:96:59:c8:4d:f8:
1e:43:be:ef:10:33:c9:91:d8:4f:1f:5c:e9:2c:38:f3:34:ac:
7d:1e:f2:fd:77:09:0f:b1:c9:d6:42:5f:bd:24:48:d2:24:df:
6d:a6:b8:bb:8c:f8:fc:99:22:f9:f8:29:1d:c5:d3:33:44:46:
b3:1f:45:dc:e6:4b:4c:e7:6a:4d:69:7f:61:27:2c:2e:ba:34:
ec:1f:d8:45:5f:3f:24:cf:17:b5:ed:68:21:91:4e:cd:63:1c:
c6:d6:6e:7e:c2:aa:9f:16:fa:b6:c1:b8:d5:d4:9d:55:27:cb:
c7:47:3f:b5:9c:89:2e:d7:c9:51:63:fa:4a:32:dc:bf:3d:71:
92:5c:b7:74:1b:24:31:dc:fb:5c:92:be:5f:d0:91:f5:42:64:
bc:a2:20:96:80:c2:41:1d:35:53:93:ba:c5:10:f3:cb:4d:c9:
67:7c:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:01:19 2026 by rpki-client