
$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File: DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier: fbRQYEPpsSqDyKO32FxVhoWgOcjzVaRpZmU9bsxFhLs=
Subject key identifier: 37:EC:38:DE:C5:CC:9C:00:75:38:6E:F3:A5:04:A8:02:64:16:F9:2E
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer: /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial: 033DCFBA3B9ABA0799FCD3B9FF39E684DB3260EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number: 0335
Signing time: Wed 13 May 2026 11:33:54 +0000
Manifest this update: Wed 13 May 2026 11:28:54 +0000
Manifest next update: Thu 14 May 2026 12:48:54 +0000
Files and hashes: 1: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: FgEv7DHx8gpoUEHmCHDzneQcmOGaXyHJxKnB2umwj5Q=)
2: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=)
3: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: ZHYWGIuTAYvJwUUpfj9BxZwRLYxCgwkrZy9jDCP0Oow=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 14 May 2026 12:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3d:cf:ba:3b:9a:ba:07:99:fc:d3:b9:ff:39:e6:84:db:32:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Validity
Not Before: May 13 11:28:54 2026 GMT
Not After : May 14 12:48:54 2026 GMT
Subject: CN=37EC38DEC5CC9C0075386EF3A504A8026416F92E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:5c:f3:04:0e:f4:1a:1c:ff:f9:07:eb:95:
ba:c6:9f:fe:bc:65:82:dc:05:6d:51:17:36:f4:3f:
6f:ef:94:10:c3:66:5a:f2:e3:33:4a:26:3e:e0:6d:
b9:2f:8d:f7:1a:c3:f7:5c:ff:2d:31:ba:13:87:84:
01:2d:4e:16:50:24:24:b6:a0:cf:d6:0f:48:31:ef:
f3:94:a5:5e:f5:59:cd:94:73:95:7f:1e:fa:08:9b:
bb:17:e3:2c:cb:77:2d:f6:0f:1b:e8:08:4b:ae:43:
ea:69:33:1b:4a:05:c5:67:99:7b:85:d5:50:b6:ea:
fc:50:c6:ac:56:b8:ad:7e:1a:17:f5:cf:20:6c:8d:
a1:94:4f:e9:bf:c9:ef:5e:f9:9f:c6:bf:02:ea:53:
d5:b6:0a:a0:f1:a1:33:e5:fa:5c:9c:e6:51:c7:de:
22:d8:28:80:47:3d:20:85:5f:eb:2a:77:d2:61:f2:
db:5f:87:e9:a8:0f:f6:1e:8f:15:4e:3b:d7:b6:63:
f1:73:88:f1:4e:d7:b3:f1:1e:55:cf:f3:46:65:5d:
62:6a:93:30:1e:70:f6:e5:47:fc:65:c0:ca:60:4c:
fb:8a:5c:06:9f:1f:17:8f:74:f8:0f:1e:d7:bd:5f:
5d:6d:72:59:d6:e5:c1:79:ab:4a:34:4d:dd:51:c3:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:38:DE:C5:CC:9C:00:75:38:6E:F3:A5:04:A8:02:64:16:F9:2E
X509v3 Authority Key Identifier:
keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a6:dd:5a:d7:b0:ed:8d:7e:57:d8:9e:e4:13:cd:07:85:9d:
50:41:04:3f:3b:d7:d9:45:fa:c1:90:af:9c:f6:1b:b0:a7:b6:
f2:22:1d:94:aa:e6:5c:2a:cc:11:9a:70:16:74:3e:c2:2d:1e:
c7:48:e9:33:5f:fb:7e:cb:4d:bf:b9:cc:25:9e:1f:fb:7f:99:
b4:35:e3:e0:e6:a9:a9:fc:5f:02:70:c0:eb:2d:88:f4:1d:6f:
46:4e:79:81:81:e5:fd:34:4f:4d:c2:77:fa:e1:cb:06:6f:57:
8e:fe:46:f8:e8:f5:f6:57:f9:c5:5b:2c:f6:84:01:73:c6:2a:
9b:aa:8a:d6:2f:fd:7a:bf:4d:17:75:23:f8:20:18:22:eb:c7:
55:cf:a2:71:34:89:fe:07:9b:7b:db:ed:a0:b0:cc:f5:3b:6b:
f3:1e:72:77:77:71:7f:10:7e:d8:e4:f7:40:68:93:7d:9d:57:
7b:9d:b3:95:fc:87:5d:41:f2:4e:53:db:4c:eb:00:5d:87:10:
7a:1a:7d:37:8e:04:cc:33:a1:40:c8:3a:64:05:6d:d2:10:42:
de:c2:75:99:ae:dc:92:07:aa:6e:d4:cc:34:59:f7:8a:9b:01:
bf:f0:f9:16:50:2d:42:df:e2:45:95:df:f0:e2:5a:38:61:b0:
14:ee:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:32:52 2026 by rpki-client