
$ rpki-client -vvf rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
File: DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft (raw, json)
Hash identifier: TPOZHiddd5hhMP10yh0kU9Jbn3imeDfsDuCLvB1IZ28=
Subject key identifier: C4:62:3A:70:93:11:B8:CD:19:53:54:BB:54:24:E6:95:7B:66:79:D5
Authority key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D
Certificate issuer: /CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
Certificate serial: 60D120FBF817A45B957613B33F26DB6D39B80A9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
Manifest number: 02E2
Signing time: Wed 25 Mar 2026 19:57:22 +0000
Manifest this update: Wed 25 Mar 2026 19:52:22 +0000
Manifest next update: Thu 26 Mar 2026 20:10:22 +0000
Files and hashes: 1: DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl (hash: 0RmY72eR5kDiGrCOJ1fyB43DBiDojAmbrxVfA1lkkRo=)
2: 323830343a363162343a3a2f33322d313238203d3e20323639323531.roa (hash: vTMSQ0NcGNW7SwsUL0mwA0ATgC9+9p6vx7LJ6LWK5rc=)
3: 34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa (hash: xSMmFAAWq1u+fIRT1VfC0jFrGbToGjtqVCKo6TuGZ48=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl
rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 26 Mar 2026 20:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d1:20:fb:f8:17:a4:5b:95:76:13:b3:3f:26:db:6d:39:b8:0a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
Validity
Not Before: Mar 25 19:52:22 2026 GMT
Not After : Mar 26 20:10:22 2026 GMT
Subject: CN=C4623A709311B8CD195354BB5424E6957B6679D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:a1:61:ae:77:82:f8:63:6b:f2:eb:9d:ae:
ad:f2:ad:96:33:5d:f7:fb:f8:87:14:91:15:69:0c:
60:7d:0e:61:41:15:66:3d:0d:f0:14:1a:f2:53:88:
07:32:7f:93:f3:11:15:2e:b8:b7:83:07:39:30:c5:
88:c6:1b:5b:b8:13:12:60:30:b1:d3:16:57:11:fb:
ea:32:ac:a5:9d:b9:fb:39:78:9c:0e:36:af:d4:87:
9c:9c:ff:38:6c:21:db:fe:68:32:63:45:95:37:d2:
83:95:da:6c:a9:ac:c4:2a:b9:19:01:3e:df:7c:e4:
de:b0:37:b6:e9:94:ba:ae:21:6b:d2:0e:97:d5:d6:
7d:e9:0f:9a:3f:69:08:07:e1:12:90:3a:8b:dc:ca:
51:75:08:c9:31:5a:cc:2a:4a:26:66:c6:af:62:75:
10:fb:f2:55:ec:91:f0:76:d2:7d:c9:02:7e:ec:ce:
88:c1:b1:88:bb:26:0c:32:28:4d:43:27:8d:72:04:
12:7f:b5:97:03:6f:7b:7d:77:94:da:d8:c1:0c:63:
59:6b:47:71:15:8b:18:0d:68:11:a5:5c:06:4f:3c:
34:26:d8:36:29:a2:5d:4d:18:35:83:5f:49:71:cd:
ca:27:44:9d:5b:ee:49:69:44:ac:10:6a:35:93:3f:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:3A:70:93:11:B8:CD:19:53:54:BB:54:24:E6:95:7B:66:79:D5
X509v3 Authority Key Identifier:
keyid:DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8f:0a:b7:47:46:2b:ac:96:58:3d:21:b5:5d:8d:99:47:87:
6c:da:ac:2f:56:34:18:fc:52:b9:24:44:8d:5d:56:3a:6a:1d:
9b:ae:97:c1:91:0b:34:58:6a:c5:3d:41:77:15:7a:ef:d7:57:
95:e7:cd:cb:13:b6:f9:43:59:e8:e5:27:fa:bb:40:72:35:2c:
ff:b4:be:5d:91:39:f1:89:f6:3f:f6:64:10:ef:8d:13:d8:f3:
6a:e7:24:7f:e8:0a:d6:16:ff:62:98:dd:ca:40:d5:8f:08:df:
ce:05:6c:43:29:b2:41:4f:82:61:05:ac:c0:26:2d:d6:f7:c8:
3c:ed:f1:03:97:0c:11:9b:b7:61:00:cc:01:3b:f0:c7:ef:f4:
e8:91:fa:93:7d:ff:10:1a:dc:75:c9:62:2d:7e:69:57:a2:a7:
83:47:e2:05:d7:c7:07:d4:53:cf:96:f0:a4:bf:de:97:61:68:
fb:9e:90:05:db:49:28:ab:6b:0a:92:d2:4e:a4:55:ee:26:11:
23:d3:21:b7:f4:4e:32:2d:ee:1c:e0:64:76:3f:5f:e3:a9:8b:
15:16:04:7d:74:69:1f:e5:95:b6:d6:ca:c3:be:7a:cc:1a:58:
13:cf:c8:d5:f3:a5:96:d5:06:a4:45:9d:7c:33:a1:3f:40:da:
87:11:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:59:30 2026 by rpki-client