
$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json)
Hash identifier: qtnyuinecrdLDDDPoLa+VKv0/CQ181auAR4YaM1XOPc=
Subject key identifier: E9:8E:5C:95:B3:35:67:B7:60:70:10:BB:D5:02:56:CA:84:BF:00:31
Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D
Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
Certificate serial: 06B4A0522649BCDAACEC7D29D03B5B580E6F4788
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
Manifest number: 021C
Signing time: Tue 12 May 2026 20:17:09 +0000
Manifest this update: Tue 12 May 2026 20:12:09 +0000
Manifest next update: Wed 13 May 2026 23:21:09 +0000
Files and hashes: 1: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: mYcu1MZK68DUcNdnKW4LQA9C+SawpaBLKo0KqPDDSCw=)
2: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: drFcEZwcmJg5a5J1TDCy/MOfZOFAjl8SjdK57nxsSlE=)
3: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: pDt2fiqKSWhlRQAneHN7FkyzxfzrqFIcZwYerBRioM4=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl
rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 13 May 2026 23:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b4:a0:52:26:49:bc:da:ac:ec:7d:29:d0:3b:5b:58:0e:6f:47:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
Validity
Not Before: May 12 20:12:09 2026 GMT
Not After : May 13 23:21:09 2026 GMT
Subject: CN=E98E5C95B33567B7607010BBD50256CA84BF0031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:a8:7d:5a:48:d4:ec:d8:53:56:dc:b2:da:
a6:9d:ec:88:d6:73:98:e9:dd:8e:60:24:4d:30:c3:
28:7c:39:6d:01:e8:33:b4:8c:74:ba:ad:67:6b:96:
ab:e0:86:f7:4c:f2:28:80:c3:9a:82:43:bf:bb:c9:
97:17:0d:f8:f1:40:84:3e:62:28:e5:f2:f9:b2:b5:
30:95:0c:f2:db:a0:28:b9:5a:6f:b5:47:17:2e:3a:
20:4d:76:d5:13:f4:80:1f:c3:43:25:be:57:6f:9c:
75:57:3f:ec:c6:5f:42:4d:d4:f5:8b:9c:bc:7f:ad:
10:12:ef:40:d1:20:20:b4:f8:35:63:6e:15:40:f3:
1a:b7:79:c0:ad:4d:19:76:f5:ff:fb:1b:49:e1:5b:
7f:a0:9c:36:33:bc:01:a5:9a:3b:8b:a0:69:25:ec:
32:ef:d0:97:f5:91:f9:0a:48:ff:50:74:01:85:dc:
4e:cf:27:67:e2:c5:42:2f:9a:59:19:68:48:45:1b:
7d:8d:cf:c5:ba:d9:db:31:2a:83:28:2f:af:8d:4a:
94:1f:c7:0e:34:e2:14:b0:78:18:c4:e9:b3:10:5f:
99:50:ec:54:98:54:6d:be:64:d1:96:07:e7:73:f1:
38:84:b5:91:c1:aa:ec:d0:bf:81:e7:e3:81:af:70:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:5C:95:B3:35:67:B7:60:70:10:BB:D5:02:56:CA:84:BF:00:31
X509v3 Authority Key Identifier:
keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:2a:e1:57:e2:b2:c7:be:86:30:03:c4:c8:43:4d:5b:0d:
d9:e6:60:7b:7e:91:46:cf:ac:76:56:33:cb:c8:0b:eb:e8:cb:
5e:97:8e:80:b0:6c:40:ed:82:08:67:0e:2d:e2:3e:85:6f:67:
b5:89:f1:e7:d4:0f:18:69:1f:50:cc:50:2a:28:c2:71:84:6a:
ec:29:e4:db:be:4b:dd:68:4c:dc:38:92:1e:15:ef:ff:ba:72:
4e:b6:46:4d:36:05:90:65:73:e6:2d:40:0a:c8:09:1b:67:3d:
a5:99:54:a7:25:63:df:96:fb:bd:d1:2b:ec:62:a4:e2:b8:9f:
a7:0f:4f:6e:22:39:fb:e9:d7:b9:70:6d:9e:53:2a:11:12:19:
95:7b:50:e7:38:5f:cb:72:91:42:23:0f:5b:77:a5:ee:74:1c:
f2:72:06:29:e8:9f:b4:72:5a:b7:62:71:de:21:3d:7f:ad:d7:
90:ee:3a:3e:2c:ef:98:cb:53:b6:93:e0:4c:9b:23:bc:06:c7:
ef:72:cc:a3:d0:4f:4e:ae:34:3c:e5:9e:89:fe:72:22:72:21:
2a:3f:8b:9d:a2:37:4b:5b:f2:3c:14:2f:5c:6d:8d:85:d3:c5:
ef:bb:aa:2a:b0:4e:1a:36:eb:ed:02:7b:36:ee:1a:82:72:51:
96:d2:a0:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBrSgUiZJvNqs7H0p0DtbWA5vR4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF
QzREMEI3RDAeFw0yNjA1MTIyMDEyMDlaFw0yNjA1MTMyMzIxMDlaMDMxMTAvBgNV
BAMTKEU5OEU1Qzk1QjMzNTY3Qjc2MDcwMTBCQkQ1MDI1NkNBODRCRjAwMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwah9WkjU7NhTVtyy2qad7IjW
c5jp3Y5gJE0wwyh8OW0B6DO0jHS6rWdrlqvghvdM8iiAw5qCQ7+7yZcXDfjxQIQ+
Yijl8vmytTCVDPLboCi5Wm+1RxcuOiBNdtUT9IAfw0MlvldvnHVXP+zGX0JN1PWL
nLx/rRAS70DRICC0+DVjbhVA8xq3ecCtTRl29f/7G0nhW3+gnDYzvAGlmjuLoGkl
7DLv0Jf1kfkKSP9QdAGF3E7PJ2fixUIvmlkZaEhFG32Nz8W62dsxKoMoL6+NSpQf
xw404hSweBjE6bMQX5lQ7FSYVG2+ZNGWB+dz8TiEtZHBquzQv4Hn44GvcHbdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU6Y5clbM1Z7dgcBC71QJWyoS/ADEwHwYDVR0j
BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy
dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG
MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E
RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaWEq4Vfisse+hjADxMhDTVsN2eZge36RRs+sdlYzy8gL6+jLXpeOgLBsQO2C
CGcOLeI+hW9ntYnx59QPGGkfUMxQKijCcYRq7Cnk275L3WhM3DiSHhXv/7pyTrZG
TTYFkGVz5i1ACsgJG2c9pZlUpyVj35b7vdEr7GKk4rifpw9PbiI5++nXuXBtnlMq
ERIZlXtQ5zhfy3KRQiMPW3el7nQc8nIGKeiftHJat2Jx3iE9f63XkO46PizvmMtT
tpPgTJsjvAbH73LMo9BPTq40POWeif5yInIhKj+LnaI3S1vyPBQvXG2NhdPF77uq
KrBOGjbr7QJ7Nu4agnJRltKgOg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:07:01 2026 by rpki-client