
$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json)
Hash identifier: YDrKfhlSiNGowpKUW1y4BniV24OA3LTrVeKBnthpMEA=
Subject key identifier: F2:20:04:57:98:39:DD:87:FC:EB:79:5C:00:05:22:A7:52:BF:0A:C0
Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Certificate serial: 4B87E77AF66B751B5D388A12A5E91D64FEA25411
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
Manifest number: 036E
Signing time: Mon 02 Mar 2026 11:54:14 +0000
Manifest this update: Mon 02 Mar 2026 11:49:14 +0000
Manifest next update: Tue 03 Mar 2026 13:48:14 +0000
Files and hashes: 1: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: op+Nq++Vd6+My6uA3/KlasvfQNoEM0uf/SrWuLD5iTg=)
2: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: FG1wug4MqyLJsAReVjvXRe7puwgFUXpXXwbr9j3w0ZI=)
3: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 13:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:87:e7:7a:f6:6b:75:1b:5d:38:8a:12:a5:e9:1d:64:fe:a2:54:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570
Validity
Not Before: Mar 2 11:49:14 2026 GMT
Not After : Mar 3 13:48:14 2026 GMT
Subject: CN=F22004579839DD87FCEB795C000522A752BF0AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:3f:38:9d:4c:ec:11:01:67:aa:1d:0b:d8:
38:27:1f:69:43:65:55:58:bd:45:7f:3a:45:85:c1:
39:7f:e6:5e:fb:1b:bd:66:c2:0f:78:ba:ab:03:a3:
eb:29:6d:cc:7f:09:ec:3a:28:26:03:70:06:c6:7d:
5f:15:09:de:d6:aa:60:66:07:36:ea:1a:b0:6b:4d:
4d:13:ea:b8:8d:25:f3:45:00:e2:f7:01:ee:49:e6:
b6:3e:7b:ea:cd:2b:16:59:15:a2:6b:82:28:a9:f6:
64:bc:41:ed:49:e2:68:cc:ff:cc:de:8a:d6:17:02:
d8:1e:6d:54:b1:cb:68:f9:32:fb:38:64:0d:b1:04:
7a:13:52:a8:2c:86:fa:fb:d5:83:bd:5b:b2:0d:3b:
18:9b:53:89:84:0c:52:e2:32:4a:b0:f3:e5:f3:b8:
0f:61:ba:f6:6d:39:95:16:6a:ee:cb:7f:87:02:10:
24:80:97:83:8e:cb:c7:4a:0e:01:d7:b2:f6:39:cc:
a6:72:13:65:be:ea:e8:55:2c:9c:c5:e7:96:bc:55:
93:86:fe:c6:6f:6c:1c:48:a5:f1:5a:5c:ed:66:b3:
52:75:d3:1f:90:58:fc:6e:a7:7e:09:01:40:53:3d:
bc:56:b8:ec:b8:44:f7:d0:ea:b6:7a:cb:40:84:48:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:04:57:98:39:DD:87:FC:EB:79:5C:00:05:22:A7:52:BF:0A:C0
X509v3 Authority Key Identifier:
keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4b:75:38:a1:6f:07:d7:d2:5f:d8:36:47:72:5f:34:6e:d8:
f2:ed:8d:5e:43:0f:18:91:49:39:83:9f:c3:d5:f1:22:50:8a:
ec:0d:08:9f:88:1c:47:97:20:45:7b:f3:95:99:09:72:13:f5:
11:6c:f4:2b:8c:96:73:57:61:32:23:13:3e:99:cd:b8:a6:9f:
d6:f6:b6:72:f5:6a:33:02:47:cd:68:03:ca:ba:e7:d6:80:56:
9c:c3:63:64:86:7b:d5:9a:9c:16:1e:80:c6:9a:82:ac:3c:15:
f3:0d:fc:36:67:51:dd:cd:b7:a7:c5:98:03:af:14:38:8b:4f:
85:24:cc:2b:44:36:36:e1:7d:63:43:26:65:58:3f:b2:2c:3d:
a2:4a:b1:25:92:6f:d1:04:1b:3c:3c:a4:da:21:d6:f4:e3:c4:
c9:bf:29:7e:8e:37:5d:c4:76:cb:fd:6c:04:e8:f0:93:5e:03:
bc:3c:a2:d9:54:8a:40:bf:f1:c9:57:0a:5c:16:dd:20:b5:1c:
ee:42:7b:66:ff:8d:88:0c:f2:a9:ee:ab:75:c2:5d:6a:32:0f:
98:ed:02:1f:2d:ac:e4:72:08:ef:29:48:95:71:b2:32:8c:f5:
05:07:47:9a:c4:46:43:70:df:f0:7e:c2:f3:9c:9f:b7:e2:9f:
6b:14:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:18:32 2026 by rpki-client