
$ rpki-client -vvf rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
File: DDA4FC5B8E458E28765A866099AD929BAF665339.mft (raw, json)
Hash identifier: qRDgvkUdtiEQUfPFxbja2pK0jMU+L3E8jUQdeTKZt+Y=
Subject key identifier: 8C:88:90:08:46:AE:F8:70:35:2C:92:4F:80:57:1D:78:18:E6:C9:6B
Authority key identifier: DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
Certificate issuer: /CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Certificate serial: 238FC59EDEADC94F29578C89D4EDBC05C3FB56D8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
Manifest number: 0308
Signing time: Thu 09 Apr 2026 05:40:34 +0000
Manifest this update: Thu 09 Apr 2026 05:35:34 +0000
Manifest next update: Fri 10 Apr 2026 07:21:34 +0000
Files and hashes: 1: 3138372e37332e3138342e302f32322d3234203d3e20323730353137.roa (hash: nMQXkBs+poUjtuyc4CkiehDpQxelS0VJ1cjAIr/UgbA=)
2: 323830343a366432633a3a2f33322d313238203d3e20323730353137.roa (hash: FgEv7DHx8gpoUEHmCHDzneQcmOGaXyHJxKnB2umwj5Q=)
3: DDA4FC5B8E458E28765A866099AD929BAF665339.crl (hash: fkdVkI0TxZPiNI98q3/deF7Gc5XFVlG25V2E9vNYgeM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 07:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8f:c5:9e:de:ad:c9:4f:29:57:8c:89:d4:ed:bc:05:c3:fb:56:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA4FC5B8E458E28765A866099AD929BAF665339
Validity
Not Before: Apr 9 05:35:34 2026 GMT
Not After : Apr 10 07:21:34 2026 GMT
Subject: CN=8C88900846AEF870352C924F80571D7818E6C96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:d3:b3:5a:b2:71:55:28:c2:6b:c4:73:a8:
01:d1:48:83:be:4c:86:e8:ac:37:9d:6e:44:86:6d:
70:33:95:9f:6e:16:27:42:e5:fd:ca:1d:e4:ad:56:
93:07:39:97:5f:03:db:2e:6d:70:b2:d7:00:a1:49:
f7:da:56:ee:5d:ef:43:a1:e1:52:60:0e:10:eb:fe:
68:08:38:35:aa:60:a5:bb:ec:9c:7c:fc:a9:af:57:
f9:7a:6e:d1:ec:d9:14:26:ad:9a:48:43:3f:d5:bd:
55:c9:db:b5:3a:2c:dc:a9:40:67:c3:da:3c:e5:b8:
d2:90:f9:b3:93:95:88:94:d8:26:72:d9:82:17:60:
98:59:3b:42:df:2a:ac:72:43:92:06:d2:43:f8:79:
c0:99:ee:1a:bf:aa:f8:c0:01:13:a2:f6:91:ac:7d:
b8:87:46:42:9e:9f:15:2d:1c:15:ad:c2:36:1e:1e:
ad:9b:92:ef:92:d5:2f:45:88:cf:2f:53:ef:94:bb:
a4:fc:c0:0c:10:1f:fa:bb:c6:c1:f6:bd:c0:81:f9:
59:a5:87:1f:32:c5:e2:e1:5a:89:78:5c:44:0a:e5:
17:cf:29:7c:bb:cd:7f:46:d1:85:16:14:81:04:93:
4b:23:36:8e:87:c6:60:22:11:ae:6f:c4:43:e3:52:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:90:08:46:AE:F8:70:35:2C:92:4F:80:57:1D:78:18:E6:C9:6B
X509v3 Authority Key Identifier:
keyid:DD:A4:FC:5B:8E:45:8E:28:76:5A:86:60:99:AD:92:9B:AF:66:53:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA4FC5B8E458E28765A866099AD929BAF665339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hNZxbWv3kwiYsB9PuxoJndBmScRbthhtZPLbfF22LJe/0/DDA4FC5B8E458E28765A866099AD929BAF665339.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:bb:ea:e5:4a:41:59:94:3c:cc:82:0d:ca:a1:e5:57:b7:
eb:e8:b8:9a:63:ec:a2:fc:d8:5f:26:ba:42:9e:c3:98:f1:ff:
69:90:df:48:82:d2:7d:28:9a:b9:6e:1d:db:d7:27:41:7e:5e:
fc:2d:7e:97:6a:b5:f0:d8:51:da:d3:21:80:70:10:4d:4c:c0:
86:ae:74:6b:d8:b3:91:ea:20:62:d8:9b:ba:03:86:ca:9e:55:
c7:04:30:b1:f3:d4:38:5c:09:34:79:ae:a8:1d:6f:ff:50:0f:
cf:1f:6a:bd:8b:19:7e:85:33:a3:94:cf:bc:81:9c:de:64:91:
25:6f:81:1a:ef:6e:7a:21:df:a2:3f:73:d0:c0:cf:7e:99:11:
c4:4b:03:8e:94:3c:dd:ae:88:f0:6f:5e:f7:b2:92:3b:15:bc:
19:09:02:ce:54:e5:a6:f4:01:ed:a9:10:39:cd:2b:90:ce:03:
bc:8d:ee:55:1c:15:07:0a:18:6b:8a:26:e3:f9:73:55:26:e9:
47:dc:39:d6:5b:2a:32:64:cc:20:c5:ea:a4:f2:3f:d4:ad:7e:
62:2b:60:46:2c:ec:d3:ea:05:6d:f8:87:32:b2:c7:b5:4d:38:
46:4f:d9:b6:21:1c:86:61:7a:56:93:29:57:9b:92:ec:b4:aa:
37:40:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:43:13 2026 by rpki-client