$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json) Hash identifier: RHTl9fJRD42IJ3GdtUOAhBnIc9f0NP4ZfL2BV/uLrPU= Subject key identifier: 7F:66:29:33:22:94:63:19:30:4A:39:E0:21:3A:32:7E:05:D0:F2:0D Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Certificate serial: 4E8F0B752721A4E072DBC7A218D2747D5735C7D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft Manifest number: 8B Signing time: Wed 13 May 2026 08:52:06 +0000 Manifest this update: Wed 13 May 2026 08:47:06 +0000 Manifest next update: Thu 14 May 2026 12:21:06 +0000 Files and hashes: 1: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=) 2: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: zuOjVqDMW7jZa71MP/wkIPTvjYbvTHXXxwDIl5fvgJc=) 3: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8f:0b:75:27:21:a4:e0:72:db:c7:a2:18:d2:74:7d:57:35:c7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Validity Not Before: May 13 08:47:06 2026 GMT Not After : May 14 12:21:06 2026 GMT Subject: CN=7F66293322946319304A39E0213A327E05D0F20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:ae:f1:3a:a8:c8:aa:3b:47:f3:3b:a4:c4: f7:3b:78:51:9d:2e:d0:8a:92:57:e2:36:8a:ea:6e: 37:6e:4b:08:d8:f6:03:04:ba:6d:d0:a4:85:9f:29: e0:d5:23:07:dd:fd:11:a1:00:ac:7d:b8:4c:47:d1: 5e:f5:d3:89:5b:ec:42:ba:05:f3:7e:9b:69:73:3f: 69:e0:f5:e7:f2:bd:06:1e:fb:a4:ed:45:ae:c8:f5: c7:e4:a2:48:fb:8a:ee:15:bc:75:ca:e6:6a:64:2b: 1e:cd:7d:dc:99:d6:e4:e9:14:c4:cc:99:49:0f:bc: 5c:d7:e1:b7:06:bd:79:36:ee:2e:fc:d7:77:78:41: c2:f5:92:b8:f4:c0:84:53:ca:be:33:83:b7:7d:e2: e2:e6:e3:ad:7e:95:70:c8:e5:a3:8c:6d:a7:1b:fd: 86:36:90:cc:f8:9b:44:8c:2d:98:50:58:ff:b1:a3: a7:9c:cf:8d:87:b7:02:75:a9:43:cf:26:75:ba:2f: 40:b3:91:40:72:81:ad:8a:82:89:5d:99:ef:2e:33: 12:02:69:e7:87:b4:0c:e0:0d:9b:a5:e0:4f:47:a7: 57:53:61:a2:a5:f2:f1:32:07:bd:90:fa:7d:5a:a8: 54:6e:14:2a:07:b6:f1:26:89:42:74:4b:24:1e:cb: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:66:29:33:22:94:63:19:30:4A:39:E0:21:3A:32:7E:05:D0:F2:0D X509v3 Authority Key Identifier: keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:69:fa:4e:5d:2e:f4:a7:5c:46:1d:af:28:30:4c:89:2e:b9: ab:c1:f1:8b:21:7a:12:95:8e:33:a7:d2:b7:8f:47:96:92:58: b0:ca:d9:4c:3f:a2:6c:1b:39:b2:7f:66:f1:36:4d:de:d8:17: d1:23:08:67:ec:72:f8:b1:90:81:57:60:1a:da:56:18:4f:24: f3:3a:44:97:55:d7:8e:10:e2:f0:29:21:8f:57:ec:aa:79:13: 3f:d6:26:05:6b:92:a0:0d:01:e8:73:c4:72:7c:39:b6:be:fb: 69:04:53:59:c9:38:d7:0e:dc:d2:9a:f8:ec:11:65:05:44:5b: 46:63:c7:fe:b8:65:2e:40:3c:f9:52:8d:cd:c7:ed:7d:00:54: 81:14:ec:e6:c9:c4:bc:82:07:7d:9a:c0:98:a0:65:17:9a:d2: e3:e4:4f:44:d4:e4:b3:80:45:42:66:2c:8b:18:ab:3c:5f:46: 7f:d3:ba:e3:dc:70:39:3a:57:e2:9c:b9:0f:fc:ed:5a:6f:c5: 87:6c:bb:e6:53:d5:03:c8:d2:2b:30:36:e5:d7:47:1d:2c:3d: 4d:61:3b:c0:dc:16:bd:2c:36:db:1b:c6:cf:c7:c1:6d:f9:f6: 09:b4:24:67:7b:fc:09:fa:00:68:33:83:d1:51:dc:8c:b7:c7: 0f:e4:22:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTo8LdSchpOBy28eiGNJ0fVc1x9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD QUQzNTg5ODAeFw0yNjA1MTMwODQ3MDZaFw0yNjA1MTQxMjIxMDZaMDMxMTAvBgNV BAMTKDdGNjYyOTMzMjI5NDYzMTkzMDRBMzlFMDIxM0EzMjdFMDVEMEYyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn67xOqjIqjtH8zukxPc7eFGd LtCKklfiNorqbjduSwjY9gMEum3QpIWfKeDVIwfd/RGhAKx9uExH0V7104lb7EK6 BfN+m2lzP2ng9efyvQYe+6TtRa7I9cfkokj7iu4VvHXK5mpkKx7NfdyZ1uTpFMTM mUkPvFzX4bcGvXk27i7813d4QcL1krj0wIRTyr4zg7d94uLm461+lXDI5aOMbacb /YY2kMz4m0SMLZhQWP+xo6ecz42HtwJ1qUPPJnW6L0CzkUByga2Kgoldme8uMxIC aeeHtAzgDZul4E9Hp1dTYaKl8vEyB72Q+n1aqFRuFCoHtvEmiUJ0SyQey3izAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf2YpMyKUYxkwSjngIToyfgXQ8g0wHwYDVR0j BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACGn6Tl0u9KdcRh2vKDBMiS65q8HxiyF6EpWOM6fSt49HlpJYsMrZTD+ibBs5 sn9m8TZN3tgX0SMIZ+xy+LGQgVdgGtpWGE8k8zpEl1XXjhDi8Ckhj1fsqnkTP9Ym BWuSoA0B6HPEcnw5tr77aQRTWck41w7c0pr47BFlBURbRmPH/rhlLkA8+VKNzcft fQBUgRTs5snEvIIHfZrAmKBlF5rS4+RPRNTks4BFQmYsixirPF9Gf9O649xwOTpX 4py5D/ztWm/Fh2y75lPVA8jSKzA25ddHHSw9TWE7wNwWvSw22xvGz8fBbfn2CbQk Z3v8CfoAaDOD0VHcjLfHD+Qizw== -----END CERTIFICATE-----Generated at Wed May 13 19:44:47 2026 by rpki-client