$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json) Hash identifier: MjdHG7iMyrntBsnYmk4W9xGe+CP6Y9d659YVQyrvc+I= Subject key identifier: 3E:A2:66:3F:7C:01:61:9C:EE:2A:C9:FD:79:C9:C6:CF:A1:68:A2:A7 Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Certificate serial: 1785C06A0ACB76B6F5445ABBF28C354BB0A60458 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft Manifest number: 4A Signing time: Wed 25 Mar 2026 07:46:45 +0000 Manifest this update: Wed 25 Mar 2026 07:41:45 +0000 Manifest next update: Thu 26 Mar 2026 08:36:45 +0000 Files and hashes: 1: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: b+GITuMGEGLfewLrPiV4yEf+K5lHj0rJ27tUKNWZwD8=) 2: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=) 3: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 08:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:85:c0:6a:0a:cb:76:b6:f5:44:5a:bb:f2:8c:35:4b:b0:a6:04:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Validity Not Before: Mar 25 07:41:45 2026 GMT Not After : Mar 26 08:36:45 2026 GMT Subject: CN=3EA2663F7C01619CEE2AC9FD79C9C6CFA168A2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:a2:06:e9:15:04:e2:0d:96:56:b4:2b:e6: c2:64:93:cb:aa:70:c1:77:16:12:8f:61:27:d7:05: 20:9a:4e:17:22:51:79:28:94:64:16:a3:58:10:66: 76:5a:63:70:93:e0:5d:b0:50:62:4c:b7:18:d4:62: 05:a0:df:81:00:da:ac:8d:99:8c:fd:09:b3:25:c2: 31:00:ff:ce:45:21:55:95:8e:cd:ba:45:63:76:23: 99:d8:52:6f:69:d8:76:1f:cd:e2:bf:f0:9a:97:39: 3c:0a:91:5d:12:7e:de:76:17:00:81:83:96:fd:84: 30:79:8e:a0:25:94:23:f3:7d:18:56:f9:b1:7d:17: 36:37:d8:59:36:45:4c:76:0e:64:28:8d:37:21:d0: d8:2b:d7:8a:8d:aa:8b:44:1d:5b:63:23:f1:70:f1: e8:92:97:7c:db:68:23:a3:b7:53:1c:d0:1e:2f:7d: 7a:42:9f:f9:18:b1:e6:bb:12:0a:8d:db:39:fc:69: e4:3d:0b:d7:7d:2b:47:b2:97:8d:3f:7a:04:13:7d: e8:92:90:10:71:d6:f9:a4:ee:c5:e0:c1:e3:92:d9: f2:8f:12:54:60:d6:f6:47:8c:78:12:e8:61:4a:92: d9:c3:57:99:df:66:25:48:62:48:cf:fe:e9:79:c2: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A2:66:3F:7C:01:61:9C:EE:2A:C9:FD:79:C9:C6:CF:A1:68:A2:A7 X509v3 Authority Key Identifier: keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:c0:ab:d7:64:d3:77:f7:1e:f5:24:e7:04:2d:9e:88:45:67: 68:01:50:4c:a1:45:3a:bd:dc:d1:a1:d1:ef:f7:80:c3:5e:73: f6:b8:9a:d9:e1:5d:c2:85:ca:49:19:f8:bd:7c:e2:51:84:15: 12:a5:18:2d:10:ed:64:d2:a1:33:19:53:97:0e:dd:dc:c6:f7: 86:e2:8f:f6:fd:44:30:81:e2:12:27:3d:0d:06:8e:a6:01:1e: e5:ff:2f:56:0a:3d:9c:0f:95:0b:8a:9f:84:1c:17:a1:ef:e4: 15:36:cc:cb:5c:70:0b:32:2b:a7:63:7d:0c:d1:f5:d9:f3:4b: e3:4c:70:72:09:13:2a:d0:bb:35:68:90:14:80:3a:d4:c8:2e: 48:97:17:1f:32:53:ab:de:e2:b4:39:fd:a7:2b:02:8c:94:d9: 5f:bb:aa:88:7c:b5:a2:ad:b7:24:96:82:89:32:c9:ce:ee:f5: 00:89:63:0e:16:eb:88:12:9f:b8:84:16:fc:c1:d9:06:82:34: a1:cc:64:fe:a5:8f:79:e9:28:6b:a3:9b:25:db:5a:2e:38:a7: 10:14:85:5e:ae:34:93:33:7f:ef:c6:08:b9:a9:fd:48:ef:7f: bd:c4:0c:ef:83:f4:15:ca:dc:1a:40:7e:ea:ba:57:9d:93:b8: 45:80:8c:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF4XAagrLdrb1RFq78ow1S7CmBFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD QUQzNTg5ODAeFw0yNjAzMjUwNzQxNDVaFw0yNjAzMjYwODM2NDVaMDMxMTAvBgNV BAMTKDNFQTI2NjNGN0MwMTYxOUNFRTJBQzlGRDc5QzlDNkNGQTE2OEEyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXqIG6RUE4g2WVrQr5sJkk8uq cMF3FhKPYSfXBSCaThciUXkolGQWo1gQZnZaY3CT4F2wUGJMtxjUYgWg34EA2qyN mYz9CbMlwjEA/85FIVWVjs26RWN2I5nYUm9p2HYfzeK/8JqXOTwKkV0Sft52FwCB g5b9hDB5jqAllCPzfRhW+bF9FzY32Fk2RUx2DmQojTch0Ngr14qNqotEHVtjI/Fw 8eiSl3zbaCOjt1Mc0B4vfXpCn/kYsea7EgqN2zn8aeQ9C9d9K0eyl40/egQTfeiS kBBx1vmk7sXgweOS2fKPElRg1vZHjHgS6GFKktnDV5nfZiVIYkjP/ul5wmSPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPqJmP3wBYZzuKsn9ecnGz6FooqcwHwYDVR0j BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw8Cr12TTd/ce9STnBC2eiEVnaAFQTKFFOr3c0aHR7/eAw15z9ria2eFdwoXK SRn4vXziUYQVEqUYLRDtZNKhMxlTlw7d3Mb3huKP9v1EMIHiEic9DQaOpgEe5f8v Vgo9nA+VC4qfhBwXoe/kFTbMy1xwCzIrp2N9DNH12fNL40xwcgkTKtC7NWiQFIA6 1MguSJcXHzJTq97itDn9pysCjJTZX7uqiHy1oq23JJaCiTLJzu71AIljDhbriBKf uIQW/MHZBoI0ocxk/qWPeekoa6ObJdtaLjinEBSFXq40kzN/78YIuan9SO9/vcQM 74P0FcrcGkB+6rpXnZO4RYCMng== -----END CERTIFICATE-----Generated at Thu Mar 26 01:18:01 2026 by rpki-client