$ rpki-client -vvvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json) Hash identifier: fPX0Avxvwd7x34G9NMse0nueFCtdCeUOJwlx2ZBEV1U= Subject key identifier: AA:72:13:C8:D6:7D:9C:C2:95:0F:B1:6E:DA:CC:5A:6E:0A:92:6C:DE Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Certificate serial: 53F50E8638CC76C4B6578DB89131CC1A45B1681C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft Manifest number: 0190 Signing time: Fri 30 Oct 2026 22:38:20 +0000 Manifest this update: Fri 30 Oct 2026 22:33:20 +0000 Manifest next update: Sat 31 Oct 2026 22:45:20 +0000 Files and hashes: 1: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: Vf7L0nEoqVM3zkzAfnwGKll3BsqlwtQox5GJQ4i6pB8=) 2: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: Vix6v/IW8pAmdeVYgVb7q/FTkeIwmm/4Jn78C6Bj5nk=) 3: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: on4Pev3McQ+o1ILrNEn0Hhu31JjHo87t5HQVqLwo9cs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 22:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f5:0e:86:38:cc:76:c4:b6:57:8d:b8:91:31:cc:1a:45:b1:68:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Validity Not Before: Oct 30 22:33:20 2026 GMT Not After : Oct 31 22:45:20 2026 GMT Subject: CN=AA7213C8D67D9CC2950FB16EDACC5A6E0A926CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:9f:b3:5f:6b:0d:e0:e4:10:1d:bd:da:90: 7b:fa:d9:c4:a3:ba:f9:5d:4c:c8:fe:d9:1a:55:37: 5b:ae:87:32:93:3b:65:7b:05:35:89:0e:86:9c:38: 68:41:00:25:55:b4:1d:7d:f0:b4:0e:65:eb:fe:64: b6:a9:4c:a8:78:a8:43:da:ad:69:ca:5e:35:5a:b3: 20:5b:b3:a5:a6:73:9d:91:83:e0:f8:c7:cf:7c:4e: fc:ac:c2:e4:92:8e:66:7b:dd:58:84:51:96:48:24: 0c:a7:09:a2:d4:0b:2e:0e:d9:cc:83:1d:61:00:e6: fc:1e:19:68:e3:9d:2b:98:ed:14:36:7e:33:06:7f: 58:9d:fa:13:64:a1:18:d5:04:35:be:d9:5b:ca:35: 45:6c:fe:7c:76:52:48:c3:29:7f:71:7d:da:bd:ba: 03:0a:f7:97:30:ee:8d:75:c6:8f:f3:24:56:dd:e0: 3a:96:4f:8e:12:c0:31:41:90:2b:cf:8f:c7:e1:79: d1:95:f1:3d:b8:fc:2d:43:be:fd:17:96:6b:e2:d9: b0:ae:bd:0b:40:67:f7:69:00:0e:83:d5:cd:be:cd: a9:c2:db:46:5d:37:0c:16:c8:d5:71:18:a1:39:7b: ff:11:dc:1b:d0:f4:0b:42:81:9a:8f:21:fd:fc:92: fb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:72:13:C8:D6:7D:9C:C2:95:0F:B1:6E:DA:CC:5A:6E:0A:92:6C:DE X509v3 Authority Key Identifier: keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:1c:94:b3:44:2a:aa:df:e8:a4:8a:41:b0:c0:4d:91:8e:f1: 1c:c3:15:e2:79:0c:be:dc:ea:76:19:fc:20:ac:fe:5a:aa:01: bc:7e:77:14:64:0b:1b:c2:f0:1d:ae:72:d9:12:a8:20:f3:bb: cb:0a:2a:45:12:40:24:8d:3c:76:ce:ee:5e:13:13:21:28:fb: 92:4e:e2:35:1c:73:d7:4d:69:c4:f3:33:9e:45:8f:cf:6a:af: 54:19:a3:26:9c:d8:80:68:51:07:1e:94:e1:ad:b5:27:4c:23: 9a:fd:fd:19:e9:28:9a:32:bf:8a:ab:3b:ee:29:e3:e9:ea:2c: c0:b6:29:35:c1:85:21:d0:7f:21:31:03:08:31:1c:ac:7e:e6: 6b:4a:f7:db:d1:14:e5:40:2d:ae:08:23:a2:2c:de:d1:e3:b3: 28:8a:ea:ae:e3:38:76:62:6e:3b:d1:51:87:7a:3b:a6:ac:10: b3:9c:6c:bd:e9:8f:2c:9f:4e:6e:c8:4c:96:d2:b8:73:2b:0c: b3:b7:d7:b6:b2:82:46:e8:59:30:7a:b3:78:6a:46:9c:a8:ef: ab:b4:f6:58:57:0b:a4:98:21:7b:51:a0:ae:aa:37:f0:cf:ba: 22:8c:db:d4:bf:7e:fd:05:86:35:cb:74:7d:f5:6a:b0:a7:55: 50:e3:96:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU/UOhjjMdsS2V424kTHMGkWxaBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD QUQzNTg5ODAeFw0yNjEwMzAyMjMzMjBaFw0yNjEwMzEyMjQ1MjBaMDMxMTAvBgNV BAMTKEFBNzIxM0M4RDY3RDlDQzI5NTBGQjE2RURBQ0M1QTZFMEE5MjZDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgJ+zX2sN4OQQHb3akHv62cSj uvldTMj+2RpVN1uuhzKTO2V7BTWJDoacOGhBACVVtB198LQOZev+ZLapTKh4qEPa rWnKXjVasyBbs6Wmc52Rg+D4x898TvyswuSSjmZ73ViEUZZIJAynCaLUCy4O2cyD HWEA5vweGWjjnSuY7RQ2fjMGf1id+hNkoRjVBDW+2VvKNUVs/nx2UkjDKX9xfdq9 ugMK95cw7o11xo/zJFbd4DqWT44SwDFBkCvPj8fhedGV8T24/C1Dvv0Xlmvi2bCu vQtAZ/dpAA6D1c2+zanC20ZdNwwWyNVxGKE5e/8R3BvQ9AtCgZqPIf38kvtXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqnITyNZ9nMKVD7Fu2sxabgqSbN4wHwYDVR0j BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKRyUs0Qqqt/opIpBsMBNkY7xHMMV4nkMvtzqdhn8IKz+WqoBvH53FGQLG8Lw Ha5y2RKoIPO7ywoqRRJAJI08ds7uXhMTISj7kk7iNRxz101pxPMznkWPz2qvVBmj JpzYgGhRBx6U4a21J0wjmv39GekomjK/iqs77inj6eoswLYpNcGFIdB/ITEDCDEc rH7ma0r329EU5UAtrggjoize0eOzKIrqruM4dmJuO9FRh3o7pqwQs5xsvemPLJ9O bshMltK4cysMs7fXtrKCRuhZMHqzeGpGnKjvq7T2WFcLpJghe1Ggrqo38M+6Iozb 1L9+/QWGNct0ffVqsKdVUOOWDA== -----END CERTIFICATE-----Generated at Sat Oct 31 12:06:31 2026 by rpki-client