$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json) Hash identifier: nzId2Q0Z2ynhNusKdFaa3rzl3YxatPoyMi35Dc7+mIY= Subject key identifier: 1B:AF:E7:FD:15:D5:28:FD:80:E1:F9:62:90:EE:9E:4C:F8:67:51:8D Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7 Certificate serial: 40A1C3839AFA8CE797B141EBD155A81DAB3C5755 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft Manifest number: 49 Signing time: Wed 13 May 2026 07:23:08 +0000 Manifest this update: Wed 13 May 2026 07:18:07 +0000 Manifest next update: Thu 14 May 2026 08:07:07 +0000 Files and hashes: 1: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: aq7jksMEJogesnkEEPzo5eNBsgHoOTlqn5FVnmY+708=) 2: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=) 3: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 08:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a1:c3:83:9a:fa:8c:e7:97:b1:41:eb:d1:55:a8:1d:ab:3c:57:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Validity Not Before: May 13 07:18:07 2026 GMT Not After : May 14 08:07:07 2026 GMT Subject: CN=1BAFE7FD15D528FD80E1F96290EE9E4CF867518D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:50:90:65:ec:aa:b1:e6:56:be:fc:da:17: 82:78:55:12:5f:1e:27:ba:e0:0e:32:08:93:0e:a7: 7a:03:40:96:36:c8:01:d9:af:7a:2d:dc:62:fe:c0: 14:27:8b:6a:81:ef:f3:eb:d1:5f:3d:53:e0:95:c7: 12:bd:1d:48:44:f7:34:81:09:ef:c5:76:e5:dc:bf: 7b:5f:09:ba:ac:77:eb:53:cd:68:a0:d5:83:2e:61: 44:44:bc:88:62:80:be:ca:9f:05:b8:5b:31:dd:22: 30:c3:1b:d3:13:b1:41:bb:64:fb:4f:f7:03:d4:d1: 43:2f:8c:30:97:32:02:52:8e:16:da:22:83:d6:9d: ee:5a:c2:6a:cd:8f:69:0f:6c:44:6c:db:72:83:c6: 7b:ae:7d:a1:ee:a7:8e:79:98:29:e4:e7:02:2c:f3: 57:e2:5e:c7:12:ea:bf:54:4c:b5:82:f9:b7:14:e4: f3:e0:f7:c2:de:3a:28:7b:5f:8f:d4:78:ea:b8:ad: 94:66:93:5e:e3:6c:4d:99:f6:97:e5:29:8a:ea:a2: 11:11:d2:8c:39:30:73:bb:41:8a:9e:42:62:17:5b: 8a:dd:a3:a6:4e:35:4b:45:58:08:6b:09:d4:f1:a4: e4:41:75:6b:d8:b2:10:d2:3e:ac:57:5b:6b:13:1c: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:E7:FD:15:D5:28:FD:80:E1:F9:62:90:EE:9E:4C:F8:67:51:8D X509v3 Authority Key Identifier: keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:31:9c:ec:cd:de:c3:05:7f:c3:4b:3e:15:d9:4a:a0:ae:3b: e5:3d:16:4f:54:05:88:2a:c6:ac:6c:5f:08:03:27:3e:ac:fd: bc:b0:6b:45:94:d6:74:83:5e:1d:b1:48:5d:31:55:c6:59:e8: 48:7e:08:86:df:db:94:87:3d:7b:ae:bf:89:d4:23:13:b7:6e: 3d:db:e4:26:b6:c7:9e:51:41:4e:9f:9a:32:3a:eb:e4:3f:97: a0:9c:67:58:3a:68:fa:d8:05:57:20:29:08:75:62:53:bb:5f: 7d:62:53:b5:bb:77:8c:c8:04:3f:20:26:20:a6:fa:be:21:eb: a5:dd:cd:6a:5c:07:e2:6c:83:73:13:41:25:3a:d5:8f:20:1c: 89:e6:3e:e0:41:61:43:84:9e:2c:12:29:aa:32:c7:d8:78:58: c7:d1:b8:87:49:59:a7:19:c2:09:f0:a8:48:c5:db:c0:eb:e0: 16:b4:7c:08:d6:ac:47:92:27:e5:bc:5b:8a:e9:64:de:e9:a3: ba:10:a6:c3:1f:b4:31:13:f0:4d:6e:55:d4:90:2b:8e:7a:2c: 5b:54:46:16:23:d3:14:41:80:ed:e7:8a:39:dc:68:8b:e4:69: 23:dc:47:ba:02:ea:0a:86:bc:ea:35:04:27:25:71:a3:0a:9b: f0:83:08:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQKHDg5r6jOeXsUHr0VWoHas8V1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF RkUzNjhDNzAeFw0yNjA1MTMwNzE4MDdaFw0yNjA1MTQwODA3MDdaMDMxMTAvBgNV BAMTKDFCQUZFN0ZEMTVENTI4RkQ4MEUxRjk2MjkwRUU5RTRDRjg2NzUxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1u1CQZeyqseZWvvzaF4J4VRJf Hie64A4yCJMOp3oDQJY2yAHZr3ot3GL+wBQni2qB7/Pr0V89U+CVxxK9HUhE9zSB Ce/FduXcv3tfCbqsd+tTzWig1YMuYUREvIhigL7KnwW4WzHdIjDDG9MTsUG7ZPtP 9wPU0UMvjDCXMgJSjhbaIoPWne5awmrNj2kPbERs23KDxnuufaHup455mCnk5wIs 81fiXscS6r9UTLWC+bcU5PPg98LeOih7X4/UeOq4rZRmk17jbE2Z9pflKYrqohER 0ow5MHO7QYqeQmIXW4rdo6ZONUtFWAhrCdTxpORBdWvYshDSPqxXW2sTHIq3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG6/n/RXVKP2A4flikO6eTPhnUY0wHwYDVR0j BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5 MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTGc7M3ewwV/w0s+FdlKoK475T0WT1QFiCrGrGxfCAMnPqz9vLBrRZTWdINe HbFIXTFVxlnoSH4Iht/blIc9e66/idQjE7duPdvkJrbHnlFBTp+aMjrr5D+XoJxn WDpo+tgFVyApCHViU7tffWJTtbt3jMgEPyAmIKb6viHrpd3NalwH4myDcxNBJTrV jyAcieY+4EFhQ4SeLBIpqjLH2HhYx9G4h0lZpxnCCfCoSMXbwOvgFrR8CNasR5In 5bxbiulk3umjuhCmwx+0MRPwTW5V1JArjnosW1RGFiPTFEGA7eeKOdxoi+RpI9xH ugLqCoa86jUEJyVxowqb8IMIRg== -----END CERTIFICATE-----Generated at Wed May 13 16:59:58 2026 by rpki-client