$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json) Hash identifier: Ge70orCBDf4T94BsPyCC7hahRd3t3BwRMEQGFJXhI68= Subject key identifier: 02:D8:16:D2:95:7F:7A:B8:06:E3:3A:DB:96:E6:2E:1E:41:E9:7E:36 Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7 Certificate serial: 082896E55EDF5FE9CC77D8180A0F09AE0E43F1C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft Manifest number: A1 Signing time: Fri 24 Jul 2026 07:48:51 +0000 Manifest this update: Fri 24 Jul 2026 07:43:51 +0000 Manifest next update: Sat 25 Jul 2026 10:27:51 +0000 Files and hashes: 1: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: ggbfTU3MpFWxOJpHCGojVHXPs2W/WGG97B9asrS/pcQ=) 2: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=) 3: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 10:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:28:96:e5:5e:df:5f:e9:cc:77:d8:18:0a:0f:09:ae:0e:43:f1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Validity Not Before: Jul 24 07:43:51 2026 GMT Not After : Jul 25 10:27:51 2026 GMT Subject: CN=02D816D2957F7AB806E33ADB96E62E1E41E97E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:bc:35:69:4d:5d:7c:9f:1c:46:85:fb:d6: f0:77:c0:34:40:b5:c6:fb:50:23:68:67:a0:48:c6: b1:65:62:36:b9:31:2b:67:6f:92:4a:b4:f2:a2:cf: b9:af:64:68:08:bd:e1:70:b1:bf:04:96:96:ba:c4: 1b:09:99:0d:cb:b9:5e:5b:50:c7:e2:09:f7:02:9c: d8:eb:46:ff:1f:47:d0:90:5b:03:da:ac:bc:a9:ab: a6:4f:e2:08:15:bd:ba:4b:4c:3a:d9:df:25:1b:ff: 8e:08:5b:61:f3:51:b2:d0:12:76:c2:45:b9:bf:a3: 24:81:ec:91:91:7e:da:2d:27:ff:6d:ce:3e:22:90: cc:ce:77:d1:cf:e8:f5:89:c0:d5:80:63:01:81:62: 20:4b:8a:a9:28:bc:8e:67:86:17:62:c7:d0:08:e3: 85:b4:de:e9:38:8b:d9:7c:c1:68:e7:18:f5:f1:d4: d8:0a:6d:d7:9a:dd:88:a3:b1:0f:a7:23:ad:ec:e1: d7:91:1d:f4:d5:e7:76:06:f0:f0:aa:f1:b0:6e:2f: 19:12:7e:72:6e:83:78:7f:e0:5d:19:f2:37:00:c0: e9:57:71:60:33:90:98:0d:bc:d8:86:06:1c:52:6c: 3c:19:93:f7:7c:8c:6a:fc:42:29:0e:6b:0e:ab:f5: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D8:16:D2:95:7F:7A:B8:06:E3:3A:DB:96:E6:2E:1E:41:E9:7E:36 X509v3 Authority Key Identifier: keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:dd:fe:57:92:c3:8b:9d:4f:1c:e4:df:33:20:79:64:e6:59: de:26:4e:43:95:fb:e5:da:bc:17:fd:63:03:62:75:ab:b3:82: 05:1d:f3:5d:b4:6a:74:91:b6:e4:73:32:01:83:56:27:cc:c2: 1b:6e:c7:5d:7f:d1:85:ec:3d:c9:41:6f:30:13:0f:77:3f:1a: bc:c0:3a:9d:28:2c:6f:1b:ef:07:e4:31:d2:65:35:e0:26:03: bf:32:d4:07:6e:21:ae:b5:3f:9d:b2:3d:ff:a1:3f:51:9f:b4: 8d:82:f5:6e:83:cd:41:cf:1b:b2:10:14:0b:31:b0:79:b1:34: 9c:24:f1:86:78:81:4b:42:d0:eb:4b:3b:0b:4e:49:64:1b:24: 56:da:b2:71:d4:46:c6:ec:85:f8:02:c2:77:98:3f:f8:1f:98: a9:26:c2:3f:df:d3:3e:3f:bb:09:ae:e7:94:23:4d:03:11:10: 39:6c:50:9c:31:11:84:ca:9b:e5:9f:f8:76:ee:36:71:52:52: c8:47:a7:a8:e8:be:c0:69:6b:0c:0b:d3:e6:00:98:1e:cd:e5: 1c:0d:c9:61:52:54:bd:f5:b5:7c:29:05:75:30:21:9d:68:d2: c5:f8:4e:06:4c:b4:9e:c9:19:39:f7:41:ae:4b:bc:52:ad:96: a5:38:7d:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCCiW5V7fX+nMd9gYCg8Jrg5D8cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF RkUzNjhDNzAeFw0yNjA3MjQwNzQzNTFaFw0yNjA3MjUxMDI3NTFaMDMxMTAvBgNV BAMTKDAyRDgxNkQyOTU3RjdBQjgwNkUzM0FEQjk2RTYyRTFFNDFFOTdFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ALw1aU1dfJ8cRoX71vB3wDRA tcb7UCNoZ6BIxrFlYja5MStnb5JKtPKiz7mvZGgIveFwsb8Elpa6xBsJmQ3LuV5b UMfiCfcCnNjrRv8fR9CQWwParLypq6ZP4ggVvbpLTDrZ3yUb/44IW2HzUbLQEnbC Rbm/oySB7JGRftotJ/9tzj4ikMzOd9HP6PWJwNWAYwGBYiBLiqkovI5nhhdix9AI 44W03uk4i9l8wWjnGPXx1NgKbdea3YijsQ+nI63s4deRHfTV53YG8PCq8bBuLxkS fnJug3h/4F0Z8jcAwOlXcWAzkJgNvNiGBhxSbDwZk/d8jGr8QikOaw6r9V5LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAtgW0pV/ergG4zrbluYuHkHpfjYwHwYDVR0j BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5 MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABd3+V5LDi51PHOTfMyB5ZOZZ3iZOQ5X75dq8F/1jA2J1q7OCBR3zXbRqdJG2 5HMyAYNWJ8zCG27HXX/Rhew9yUFvMBMPdz8avMA6nSgsbxvvB+Qx0mU14CYDvzLU B24hrrU/nbI9/6E/UZ+0jYL1boPNQc8bshAUCzGwebE0nCTxhniBS0LQ60s7C05J ZBskVtqycdRGxuyF+ALCd5g/+B+YqSbCP9/TPj+7Ca7nlCNNAxEQOWxQnDERhMqb 5Z/4du42cVJSyEenqOi+wGlrDAvT5gCYHs3lHA3JYVJUvfW1fCkFdTAhnWjSxfhO Bky0nskZOfdBrku8Uq2WpTh9wQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:18:53 2026 by rpki-client