$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json) Hash identifier: empxFJAiTTVJ2I0fL1+M7J0cUUP/KZqJuOZn5+reR7E= Subject key identifier: C4:E9:C7:8A:CE:11:93:BB:DC:35:2E:62:D5:03:F2:97:84:82:47:BB Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7 Certificate serial: 6494E8F2C7D23623D3A566F26257212B1A270E34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft Manifest number: 0B Signing time: Thu 26 Mar 2026 02:01:01 +0000 Manifest this update: Thu 26 Mar 2026 01:56:01 +0000 Manifest next update: Fri 27 Mar 2026 04:41:01 +0000 Files and hashes: 1: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: aW0tRVFScaQK76vw10ud3bGSe06rKbGsZZ2pn2GO+/k=) 2: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=) 3: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 04:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:94:e8:f2:c7:d2:36:23:d3:a5:66:f2:62:57:21:2b:1a:27:0e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Validity Not Before: Mar 26 01:56:01 2026 GMT Not After : Mar 27 04:41:01 2026 GMT Subject: CN=C4E9C78ACE1193BBDC352E62D503F297848247BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:13:66:a5:1f:86:5e:87:8f:b1:ce:97:d5: e7:4b:99:4c:be:05:8a:18:d6:5c:3a:21:52:ad:e0: dd:ae:26:32:52:e0:d4:40:1d:38:c1:7e:97:56:4f: 85:bf:ec:00:42:3e:b8:a9:dc:99:07:83:d3:87:a0: 70:84:5b:f5:2e:91:52:da:66:60:a0:c2:14:45:59: 49:aa:03:d4:41:fa:94:8b:75:7f:c8:50:2a:dc:c5: c4:41:89:b8:bd:b5:4f:53:02:76:ce:34:7e:1a:46: ef:b8:b3:aa:a9:9d:ad:d5:bc:9e:f1:56:6f:51:29: b5:d1:40:3f:60:52:b6:ed:74:e5:e0:01:7b:fd:51: be:fd:8f:18:ff:3e:42:d5:30:78:db:e9:6f:32:5f: a7:d2:2c:ca:06:5c:6f:0f:b3:79:8e:c7:bf:82:f9: 1b:0b:60:7d:0b:7a:71:a6:1b:8a:36:28:20:97:8f: d0:2d:76:11:71:74:eb:65:6f:d9:58:73:93:1a:0c: 3f:34:f9:2c:0a:a6:e5:43:0f:a2:79:00:eb:88:72: 4b:ea:8e:fd:5c:b8:49:43:55:98:96:29:aa:a3:80: 36:70:68:03:70:ab:26:5d:ba:be:f3:71:3f:63:e4: 7c:d2:29:fa:04:b1:3e:53:1d:0c:dc:a9:10:4d:9d: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:C7:8A:CE:11:93:BB:DC:35:2E:62:D5:03:F2:97:84:82:47:BB X509v3 Authority Key Identifier: keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c7:22:f8:6a:0b:bf:8c:a6:97:ba:46:fd:04:ee:0a:0f:31: a7:0b:45:8c:dd:45:01:4a:1d:f1:03:fe:03:45:a1:f5:f8:1c: ce:2e:09:5c:ad:b2:33:0a:84:3a:b7:41:ba:25:fd:2c:15:99: 81:4d:07:da:d9:b4:f1:bc:93:48:5e:c7:83:84:64:ba:72:37: f4:17:16:7d:66:71:3c:0b:55:1d:b8:cd:00:f3:55:ce:9a:d8: ea:3b:67:d1:fd:87:ef:34:7e:00:fd:7d:9b:5e:4f:33:9f:78: c5:1e:39:9a:5f:78:a4:2b:d5:05:5a:be:5c:e8:2f:db:b6:5c: 40:b7:6f:87:0c:4a:cf:81:49:87:a4:01:44:ab:86:4e:10:9e: 76:83:10:25:1b:0f:f7:af:ac:0d:6f:14:f2:df:af:75:ec:f2: 67:dd:2f:a6:53:8f:1b:65:f0:72:6a:3e:b1:27:a8:5b:6b:38: f9:79:38:02:58:db:5a:c3:6a:64:45:d5:99:f5:32:c8:6a:e3: 05:b8:7a:4d:4f:15:17:f4:12:c3:a3:d6:93:7b:fd:12:dd:25: d9:1b:19:1e:41:0d:e0:10:6f:76:d9:68:0b:d4:54:f0:9f:de: c6:da:a2:5e:69:64:1c:6c:41:9c:a6:ee:69:29:7a:df:87:04: e5:33:aa:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZJTo8sfSNiPTpWbyYlchKxonDjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF RkUzNjhDNzAeFw0yNjAzMjYwMTU2MDFaFw0yNjAzMjcwNDQxMDFaMDMxMTAvBgNV BAMTKEM0RTlDNzhBQ0UxMTkzQkJEQzM1MkU2MkQ1MDNGMjk3ODQ4MjQ3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8BNmpR+GXoePsc6X1edLmUy+ BYoY1lw6IVKt4N2uJjJS4NRAHTjBfpdWT4W/7ABCPrip3JkHg9OHoHCEW/UukVLa ZmCgwhRFWUmqA9RB+pSLdX/IUCrcxcRBibi9tU9TAnbONH4aRu+4s6qpna3VvJ7x Vm9RKbXRQD9gUrbtdOXgAXv9Ub79jxj/PkLVMHjb6W8yX6fSLMoGXG8Ps3mOx7+C +RsLYH0LenGmG4o2KCCXj9AtdhFxdOtlb9lYc5MaDD80+SwKpuVDD6J5AOuIckvq jv1cuElDVZiWKaqjgDZwaANwqyZdur7zcT9j5HzSKfoEsT5THQzcqRBNnSJ/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxOnHis4Rk7vcNS5i1QPyl4SCR7swHwYDVR0j BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5 MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAucci+GoLv4yml7pG/QTuCg8xpwtFjN1FAUod8QP+A0Wh9fgczi4JXK2yMwqE OrdBuiX9LBWZgU0H2tm08byTSF7Hg4RkunI39BcWfWZxPAtVHbjNAPNVzprY6jtn 0f2H7zR+AP19m15PM594xR45ml94pCvVBVq+XOgv27ZcQLdvhwxKz4FJh6QBRKuG ThCedoMQJRsP96+sDW8U8t+vdezyZ90vplOPG2Xwcmo+sSeoW2s4+Xk4AljbWsNq ZEXVmfUyyGrjBbh6TU8VF/QSw6PWk3v9Et0l2RsZHkEN4BBvdtloC9RU8J/extqi XmlkHGxBnKbuaSl634cE5TOqTg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:08:14 2026 by rpki-client