$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft File: 21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft (raw, json) Hash identifier: t6pyo+pynzRPy7kMrKEkJb0knyIEe2SWpihxKtrJcGk= Subject key identifier: 1B:65:E4:F0:7C:12:E5:B4:4F:56:C9:7E:DA:BA:AC:46:B5:07:69:3E Authority key identifier: 21:CF:7E:0E:D7:A2:E1:9C:75:24:08:F5:A2:82:F7:C9:37:D9:D5:B5 Certificate issuer: /CN=21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5 Certificate serial: 5A2B98D93CBF733C3A0C8A27EF5726A449FC90A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.cer Subject info access: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 10:19:57 +0000 Manifest this update: Wed 25 Mar 2026 10:14:57 +0000 Manifest next update: Thu 26 Mar 2026 12:05:57 +0000 Files and hashes: 1: 21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.crl (hash: dISUAv0Stt7i8GPxswAETOaVOZdP+pboRUR4YU6+5UA=) 2: 34352e3136352e302e302f32322d3332203d3e20323638363635.roa (hash: 8tqOJ7js5e/kKGjrx6JKv4XhchIb1NItMSYpVIzhy6o=) 3: 323830343a353462303a3a2f33322d313238203d3e20323638363635.roa (hash: jRkNT1yJATVDGCGKCv0Cx0zxVVmlxLHkXoW6WklSuKE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.crl rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 12:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:98:d9:3c:bf:73:3c:3a:0c:8a:27:ef:57:26:a4:49:fc:90:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5 Validity Not Before: Mar 25 10:14:57 2026 GMT Not After : Mar 26 12:05:57 2026 GMT Subject: CN=1B65E4F07C12E5B44F56C97EDABAAC46B507693E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:24:3a:f1:6f:77:d0:32:4c:ec:99:23:29: 6f:94:68:b3:2a:73:55:2f:fc:93:cc:81:11:4c:5e: 15:ed:9d:1d:0c:98:07:5b:03:ad:14:00:46:85:e5: 76:91:56:5e:86:18:f9:af:41:92:ec:03:28:a4:b0: dd:a9:1e:fd:0d:46:96:c3:bf:07:04:11:d1:ea:03: 50:38:69:66:cf:de:0c:75:a0:b1:7c:c6:16:1d:cf: 42:3b:be:18:0f:af:a8:c8:9b:87:e1:fc:55:bd:55: 32:b9:b3:b8:88:ff:70:bc:56:75:51:2d:99:3f:f6: 2a:69:92:2c:b4:e8:90:cf:2d:8d:11:bd:9a:69:23: 09:a0:15:57:ef:43:c8:d6:27:34:b3:54:99:46:f7: 45:91:18:54:e6:a5:df:f0:4d:e2:27:f3:c4:3d:a8: dc:f0:89:b9:61:b3:81:7a:f7:ce:a9:f7:fc:5b:29: 7e:bd:f5:27:8f:1b:4c:86:fc:14:ae:8b:c3:dc:3c: e7:1c:f9:e1:20:f8:89:ea:75:3a:2a:5c:31:96:aa: e2:7a:98:25:3f:59:e5:d1:9a:82:ec:85:8c:42:ff: bc:91:71:b5:3e:b3:b3:12:9f:d6:dc:6f:2f:6b:a8: 2d:db:57:fb:0e:b0:a8:01:eb:c1:4c:03:59:96:fc: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:65:E4:F0:7C:12:E5:B4:4F:56:C9:7E:DA:BA:AC:46:B5:07:69:3E X509v3 Authority Key Identifier: keyid:21:CF:7E:0E:D7:A2:E1:9C:75:24:08:F5:A2:82:F7:C9:37:D9:D5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/21CF7E0ED7A2E19C752408F5A282F7C937D9D5B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d2:0f:59:cd:cd:42:d1:bd:f6:02:96:23:12:df:67:64:96: b7:ab:92:b3:7c:97:9f:ba:b0:17:bb:44:61:4b:c4:ea:3f:d9: 70:88:3e:a5:f6:32:92:0c:54:7a:23:e6:20:ad:d8:bd:e9:bf: 33:c8:b3:07:b2:af:2e:50:f7:78:6d:91:06:48:db:de:bd:c0: 29:0e:cd:37:1f:75:65:a1:aa:1c:38:6b:a1:2e:d9:94:ad:48: e4:a6:3c:17:61:e4:7d:8f:9a:1c:bf:63:f7:8a:58:5b:f1:82: 6d:e0:66:6f:79:74:bb:02:f0:45:38:38:0d:c1:16:f4:64:70: 9a:c2:df:63:9c:e2:fc:de:e5:91:f0:9c:cd:6a:db:25:a6:82: 77:1a:e4:7c:46:93:1e:e6:a1:6b:93:f0:ef:1c:18:bd:51:12: 29:ca:75:8a:8f:58:90:fa:f0:aa:95:9a:da:3f:6f:34:c4:bd: 43:48:f9:19:68:36:ce:e2:9a:15:d4:18:95:bd:9f:4e:ec:03: f1:28:08:b6:52:47:1e:b6:4d:a9:a8:ef:ae:2e:ac:bc:c3:b1: bb:93:40:11:01:df:50:cf:8c:9a:46:15:d2:76:ce:68:06:ed: 68:c6:4d:8b:4d:ae:fe:cd:f2:2a:e3:21:56:cc:19:b6:6d:af: 12:6f:3a:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWiuY2Ty/czw6DIon71cmpEn8kKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRjdFMEVEN0EyRTE5Qzc1MjQwOEY1QTI4MkY3Qzkz N0Q5RDVCNTAeFw0yNjAzMjUxMDE0NTdaFw0yNjAzMjYxMjA1NTdaMDMxMTAvBgNV BAMTKDFCNjVFNEYwN0MxMkU1QjQ0RjU2Qzk3RURBQkFBQzQ2QjUwNzY5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgCQ68W930DJM7JkjKW+UaLMq c1Uv/JPMgRFMXhXtnR0MmAdbA60UAEaF5XaRVl6GGPmvQZLsAyiksN2pHv0NRpbD vwcEEdHqA1A4aWbP3gx1oLF8xhYdz0I7vhgPr6jIm4fh/FW9VTK5s7iI/3C8VnVR LZk/9ippkiy06JDPLY0RvZppIwmgFVfvQ8jWJzSzVJlG90WRGFTmpd/wTeIn88Q9 qNzwiblhs4F6986p9/xbKX699SePG0yG/BSui8PcPOcc+eEg+InqdToqXDGWquJ6 mCU/WeXRmoLshYxC/7yRcbU+s7MSn9bcby9rqC3bV/sOsKgB68FMA1mW/JdNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG2Xk8HwS5bRPVsl+2rqsRrUHaT4wHwYDVR0j BBgwFoAUIc9+Dtei4Zx1JAj1ooL3yTfZ1bUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWVTUkFyVmNockx4cnVCWEZMV3ZVWllwbWJyWnlYa21rVldnaDlBWjJW NFcvMC8yMUNGN0UwRUQ3QTJFMTlDNzUyNDA4RjVBMjgyRjdDOTM3RDlENUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Y3RTBFRDdBMkUxOUM3 NTI0MDhGNUEyODJGN0M5MzdEOUQ1QjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWVTUkFyVmNockx4cnVCWEZMV3ZVWllwbWJyWnlYa21rVldnaDlBWjJWNFcvMC8y MUNGN0UwRUQ3QTJFMTlDNzUyNDA4RjVBMjgyRjdDOTM3RDlENUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY9IPWc3NQtG99gKWIxLfZ2SWt6uSs3yXn7qwF7tEYUvE6j/ZcIg+pfYykgxU eiPmIK3Yvem/M8izB7KvLlD3eG2RBkjb3r3AKQ7NNx91ZaGqHDhroS7ZlK1I5KY8 F2HkfY+aHL9j94pYW/GCbeBmb3l0uwLwRTg4DcEW9GRwmsLfY5zi/N7lkfCczWrb JaaCdxrkfEaTHuaha5Pw7xwYvVESKcp1io9YkPrwqpWa2j9vNMS9Q0j5GWg2zuKa FdQYlb2fTuwD8SgItlJHHrZNqajvri6svMOxu5NAEQHfUM+MmkYV0nbOaAbtaMZN i02u/s3yKuMhVswZtm2vEm86uA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:18:10 2026 by rpki-client