$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: ekU33dfB8M1GD1cu+WnqpT1nIWKymcAwsCtNEm7AvBA= Subject key identifier: 59:B0:58:B2:DD:6C:07:71:5C:C1:2B:AC:52:FB:2F:EA:ED:BA:87:A0 Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 7B3C28C38E62D4AA714F10EC084404D4AB1C1211 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 02FE Signing time: Thu 26 Mar 2026 12:41:15 +0000 Manifest this update: Thu 26 Mar 2026 12:36:15 +0000 Manifest next update: Fri 27 Mar 2026 15:14:15 +0000 Files and hashes: 1: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: eHFG9+Rqm83pXHx38LPfz9jP844SRddyX7e4ZLhdHm4=) 2: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=) 3: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3c:28:c3:8e:62:d4:aa:71:4f:10:ec:08:44:04:d4:ab:1c:12:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Mar 26 12:36:15 2026 GMT Not After : Mar 27 15:14:15 2026 GMT Subject: CN=59B058B2DD6C07715CC12BAC52FB2FEAEDBA87A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:b4:e8:d0:db:6e:56:ec:6d:ce:e3:3d:12: 21:6f:95:d9:a2:35:9b:80:b1:9e:15:53:21:36:31: 57:90:41:89:1e:79:38:00:08:b2:a9:d4:ec:c8:48: ce:95:6b:ba:6d:3e:a8:4a:33:04:68:47:0d:2d:e8: d7:99:f9:e1:b3:74:34:32:e8:44:6f:4d:a3:d1:31: 1c:d4:b5:1a:fb:3e:cb:22:e7:8a:e4:e2:0e:67:18: 7d:f3:20:63:92:04:a8:e4:b7:77:ee:66:79:74:0e: d0:10:77:1d:8e:ec:38:38:e9:77:a5:d1:7b:a1:32: 23:22:d7:1c:89:99:5b:75:aa:ee:3c:4d:12:23:22: d2:85:e1:99:16:08:cc:e6:9a:0d:5d:bf:b6:dc:1d: fc:5f:8b:9b:ed:bd:4a:d3:4f:24:7f:9c:86:0c:98: 6c:27:66:fa:7c:b3:6f:0f:5c:2e:0c:bb:fa:fa:c8: 59:03:80:3b:30:64:b0:1a:94:70:0d:94:9b:98:8a: 89:ac:df:fe:6e:18:54:f5:48:73:3e:a5:49:b6:f5: bc:7f:8d:39:b2:8b:f7:61:47:cd:31:69:a8:d2:39: 01:42:69:f7:9a:d2:43:45:a3:30:d9:b2:ce:4a:87: eb:79:aa:20:51:19:44:20:a7:75:a6:c4:ae:6f:fa: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B0:58:B2:DD:6C:07:71:5C:C1:2B:AC:52:FB:2F:EA:ED:BA:87:A0 X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7d:b6:bf:77:a4:0e:f2:aa:01:71:65:a4:f3:a1:53:2e:9f: be:0a:0d:f1:c5:87:04:67:d6:82:d6:e9:53:38:ff:44:c4:af: 44:e7:c3:d3:ea:a5:7d:ef:93:22:9f:61:dc:4d:e7:da:81:c0: 5f:08:6c:b9:9f:c3:71:e2:4e:22:0a:0b:6f:75:ab:42:fb:ce: d4:86:15:7d:d1:ec:f6:f2:db:38:65:26:ea:22:97:36:5a:5f: fc:25:7b:78:4b:a8:35:4c:f1:c8:a4:8a:f8:b5:33:8a:eb:cc: 42:0e:1c:d2:6f:06:d3:a5:dc:7e:98:b5:e4:7b:66:5c:5a:9f: 3d:9d:85:a1:e3:e1:4d:35:96:c4:70:24:a9:f8:f1:e3:25:de: 63:18:17:77:a4:a1:ed:d9:9c:13:30:e2:97:75:98:c8:3a:41: b7:a2:68:ae:31:33:8f:43:e8:e8:e5:57:87:00:9b:4a:75:58: cf:f8:67:18:83:fb:c0:9a:80:6c:bf:3f:d0:06:44:48:dd:ad: 2b:dc:29:29:27:24:0b:8d:3b:f8:40:f6:c8:77:12:61:5c:c2: 22:69:0f:1a:cb:de:4e:76:d8:5c:ee:12:08:02:38:3d:fe:87: 1f:81:78:6d:a3:78:5e:ee:8e:b8:19:91:17:be:86:f0:88:04: ce:19:ef:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUezwow45i1KpxTxDsCEQE1KscEhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNjAzMjYxMjM2MTVaFw0yNjAzMjcxNTE0MTVaMDMxMTAvBgNV BAMTKDU5QjA1OEIyREQ2QzA3NzE1Q0MxMkJBQzUyRkIyRkVBRURCQTg3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQXbTo0NtuVuxtzuM9EiFvldmi NZuAsZ4VUyE2MVeQQYkeeTgACLKp1OzISM6Va7ptPqhKMwRoRw0t6NeZ+eGzdDQy 6ERvTaPRMRzUtRr7Pssi54rk4g5nGH3zIGOSBKjkt3fuZnl0DtAQdx2O7Dg46Xel 0XuhMiMi1xyJmVt1qu48TRIjItKF4ZkWCMzmmg1dv7bcHfxfi5vtvUrTTyR/nIYM mGwnZvp8s28PXC4Mu/r6yFkDgDswZLAalHANlJuYioms3/5uGFT1SHM+pUm29bx/ jTmyi/dhR80xaajSOQFCafea0kNFozDZss5Kh+t5qiBRGUQgp3WmxK5v+tnLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWbBYst1sB3FcwSusUvsv6u26h6AwHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXX22v3ekDvKqAXFlpPOhUy6fvgoN8cWHBGfWgtbpUzj/RMSvROfD0+qlfe+T Ip9h3E3n2oHAXwhsuZ/DceJOIgoLb3WrQvvO1IYVfdHs9vLbOGUm6iKXNlpf/CV7 eEuoNUzxyKSK+LUziuvMQg4c0m8G06Xcfpi15HtmXFqfPZ2FoePhTTWWxHAkqfjx 4yXeYxgXd6Sh7dmcEzDil3WYyDpBt6JorjEzj0Po6OVXhwCbSnVYz/hnGIP7wJqA bL8/0AZESN2tK9wpKSckC407+ED2yHcSYVzCImkPGsveTnbYXO4SCAI4Pf6HH4F4 baN4Xu6OuBmRF76G8IgEzhnvpQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:35:25 2026 by rpki-client