$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft File: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft (raw, json) Hash identifier: SDqgAgfyB+2STwlUm+3AuCZ2r9YDoQP/sUpscllmpeo= Subject key identifier: 84:E2:B5:03:ED:00:87:10:E3:76:E9:7D:DC:E0:38:F5:79:B2:48:41 Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Certificate serial: 3394A825A02729D412B55E535A83F3CC46059730 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft Manifest number: 01B6 Signing time: Wed 25 Mar 2026 12:47:34 +0000 Manifest this update: Wed 25 Mar 2026 12:42:34 +0000 Manifest next update: Thu 26 Mar 2026 14:17:34 +0000 Files and hashes: 1: 323830343a353863343a3a2f33322d3332203d3e20323638313438.roa (hash: zRGNZud26qHSrSYjjg6YCk1GClPSJdsr2PGUbQApwKk=) 2: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (hash: l0BuCzH66s+VtkrxcQvmTEBH0+FHi0YOqD0wKrMk7Tw=) 3: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (hash: sQjnBNpY0cCeByw2MJZ0cFZXN5mlrSoantEDSz97YB8=) 4: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (hash: SoekstKv8f+pkK/WwzhieixqQG0KM+o03cw/55GYLlg=) 5: 34352e3137302e35382e302f32332d3233203d3e20323638313438.roa (hash: j8GbTlImInggLXV7UaiaKTq2/ezww6Fce25zlRuDPh8=) 6: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl (hash: p37uA54rVjEzabUtGzs57ck4hC9pv/BfAc2Jg8+vizY=) 7: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (hash: NcZvtk9vtk4cBlbbop46EV0A+5s9d/7hpHIDDTwgZ0w=) 8: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (hash: fZuxL2H/McwhqF3eWGOSLVFPaLHn9GVCUQ5HIDIvm7w=) 9: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (hash: J300dFXZr5KKTkTQzQCo+VuABspi5UhFx/KywDZmrV4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:94:a8:25:a0:27:29:d4:12:b5:5e:53:5a:83:f3:cc:46:05:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372 Validity Not Before: Mar 25 12:42:34 2026 GMT Not After : Mar 26 14:17:34 2026 GMT Subject: CN=84E2B503ED008710E376E97DDCE038F579B24841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:67:1c:45:e6:79:07:39:ac:69:32:f9:6d: 97:2f:64:c8:06:c5:80:b3:6b:a2:eb:94:01:fc:df: 58:12:2a:70:a3:02:6a:33:6f:db:95:f1:01:ab:de: 8e:5c:23:c9:86:6d:d6:7c:51:85:a5:8c:05:85:b2: c7:a7:87:17:46:56:46:2a:05:5c:4d:f8:b3:99:59: e3:73:f8:0d:00:4d:49:b8:71:8f:4d:75:ef:a2:98: bc:8f:32:3a:95:92:b7:c3:8a:dd:b7:2b:08:a5:e1: 0a:02:74:e7:3a:23:60:fb:02:97:49:74:28:51:2d: 6a:a5:7b:b9:46:63:be:15:0c:f5:c2:08:13:02:4d: 5c:17:6d:59:c3:1b:35:26:ae:3b:c8:ca:5b:b4:b8: 1e:7b:8c:42:94:b5:0e:04:d1:49:69:57:91:69:42: 01:8e:84:19:2e:74:25:58:dc:86:e7:66:eb:98:64: f0:45:ec:f6:94:d7:4f:e3:10:60:9d:d0:8c:9b:2b: c0:19:64:60:e4:fd:f6:ab:49:68:87:56:e8:35:ff: 27:cc:c0:74:f0:93:0b:e6:80:81:a0:74:79:c0:33: 64:32:06:7e:06:43:9a:eb:03:9c:53:72:f1:b6:dc: e4:69:41:ab:96:bc:df:a3:1e:b0:a1:23:d0:0b:56: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E2:B5:03:ED:00:87:10:E3:76:E9:7D:DC:E0:38:F5:79:B2:48:41 X509v3 Authority Key Identifier: keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1d:86:3e:a7:0a:f7:5b:6b:d7:30:bd:7d:e5:aa:20:a2:08: 1e:a1:10:1c:80:30:68:75:0e:69:8c:03:61:99:c5:7e:02:32: d6:cc:71:6a:e9:3d:6a:b3:58:df:5b:a4:e4:a2:a2:bb:f8:df: 33:54:fe:c5:23:00:04:17:9c:f6:d5:49:ce:27:73:cb:2c:6c: 0b:31:4a:43:ff:bd:42:f6:4c:64:47:97:78:94:74:97:f9:ab: 8b:3e:75:7b:4e:9d:1f:37:13:5e:1f:d7:c8:16:39:3a:75:01: 6e:24:01:53:64:d9:cb:4b:e0:80:44:8a:44:8e:f1:02:b5:d8: 8e:2c:95:c8:11:e2:57:2c:d3:0c:76:4c:88:55:c6:39:25:0d: d2:75:af:0c:73:e1:1d:a5:c3:c7:61:0a:8b:a1:db:a3:f6:39: 35:ed:87:4d:d7:7a:17:a1:be:d0:28:34:f2:d6:99:fc:f3:e1: db:0a:56:5a:de:38:04:1c:a1:84:78:a8:34:d1:a4:93:20:3f: 75:fd:1f:11:1b:ac:c1:1c:0c:a5:8c:34:28:bd:f4:56:8f:c0: 60:bb:50:3d:2d:05:bf:fb:c1:2a:c0:0b:4e:b1:b6:3b:7e:8a: 76:71:1a:52:4a:6c:af:67:af:66:13:e7:f6:2a:2c:15:0a:e5: e4:dc:53:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM5SoJaAnKdQStV5TWoPzzEYFlzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGRDVBMEE2QUE4NEFDRURCNDQ1RjFBNzNEMDdERDND MEE0QTM3MjAeFw0yNjAzMjUxMjQyMzRaFw0yNjAzMjYxNDE3MzRaMDMxMTAvBgNV BAMTKDg0RTJCNTAzRUQwMDg3MTBFMzc2RTk3RERDRTAzOEY1NzlCMjQ4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcmccReZ5BzmsaTL5bZcvZMgG xYCza6LrlAH831gSKnCjAmozb9uV8QGr3o5cI8mGbdZ8UYWljAWFssenhxdGVkYq BVxN+LOZWeNz+A0ATUm4cY9Nde+imLyPMjqVkrfDit23Kwil4QoCdOc6I2D7ApdJ dChRLWqle7lGY74VDPXCCBMCTVwXbVnDGzUmrjvIylu0uB57jEKUtQ4E0UlpV5Fp QgGOhBkudCVY3IbnZuuYZPBF7PaU10/jEGCd0IybK8AZZGDk/farSWiHVug1/yfM wHTwkwvmgIGgdHnAM2QyBn4GQ5rrA5xTcvG23ORpQauWvN+jHrChI9ALVkTrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhOK1A+0AhxDjdul93OA49XmySEEwHwYDVR0j BBgwFoAUIf1aCmqoSs7bRF8ac9B908Cko3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hM emIvMC8yMUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRkQ1QTBBNkFBODRBQ0VE QjQ0NUYxQTczRDA3REQzQzBBNEEzNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1luM2VSdHRodER5aWZ1WkQ1VVJ2VmttdUJidXVGRjZtVWpXQWtiR1hMemIvMC8y MUZENUEwQTZBQTg0QUNFREI0NDVGMUE3M0QwN0REM0MwQTRBMzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACx2GPqcK91tr1zC9feWqIKIIHqEQHIAwaHUOaYwDYZnFfgIy1sxxauk9arNY 31uk5KKiu/jfM1T+xSMABBec9tVJzidzyyxsCzFKQ/+9QvZMZEeXeJR0l/mriz51 e06dHzcTXh/XyBY5OnUBbiQBU2TZy0vggESKRI7xArXYjiyVyBHiVyzTDHZMiFXG OSUN0nWvDHPhHaXDx2EKi6Hbo/Y5Ne2HTdd6F6G+0Cg08taZ/PPh2wpWWt44BByh hHioNNGkkyA/df0fERuswRwMpYw0KL30Vo/AYLtQPS0Fv/vBKsALTrG2O36KdnEa Ukpsr2evZhPn9iosFQrl5NxTuA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:03:12 2026 by rpki-client