
$ rpki-client -vvvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier: 9PHajJ7Qu0+f5ymawl/Py6NrTM2L0q3KTHaXDes+uyg=
Subject key identifier: 30:75:FC:3E:32:64:B0:94:77:74:06:A8:79:C4:60:00:2E:DA:6C:CE
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer: /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial: 375FA6B777EEA4C527E10B4385E5817C27F7B447
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number: 04DD
Signing time: Sat 24 Oct 2026 02:15:09 +0000
Manifest this update: Sat 24 Oct 2026 02:10:09 +0000
Manifest next update: Sun 25 Oct 2026 05:12:09 +0000
Files and hashes: 1: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: ZbLY81Qr/kgliAkBV3YAtVvd9gQwCN9bnYLAY1+FTEo=)
2: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: l17UN9IzRIABa59CeIRbssQa7kwxF2pq05HuyXEYi0U=)
3: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: Oyv+7D9xugIZCh9Lg0JSqjdqnw1enpGbnitSgxBQNbg=)
4: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: zrfA2jfX9V5oj6BGsTRdZw05tAUMFmJR+yZQnpK6epQ=)
5: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: 856oxyqm6ptr7whM8O40m6eFs/N6/chbwdBgzf+BE/g=)
6: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: gUzk6XeWFdKb3L97R9Jbxb8JQipRUEL8ki7wNf67nXs=)
7: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: DQ/dBKnGAO+nMEtu22vuOHu4SoQakMP9Pkd1UiA0ct4=)
8: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: 7aTtgUqEyqPuej3q2lwsSTr2rk/MI0wGxGT/5iEVdrk=)
9: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: mkvsDsAhdYz1n1tZbIo6R1LGkWRQcfz3F9N/aJagqtU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Oct 2026 05:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5f:a6:b7:77:ee:a4:c5:27:e1:0b:43:85:e5:81:7c:27:f7:b4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Validity
Not Before: Oct 24 02:10:09 2026 GMT
Not After : Oct 25 05:12:09 2026 GMT
Subject: CN=3075FC3E3264B094777406A879C460002EDA6CCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:95:05:7c:e0:2b:ff:4b:01:2b:e1:28:e4:
69:86:60:9e:a9:46:62:6d:33:bd:01:a6:f9:dd:7b:
d8:8e:96:29:62:48:e7:6d:50:f1:8d:e6:bf:6b:bd:
fa:16:b2:bb:bc:a1:34:79:45:33:a9:a9:ec:49:ad:
b5:cf:e7:98:fb:0b:17:32:a7:4e:62:a5:1e:89:cb:
f1:bb:71:5d:b2:5a:09:b8:a5:52:71:28:c9:5c:d2:
1a:76:53:f0:ee:df:33:c6:c3:11:75:cc:61:90:2c:
3d:21:b0:09:5e:52:01:bd:55:3c:eb:5e:35:be:d2:
e3:b2:1a:0d:f0:42:81:79:c6:2f:78:1d:df:f2:a8:
65:a9:f3:25:7f:77:e1:a4:0d:c5:d8:95:e1:b4:20:
1a:87:17:7a:d7:24:8b:f6:ac:11:a2:76:9c:7e:b4:
76:4f:71:e5:f2:ad:35:da:a8:bc:8c:6e:a4:99:ef:
8f:b7:f0:b8:17:75:c1:44:13:cc:d1:35:22:9e:ab:
22:0f:6b:6f:78:17:73:0e:3a:b0:37:63:4e:7f:b0:
33:6b:96:18:7e:14:24:d2:25:d3:a4:24:3a:90:5a:
54:6b:2b:32:6f:58:41:1a:ad:f8:28:b0:bd:89:32:
79:a2:23:b1:97:72:1d:bc:59:44:b1:54:9c:5a:95:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:75:FC:3E:32:64:B0:94:77:74:06:A8:79:C4:60:00:2E:DA:6C:CE
X509v3 Authority Key Identifier:
keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:02:58:a2:22:c2:f7:b7:1b:85:16:17:cf:0d:70:73:bc:5b:
41:45:1f:00:a6:15:65:a8:62:d0:80:d7:cb:ce:4e:3e:79:ba:
01:92:d4:d1:35:33:69:6e:bc:b0:39:15:89:99:1b:c5:c1:1d:
b9:2f:65:9b:b9:27:c6:bc:c6:85:d4:4b:c1:db:34:01:5d:66:
5c:87:61:d1:cd:9d:f9:83:00:8e:9f:2f:80:a4:d2:95:b1:5f:
ec:ab:39:51:5d:30:84:bb:6a:e7:0d:6f:f7:1a:b1:1c:92:3f:
a2:9a:41:5b:cd:0e:27:27:19:f1:a5:92:21:c7:22:82:ad:9c:
f9:a0:c1:24:50:06:7b:4c:a0:66:a1:94:bb:a4:c4:ac:4a:a8:
18:95:f2:59:a1:7f:89:32:38:79:f8:5d:1b:a0:e4:5f:3b:74:
67:c1:20:5f:bc:6f:90:ed:2d:77:50:82:65:cd:d9:b0:57:eb:
a6:a5:94:d8:3a:29:f1:6c:9e:95:28:c9:a7:bb:db:33:2d:00:
59:ce:85:25:6c:52:06:2d:96:64:b2:7b:70:19:3c:b6:1a:e4:
9f:07:ec:f0:08:0a:af:b5:36:23:2f:63:6f:58:37:70:a3:ce:
df:bb:b2:6f:e9:8b:1d:db:a6:08:65:a8:af:da:de:ea:8a:82:
38:2b:68:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN1+mt3fupMUn4QtDheWBfCf3tEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNjEwMjQwMjEwMDlaFw0yNjEwMjUwNTEyMDlaMDMxMTAvBgNV
BAMTKDMwNzVGQzNFMzI2NEIwOTQ3Nzc0MDZBODc5QzQ2MDAwMkVEQTZDQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+ZUFfOAr/0sBK+Eo5GmGYJ6p
RmJtM70Bpvnde9iOliliSOdtUPGN5r9rvfoWsru8oTR5RTOpqexJrbXP55j7Cxcy
p05ipR6Jy/G7cV2yWgm4pVJxKMlc0hp2U/Du3zPGwxF1zGGQLD0hsAleUgG9VTzr
XjW+0uOyGg3wQoF5xi94Hd/yqGWp8yV/d+GkDcXYleG0IBqHF3rXJIv2rBGidpx+
tHZPceXyrTXaqLyMbqSZ74+38LgXdcFEE8zRNSKeqyIPa294F3MOOrA3Y05/sDNr
lhh+FCTSJdOkJDqQWlRrKzJvWEEarfgosL2JMnmiI7GXch28WUSxVJxalXr7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMHX8PjJksJR3dAaoecRgAC7abM4wHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRUQ2YvMS8y
MUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdQJYoiLC97cbhRYXzw1wc7xbQUUfAKYVZahi0IDXy85OPnm6AZLU0TUzaW68
sDkViZkbxcEduS9lm7knxrzGhdRLwds0AV1mXIdh0c2d+YMAjp8vgKTSlbFf7Ks5
UV0whLtq5w1v9xqxHJI/oppBW80OJycZ8aWSIccigq2c+aDBJFAGe0ygZqGUu6TE
rEqoGJXyWaF/iTI4efhdG6DkXzt0Z8EgX7xvkO0td1CCZc3ZsFfrpqWU2Dop8Wye
lSjJp7vbMy0AWc6FJWxSBi2WZLJ7cBk8thrknwfs8AgKr7U2Iy9jb1g3cKPO37uy
b+mLHdumCGWor9re6oqCOCtoTg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 21:41:34 2026 by rpki-client