$ rpki-client -vvf rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft File: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft (raw, json) Hash identifier: 5DeShQdUNC1QxCQ7OdLRplzRU2FY3z0KkDFloeXu3wU= Subject key identifier: DE:B8:E1:E5:E6:01:31:B8:EF:B5:65:2C:A3:D8:6D:2D:38:CC:FE:D3 Authority key identifier: 21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E Certificate issuer: /CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E Certificate serial: 3CBDC976FBD05F04505F79C801C388254C4D89F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft Manifest number: 02A8 Signing time: Thu 23 Jul 2026 08:06:13 +0000 Manifest this update: Thu 23 Jul 2026 08:01:13 +0000 Manifest next update: Fri 24 Jul 2026 09:52:13 +0000 Files and hashes: 1: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl (hash: 7+QAkyVVumltPrjoV8IygIsQyx4UUbEiuq0AsRRki2E=) 2: 323830343a353761303a3a2f33322d313238203d3e20323638303736.roa (hash: 6YYhEtmclqmoqkx8M/XurXA1g8tSWug7qPa0YtKN5tI=) 3: 34352e3136392e382e302f32322d3332203d3e20323638303736.roa (hash: 3LE1zh7FrUw4Au7uc6pH9VJWyxa3s6T7x6cjtB15W1A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 09:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bd:c9:76:fb:d0:5f:04:50:5f:79:c8:01:c3:88:25:4c:4d:89:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E Validity Not Before: Jul 23 08:01:13 2026 GMT Not After : Jul 24 09:52:13 2026 GMT Subject: CN=DEB8E1E5E60131B8EFB5652CA3D86D2D38CCFED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:17:22:70:ee:10:a6:c6:6c:04:c1:8f:cd: ab:96:ac:23:f4:38:ed:42:38:04:89:51:92:76:22: 4d:45:04:63:ea:c6:69:06:08:82:f6:14:47:75:19: 24:ce:6f:bb:54:a5:e4:8e:f2:b0:5b:f6:ac:7e:ae: c3:3b:70:e5:2d:86:dd:b8:46:d6:50:38:2d:f3:4c: d2:41:d7:d1:a4:dc:58:77:e7:1f:31:40:89:7d:1c: 76:e6:f4:7a:fa:2b:aa:90:48:d6:3d:e7:32:b8:a6: 1a:66:a8:a3:03:cc:a9:66:06:e3:f7:c9:97:01:04: bc:b2:0f:2c:97:25:0f:e1:6c:6c:ba:45:95:cb:15: 18:4b:7a:52:4b:50:41:73:ed:fc:c1:b5:c5:9d:b5: a6:be:2e:db:91:68:2c:03:bd:ca:01:4a:8b:d9:a7: c1:96:c5:76:81:b7:e7:10:22:06:f9:64:ae:83:2c: af:ae:b4:14:68:81:7f:00:1a:4d:4d:35:4d:ef:04: 95:b2:8e:dd:87:89:54:ee:02:b4:a4:5b:98:46:92: 6b:ef:48:38:fe:ed:36:69:03:8c:f4:95:ef:b4:23: bb:e0:5e:97:68:f5:dd:44:ed:da:c1:df:c2:2c:ec: fb:fe:fd:21:38:a5:a3:53:ca:dd:0b:79:ab:6e:3e: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:E1:E5:E6:01:31:B8:EF:B5:65:2C:A3:D8:6D:2D:38:CC:FE:D3 X509v3 Authority Key Identifier: keyid:21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d1:f6:21:38:68:d0:36:67:f0:e9:95:90:c1:37:5e:86:f9: 05:b7:7d:26:6d:ab:b6:08:fe:43:7a:23:84:f2:c4:15:39:07: 08:75:9c:41:26:46:a5:c9:d7:24:75:d3:c3:1d:a6:75:89:f3: 3c:f4:43:96:fe:2e:9f:56:c8:bd:1a:71:c6:b7:89:14:f7:33: ce:1c:32:bf:e3:3c:c9:d2:6f:ac:d1:6a:65:07:a5:f0:58:60: 21:d8:d4:c9:52:f9:d1:70:e8:d2:7c:a6:68:73:c0:36:e2:a7: ec:5a:5d:95:e0:8a:59:ab:0b:0c:ab:af:5e:1c:a6:9f:68:46: 8c:29:13:c1:ad:1d:e5:8a:d9:64:11:65:48:b3:e3:e9:88:fe: ba:15:a9:8d:53:63:a4:a8:53:66:81:63:f9:41:ab:7b:8d:29: 82:0e:1c:0e:9b:6b:92:71:d0:7b:6e:60:4b:1e:c2:05:06:34: e2:bf:c7:38:5f:29:5d:59:40:96:2a:af:b5:26:7a:13:a3:c8: a1:6c:9d:77:60:3a:66:23:96:3a:7e:dc:88:13:6a:01:d7:4f: 40:86:87:c9:fa:76:0c:55:e0:ff:9f:31:f2:56:16:c8:d1:7e: ff:0c:64:79:a8:e7:e7:85:9b:0f:9f:46:c5:dc:9d:c5:8f:fb: 8d:f5:c9:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPL3JdvvQXwRQX3nIAcOIJUxNifUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQTlBODY1OEQ5MDI4RTcyQkEzMkRDMUJFNDc1MTlF RjI3MUY5RTAeFw0yNjA3MjMwODAxMTNaFw0yNjA3MjQwOTUyMTNaMDMxMTAvBgNV BAMTKERFQjhFMUU1RTYwMTMxQjhFRkI1NjUyQ0EzRDg2RDJEMzhDQ0ZFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WxcicO4QpsZsBMGPzauWrCP0 OO1COASJUZJ2Ik1FBGPqxmkGCIL2FEd1GSTOb7tUpeSO8rBb9qx+rsM7cOUtht24 RtZQOC3zTNJB19Gk3Fh35x8xQIl9HHbm9Hr6K6qQSNY95zK4phpmqKMDzKlmBuP3 yZcBBLyyDyyXJQ/hbGy6RZXLFRhLelJLUEFz7fzBtcWdtaa+LtuRaCwDvcoBSovZ p8GWxXaBt+cQIgb5ZK6DLK+utBRogX8AGk1NNU3vBJWyjt2HiVTuArSkW5hGkmvv SDj+7TZpA4z0le+0I7vgXpdo9d1E7drB38Is7Pv+/SE4paNTyt0LeatuPq/hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3rjh5eYBMbjvtWUso9htLTjM/tMwHwYDVR0j BBgwFoAUIdqahljZAo5yujLcG+R1Ge8nH54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjFwWG9qS1lWVnpiWXB5Z2JMWjRZQW5IZjJnVWM3Nnd3WTdSQVpwYXRS dEsvMC8yMURBOUE4NjU4RDkwMjhFNzJCQTMyREMxQkU0NzUxOUVGMjcxRjlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxREE5QTg2NThEOTAyOEU3 MkJBMzJEQzFCRTQ3NTE5RUYyNzFGOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjFwWG9qS1lWVnpiWXB5Z2JMWjRZQW5IZjJnVWM3Nnd3WTdSQVpwYXRSdEsvMC8y MURBOUE4NjU4RDkwMjhFNzJCQTMyREMxQkU0NzUxOUVGMjcxRjlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9H2ITho0DZn8OmVkME3Xob5Bbd9Jm2rtgj+Q3ojhPLEFTkHCHWcQSZGpcnX JHXTwx2mdYnzPPRDlv4un1bIvRpxxreJFPczzhwyv+M8ydJvrNFqZQel8FhgIdjU yVL50XDo0nymaHPANuKn7FpdleCKWasLDKuvXhymn2hGjCkTwa0d5YrZZBFlSLPj 6Yj+uhWpjVNjpKhTZoFj+UGre40pgg4cDptrknHQe25gSx7CBQY04r/HOF8pXVlA liqvtSZ6E6PIoWydd2A6ZiOWOn7ciBNqAddPQIaHyfp2DFXg/58x8lYWyNF+/wxk eajn54WbD59GxdydxY/7jfXJBA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:26:24 2026 by rpki-client