$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json) Hash identifier: 8sw7yMDLwY8HaHTkoa3vFYCeE95u+FTILFpNGhcdZdk= Subject key identifier: 7D:E3:EF:A1:91:25:4F:12:CD:95:36:58:1E:BD:05:E3:5D:FB:38:6F Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Certificate serial: 0DAC4E5857299FAB08111D226BA277E1E967F0BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft Manifest number: 5D Signing time: Wed 08 Apr 2026 17:21:51 +0000 Manifest this update: Wed 08 Apr 2026 17:16:51 +0000 Manifest next update: Thu 09 Apr 2026 21:04:51 +0000 Files and hashes: 1: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=) 2: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=) 3: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: wtUFtTF+EBq5M5YDiwFA/qMzYchKNy36bbGn4is4YEc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 21:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:4e:58:57:29:9f:ab:08:11:1d:22:6b:a2:77:e1:e9:67:f0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Validity Not Before: Apr 8 17:16:51 2026 GMT Not After : Apr 9 21:04:51 2026 GMT Subject: CN=7DE3EFA191254F12CD9536581EBD05E35DFB386F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:47:af:17:1b:8b:ad:6f:7a:77:f0:23:3c: 5e:ac:21:45:49:9b:f2:04:a6:bd:bd:d4:9d:8a:2a: ad:d5:d8:63:d9:76:50:5d:42:ec:4c:c6:8f:87:f8: 29:7d:e9:b3:28:5f:7c:92:67:82:57:d8:0b:a9:44: b5:07:45:7b:9a:c4:b1:4a:f6:56:10:09:3e:1f:5b: e7:7b:69:32:c7:75:aa:ea:58:c1:e7:67:3b:53:86: c3:50:9b:e0:63:69:1f:39:f8:d2:a8:14:be:a5:ff: 85:5f:a5:62:65:2a:2a:ea:d3:00:4b:23:d9:a2:15: 91:3a:3b:77:38:ac:1e:75:75:cd:0d:44:f0:ed:42: 87:d8:0a:33:1e:ec:a3:6f:38:fd:cf:00:33:37:a2: d7:3e:91:35:0c:f0:02:04:f0:b8:da:10:7e:dd:ca: 5f:92:28:25:50:6a:25:b8:33:d3:81:1a:84:f1:10: ea:29:41:8d:e5:1e:62:d0:6e:db:74:47:76:c4:b4: 5e:8c:d7:8c:5b:b9:cc:93:3b:a8:00:4d:f1:dd:db: a1:9d:62:3c:32:8c:d0:e3:15:fc:d9:fc:18:cf:49: 0a:fd:79:a0:f4:2b:b4:40:2c:c3:b7:dd:a4:8e:7c: 0e:4f:5d:b0:75:1c:96:1d:37:f5:7a:98:4f:a3:7b: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:EF:A1:91:25:4F:12:CD:95:36:58:1E:BD:05:E3:5D:FB:38:6F X509v3 Authority Key Identifier: keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a1:91:de:18:7a:a4:de:c5:88:e9:36:5a:78:d4:66:aa:a2: fb:4f:c4:62:db:25:f5:8d:1f:ed:53:16:e2:e0:43:bf:46:8a: 41:b9:aa:03:e6:29:f5:60:66:64:5c:21:23:5f:13:7f:3f:15: 19:50:3b:c2:90:73:14:d9:e0:f1:9d:7c:31:e8:45:c0:22:a7: d6:ac:32:ca:b6:a3:bb:66:f4:43:bc:4a:8d:f8:01:d1:47:00: 1f:e6:25:ea:60:03:c6:a5:ee:e7:3b:d2:9e:c5:12:92:df:70: d0:cf:de:d5:b2:4a:66:31:e8:19:57:d0:82:99:41:a2:77:2b: 1f:a8:da:96:9e:ef:ff:18:d5:90:1d:34:43:89:6b:45:8d:89: ad:05:22:bf:76:45:7e:06:6b:db:b5:dd:6a:57:7f:55:bd:1f: f3:dd:f1:80:a5:d8:92:a2:5a:bd:74:47:40:a8:30:d4:57:78: 42:2b:4c:bc:41:e5:30:12:3f:b7:85:0b:c2:d3:3c:1f:49:a3: a9:23:b5:f4:d2:d1:07:7c:29:97:79:d5:5c:57:67:3a:0c:8e: 83:53:a9:1f:04:bd:c9:fc:19:87:6a:70:b9:8c:75:fb:5c:01: 01:93:cc:47:ea:50:2b:0d:4a:d9:c5:af:07:32:01:a5:30:13: 2b:d0:53:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDaxOWFcpn6sIER0ia6J34eln8L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD QUQzNTg5ODAeFw0yNjA0MDgxNzE2NTFaFw0yNjA0MDkyMTA0NTFaMDMxMTAvBgNV BAMTKDdERTNFRkExOTEyNTRGMTJDRDk1MzY1ODFFQkQwNUUzNURGQjM4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8b0evFxuLrW96d/AjPF6sIUVJ m/IEpr291J2KKq3V2GPZdlBdQuxMxo+H+Cl96bMoX3ySZ4JX2AupRLUHRXuaxLFK 9lYQCT4fW+d7aTLHdarqWMHnZztThsNQm+BjaR85+NKoFL6l/4VfpWJlKirq0wBL I9miFZE6O3c4rB51dc0NRPDtQofYCjMe7KNvOP3PADM3otc+kTUM8AIE8LjaEH7d yl+SKCVQaiW4M9OBGoTxEOopQY3lHmLQbtt0R3bEtF6M14xbucyTO6gATfHd26Gd YjwyjNDjFfzZ/BjPSQr9eaD0K7RALMO33aSOfA5PXbB1HJYdN/V6mE+jezzVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfePvoZElTxLNlTZYHr0F4137OG8wHwYDVR0j BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6GR3hh6pN7FiOk2WnjUZqqi+0/EYtsl9Y0f7VMW4uBDv0aKQbmqA+Yp9WBm ZFwhI18Tfz8VGVA7wpBzFNng8Z18MehFwCKn1qwyyraju2b0Q7xKjfgB0UcAH+Yl 6mADxqXu5zvSnsUSkt9w0M/e1bJKZjHoGVfQgplBoncrH6jalp7v/xjVkB00Q4lr RY2JrQUiv3ZFfgZr27Xdald/Vb0f893xgKXYkqJavXRHQKgw1Fd4QitMvEHlMBI/ t4ULwtM8H0mjqSO19NLRB3wpl3nVXFdnOgyOg1OpHwS9yfwZh2pwuYx1+1wBAZPM R+pQKw1K2cWvBzIBpTATK9BT5g== -----END CERTIFICATE-----Generated at Wed Apr 8 21:05:40 2026 by rpki-client