
$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
File: 21F56257920CE88D55FEE0E1D369CE905FA2782B.mft (raw, json)
Hash identifier: Q6npo563Gw+tuekGCmB5xazTT/UakcrsnanGLQ/o+FY=
Subject key identifier: 94:01:BE:03:C3:1F:EC:C7:FF:65:DE:51:7E:EE:84:15:8F:0F:4F:E0
Authority key identifier: 21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B
Certificate issuer: /CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
Certificate serial: 35DF6738A5DC768AABBDE3953A2B6224D833B935
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
Manifest number: 03D7
Signing time: Wed 08 Apr 2026 12:35:45 +0000
Manifest this update: Wed 08 Apr 2026 12:30:45 +0000
Manifest next update: Thu 09 Apr 2026 15:44:45 +0000
Files and hashes: 1: 3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa (hash: 6c/YJBJcIyir2ZBjyYD+rnqsTZDu1lOGXShCzHXlWN4=)
2: 323830343a316533383a3a2f33322d313238203d3e20323634343135.roa (hash: Jqh7Znt+BO6Q5XN62rBo8Q3k5D2NzdAe4k1XwN4ajlE=)
3: 21F56257920CE88D55FEE0E1D369CE905FA2782B.crl (hash: vAcQsQEFI+tQQTmcGvXGB3kuR7zBjfXeSW5gHdURUug=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl
rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 09 Apr 2026 15:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:df:67:38:a5:dc:76:8a:ab:bd:e3:95:3a:2b:62:24:d8:33:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
Validity
Not Before: Apr 8 12:30:45 2026 GMT
Not After : Apr 9 15:44:45 2026 GMT
Subject: CN=9401BE03C31FECC7FF65DE517EEE84158F0F4FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:ca:ac:d8:7a:63:1b:12:11:f6:c6:20:75:
c1:cc:6c:57:ef:07:31:b0:e3:22:d2:0a:00:f9:68:
44:e7:5a:a5:82:e7:e4:37:5e:17:d1:58:90:33:55:
cf:e6:2f:8d:cb:e4:ff:b5:af:b6:dd:c4:37:d2:5e:
26:5a:d4:4b:e8:b2:69:36:9c:70:35:7f:e9:8a:97:
c6:17:85:79:aa:44:84:6e:a8:28:f7:90:2c:7c:74:
4f:92:86:6a:d4:7f:7e:38:78:d6:1b:22:38:d7:bd:
7b:f1:98:a2:7b:12:1e:53:b8:6b:55:46:5d:1a:28:
fa:ce:5d:71:e6:a7:63:dc:f4:60:a5:7a:1f:06:26:
bf:91:32:90:94:f9:37:cb:26:be:5a:e9:72:fe:95:
c6:9a:11:ff:05:3c:46:05:2d:60:c5:ef:b3:79:27:
e9:98:ca:c1:6b:54:09:1c:3f:06:78:11:d2:63:51:
05:92:ea:71:64:9b:eb:c1:7d:e5:11:68:88:d6:c9:
d5:ab:66:43:cb:25:46:c2:a8:cd:ee:65:7f:10:f6:
84:36:57:58:c7:4b:e2:e0:52:85:38:85:3b:83:c2:
d4:fa:48:50:57:94:4f:9d:64:a7:66:97:36:95:41:
fc:ca:40:88:75:83:bb:1b:ff:d6:34:80:67:5d:12:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:01:BE:03:C3:1F:EC:C7:FF:65:DE:51:7E:EE:84:15:8F:0F:4F:E0
X509v3 Authority Key Identifier:
keyid:21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:47:f4:f1:0c:7a:6c:69:91:79:0d:0d:46:7f:8d:f9:60:3f:
b8:ed:7b:5f:39:1a:c9:82:6f:e1:ba:ec:e4:d4:6f:79:ce:21:
b7:87:ff:94:59:de:1f:ec:4c:12:42:a7:c0:fd:ce:25:3f:ed:
35:c0:77:7b:54:01:63:c7:2b:46:64:1f:d2:d2:ab:86:3a:81:
f6:91:72:a0:bf:6d:82:63:73:6d:3d:16:08:2a:fc:57:62:d2:
9e:51:b8:cb:c4:cf:38:b5:3d:67:5d:9c:d6:c8:99:69:a6:33:
ec:b3:48:26:c7:11:cb:bf:4e:31:b1:ad:6e:92:0b:c0:c2:07:
e5:7a:07:e5:9d:e1:de:4c:8a:37:38:16:19:fa:57:db:91:04:
11:67:3d:20:6d:68:b7:3f:de:00:75:2b:75:7d:b4:d7:67:27:
24:1a:86:f0:d5:5a:c3:ad:c8:61:50:d2:68:4b:bf:cf:e2:59:
ee:23:12:69:55:70:a9:04:7d:ba:3a:2f:ec:30:8d:96:3c:35:
b2:34:da:e5:78:1d:05:6b:0a:5c:35:62:c4:a1:02:d4:63:67:
53:60:21:01:59:ba:1a:f3:5d:30:4b:fc:3f:5b:34:3d:37:c2:
f6:4c:88:c2:df:b4:b4:c8:85:37:20:bd:7c:b5:ab:28:84:5e:
45:6e:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:50:14 2026 by rpki-client