$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json) Hash identifier: JrdOCtvsUjsxSbJGfknpZMxCjHUe52DbKAwRhf1lBzs= Subject key identifier: A4:C0:9C:8F:55:00:A0:55:00:07:04:80:CB:EA:88:21:DB:EE:19:6B Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7 Certificate serial: 37CB9ACCF8E2651C03A6C299E927EE52B0B2A6C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft Manifest number: 1B Signing time: Wed 08 Apr 2026 07:06:28 +0000 Manifest this update: Wed 08 Apr 2026 07:01:28 +0000 Manifest next update: Thu 09 Apr 2026 10:10:28 +0000 Files and hashes: 1: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: tCDvbiYHHrv8rEWfIh7s0yAiAdomHZhk15WAuvox5x4=) 2: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=) 3: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 10:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cb:9a:cc:f8:e2:65:1c:03:a6:c2:99:e9:27:ee:52:b0:b2:a6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Validity Not Before: Apr 8 07:01:28 2026 GMT Not After : Apr 9 10:10:28 2026 GMT Subject: CN=A4C09C8F5500A05500070480CBEA8821DBEE196B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:e4:7c:a4:80:00:d8:bd:da:46:ff:bd:c5: 7f:53:3c:a6:b9:3f:48:95:1f:1e:9d:ac:a3:6b:36: cf:44:e6:47:8c:35:f2:85:c6:70:af:50:c8:d3:a7: db:f9:69:6b:1b:2f:43:aa:f3:25:07:e0:79:25:a3: f9:30:7f:ab:15:ef:9f:ec:59:e6:3d:cb:ca:c6:00: b5:b8:ce:c7:33:1e:c3:bc:af:d4:a7:39:1d:8c:6d: d9:c7:75:e5:79:1b:a2:b1:f2:b9:63:02:69:da:62: db:4b:2f:31:56:6c:1e:68:1d:99:fc:36:2d:9e:29: 02:b0:b6:09:19:6b:ab:51:d2:a2:ef:d3:8d:fa:7d: b4:8a:8f:89:ea:81:17:d7:fe:3f:6f:23:41:ea:c3: 42:dc:4f:e8:e7:f1:a9:f3:f6:50:5c:fd:ba:cf:05: 87:f6:96:28:3a:dc:e0:9d:61:ff:45:f8:c2:af:3c: 87:9e:ab:03:a6:95:fb:52:df:79:37:3d:3d:9e:70: 4f:c2:47:be:d9:47:85:4c:22:8a:98:38:c7:57:aa: 04:e5:c9:6f:74:9a:35:89:ad:7a:96:ad:13:15:a8: bd:6c:c7:bf:f7:63:fe:69:a2:06:e5:dc:e9:ff:15: 09:ab:27:e7:6b:10:d1:7b:3d:c1:56:8a:51:eb:ae: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C0:9C:8F:55:00:A0:55:00:07:04:80:CB:EA:88:21:DB:EE:19:6B X509v3 Authority Key Identifier: keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:92:8b:33:7c:7e:82:0b:4d:05:d1:f9:41:dd:1f:92:05:d1: 1a:dd:85:07:6a:c6:00:76:56:ff:84:f5:de:cf:e3:2b:24:86: 9c:c6:4c:d2:7a:47:56:94:77:fd:db:59:d0:dd:26:1d:14:72: 85:69:11:e7:63:30:80:98:69:db:9f:e4:00:51:d7:84:6c:69: 61:33:f5:13:23:27:c9:b0:ac:79:5b:45:5a:2f:f0:53:3b:74: 4b:79:ce:4f:62:5f:61:96:da:1a:4f:08:aa:b9:60:f6:19:e8: 71:05:c8:2b:19:97:12:cc:da:21:3c:d2:0d:d3:04:1a:aa:83: e9:b6:e3:15:43:b0:26:fe:42:cc:e6:d9:c7:c0:12:ba:f3:86: 34:26:3d:df:d9:7b:fb:cc:2b:16:a8:02:40:27:1a:12:a1:3c: 5d:93:55:7e:ce:23:1c:3a:e8:93:f4:86:19:49:ba:6e:a2:d0: 16:3b:15:5c:12:6b:37:2f:1d:60:63:7d:6b:08:69:58:c2:48: 5e:1a:93:d7:0d:52:14:3f:9d:7e:a4:4b:03:af:e9:64:0e:73: 51:17:b0:bf:e7:ef:8d:a0:1a:f5:27:fc:6e:d2:75:b7:1a:f9: d8:37:d4:93:64:96:2f:dc:ad:87:89:37:4c:75:52:2c:08:17: eb:ac:f4:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN8uazPjiZRwDpsKZ6SfuUrCypsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF RkUzNjhDNzAeFw0yNjA0MDgwNzAxMjhaFw0yNjA0MDkxMDEwMjhaMDMxMTAvBgNV BAMTKEE0QzA5QzhGNTUwMEEwNTUwMDA3MDQ4MENCRUE4ODIxREJFRTE5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtOR8pIAA2L3aRv+9xX9TPKa5 P0iVHx6drKNrNs9E5keMNfKFxnCvUMjTp9v5aWsbL0Oq8yUH4Hklo/kwf6sV75/s WeY9y8rGALW4zsczHsO8r9SnOR2MbdnHdeV5G6Kx8rljAmnaYttLLzFWbB5oHZn8 Ni2eKQKwtgkZa6tR0qLv0436fbSKj4nqgRfX/j9vI0Hqw0LcT+jn8anz9lBc/brP BYf2lig63OCdYf9F+MKvPIeeqwOmlftS33k3PT2ecE/CR77ZR4VMIoqYOMdXqgTl yW90mjWJrXqWrRMVqL1sx7/3Y/5pogbl3On/FQmrJ+drENF7PcFWilHrrgwFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpMCcj1UAoFUABwSAy+qIIdvuGWswHwYDVR0j BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5 MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5KLM3x+ggtNBdH5Qd0fkgXRGt2FB2rGAHZW/4T13s/jKySGnMZM0npHVpR3 /dtZ0N0mHRRyhWkR52MwgJhp25/kAFHXhGxpYTP1EyMnybCseVtFWi/wUzt0S3nO T2JfYZbaGk8Iqrlg9hnocQXIKxmXEszaITzSDdMEGqqD6bbjFUOwJv5CzObZx8AS uvOGNCY939l7+8wrFqgCQCcaEqE8XZNVfs4jHDrok/SGGUm6bqLQFjsVXBJrNy8d YGN9awhpWMJIXhqT1w1SFD+dfqRLA6/pZA5zURewv+fvjaAa9Sf8btJ1txr52DfU k2SWL9yth4k3THVSLAgX66z0iw== -----END CERTIFICATE-----Generated at Wed Apr 8 20:41:24 2026 by rpki-client