$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json) Hash identifier: rNxU7phIowcZ0fSABTY64r+9hqHf7iWJjhsqkyh6Dho= Subject key identifier: D4:53:5C:FB:5F:D5:3E:36:F9:40:1C:CA:CC:34:95:3D:BB:F0:6C:81 Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Certificate serial: 6DF9EE93D1E9431981BC3B61660DB094C3B33A4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft Manifest number: D4 Signing time: Wed 08 Jul 2026 04:02:28 +0000 Manifest this update: Wed 08 Jul 2026 03:57:28 +0000 Manifest next update: Thu 09 Jul 2026 05:22:28 +0000 Files and hashes: 1: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=) 2: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=) 3: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: E9U236JYG0ZbyHcaGoJkNA1+VbQkQMuqC1o8pnoh5Mk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 05:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f9:ee:93:d1:e9:43:19:81:bc:3b:61:66:0d:b0:94:c3:b3:3a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Validity Not Before: Jul 8 03:57:28 2026 GMT Not After : Jul 9 05:22:28 2026 GMT Subject: CN=D4535CFB5FD53E36F9401CCACC34953DBBF06C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:66:eb:41:4c:cd:74:aa:93:0c:51:2a:22: 63:e1:3e:0e:32:99:02:56:79:f5:36:2c:cb:e2:43: 06:97:9b:31:86:2a:fe:91:2b:30:8c:15:6a:97:9b: 46:53:07:45:bc:99:c2:d9:70:88:77:84:24:d9:db: 60:7b:bb:80:c2:87:05:34:0a:a3:cf:02:e4:7e:c9: 81:6f:89:96:7f:33:b9:2d:0c:f0:25:5e:eb:63:32: 42:78:8c:e3:04:39:21:d4:d5:d0:69:e3:72:89:f1: 98:03:01:1b:24:d6:b4:fd:a7:2a:04:4e:5b:05:0a: be:06:4c:46:78:a2:e9:8f:45:5b:42:98:77:a6:01: ee:39:7d:00:ab:8b:1c:5c:ca:d9:ba:b6:f7:5a:f0: af:33:73:a0:04:7d:a1:18:eb:b2:a6:4e:98:fc:8b: 86:26:15:ea:ab:aa:4c:c2:29:b5:bb:e7:bb:24:7c: f9:0e:e8:34:17:d9:9f:fc:33:63:5a:67:97:fe:a3: 75:6d:e8:df:6d:a9:dc:4b:0d:52:49:fd:81:36:02: b2:9c:eb:cb:68:4e:e5:e2:ed:00:96:95:3b:a0:fd: 83:35:35:7e:2c:20:b8:b7:06:20:04:4b:70:33:f0: 54:c3:6b:aa:f5:72:fa:9d:20:96:a2:3c:6f:0e:0c: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:53:5C:FB:5F:D5:3E:36:F9:40:1C:CA:CC:34:95:3D:BB:F0:6C:81 X509v3 Authority Key Identifier: keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0c:a5:a3:e0:27:99:48:92:ff:ae:b2:99:16:e1:06:fd:df: e1:32:fe:35:79:8b:95:dc:4a:da:ea:b9:05:4d:c3:4d:14:44: 44:1b:60:f1:c0:9c:59:d4:d7:cd:12:1a:e3:5d:ab:72:47:d8: c1:6b:38:2d:be:7b:79:5f:b1:6d:a1:a8:a9:6f:93:3d:70:c6: 03:50:15:e2:58:28:92:ac:46:b4:4f:b2:35:05:92:6e:72:1c: 41:8d:90:cf:ac:3e:83:8e:90:16:08:9a:d3:b2:2f:b3:d8:32: dc:e2:70:ab:bb:8c:e1:97:0d:e7:e9:3e:8b:d5:0f:7c:bd:6a: 70:c4:65:12:8f:e2:64:bf:a4:75:9d:d7:85:0b:0f:c8:d4:8e: 8c:ca:f5:f3:4a:a0:c4:c2:b9:4f:a1:ce:28:8d:0e:dd:1e:c2: 5f:7e:37:39:b1:15:11:f9:08:08:89:f5:73:fc:34:fb:7a:2e: 84:62:95:cc:d4:db:df:6b:0b:9b:fe:7e:2c:e1:37:b1:f3:82: 66:f5:5e:3b:38:3b:a1:07:58:73:88:7e:d8:0a:16:76:8d:51: e0:7a:74:ee:62:05:11:67:c6:2b:fa:75:30:3e:85:66:d8:b8: 4e:63:d3:26:63:cd:e4:fd:46:56:dd:63:ce:2e:3d:b1:5e:b6: c7:26:8a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbfnuk9HpQxmBvDthZg2wlMOzOk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD QUQzNTg5ODAeFw0yNjA3MDgwMzU3MjhaFw0yNjA3MDkwNTIyMjhaMDMxMTAvBgNV BAMTKEQ0NTM1Q0ZCNUZENTNFMzZGOTQwMUNDQUNDMzQ5NTNEQkJGMDZDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BWbrQUzNdKqTDFEqImPhPg4y mQJWefU2LMviQwaXmzGGKv6RKzCMFWqXm0ZTB0W8mcLZcIh3hCTZ22B7u4DChwU0 CqPPAuR+yYFviZZ/M7ktDPAlXutjMkJ4jOMEOSHU1dBp43KJ8ZgDARsk1rT9pyoE TlsFCr4GTEZ4oumPRVtCmHemAe45fQCrixxcytm6tvda8K8zc6AEfaEY67KmTpj8 i4YmFeqrqkzCKbW757skfPkO6DQX2Z/8M2NaZ5f+o3Vt6N9tqdxLDVJJ/YE2ArKc 68toTuXi7QCWlTug/YM1NX4sILi3BiAES3Az8FTDa6r1cvqdIJaiPG8ODHIHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1FNc+1/VPjb5QBzKzDSVPbvwbIEwHwYDVR0j BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnQylo+AnmUiS/66ymRbhBv3f4TL+NXmLldxK2uq5BU3DTRRERBtg8cCcWdTX zRIa412rckfYwWs4Lb57eV+xbaGoqW+TPXDGA1AV4lgokqxGtE+yNQWSbnIcQY2Q z6w+g46QFgia07Ivs9gy3OJwq7uM4ZcN5+k+i9UPfL1qcMRlEo/iZL+kdZ3XhQsP yNSOjMr180qgxMK5T6HOKI0O3R7CX343ObEVEfkICIn1c/w0+3ouhGKVzNTb32sL m/5+LOE3sfOCZvVeOzg7oQdYc4h+2AoWdo1R4Hp07mIFEWfGK/p1MD6FZti4TmPT JmPN5P1GVt1jzi49sV62xyaK+Q== -----END CERTIFICATE-----Generated at Wed Jul 8 15:24:52 2026 by rpki-client