
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json)
Hash identifier: EkD0tAH8gAK6F63hsszuCngqT6rJiobpnBPwKAUYoQw=
Subject key identifier: 79:F4:17:A0:C2:B7:15:66:10:AF:B2:99:FB:4F:81:FE:30:F7:BD:C4
Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7
Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7
Certificate serial: 0FB7E13C819A18AAAB0F95FB2F4201E06EA1B83E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
Manifest number: 58
Signing time: Sun 24 May 2026 08:19:41 +0000
Manifest this update: Sun 24 May 2026 08:14:41 +0000
Manifest next update: Mon 25 May 2026 12:13:41 +0000
Files and hashes: 1: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=)
2: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=)
3: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: rd1QM4E9VFG19/eCydEf5OpNdx4R8O/AmYj5vLHrTeY=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl
rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 12:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b7:e1:3c:81:9a:18:aa:ab:0f:95:fb:2f:42:01:e0:6e:a1:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7
Validity
Not Before: May 24 08:14:41 2026 GMT
Not After : May 25 12:13:41 2026 GMT
Subject: CN=79F417A0C2B7156610AFB299FB4F81FE30F7BDC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:39:84:99:88:fb:14:81:e3:79:ca:56:bf:
a3:9f:c7:af:2a:b9:b4:65:70:c2:fe:d8:47:a7:52:
66:d9:80:f5:69:bc:23:ed:de:5c:64:9a:29:27:ce:
9b:a3:86:6e:02:23:5b:c2:0e:ca:7d:93:b5:58:b1:
d6:e7:58:45:47:4b:3f:b3:d0:9e:36:a4:a9:cc:93:
8e:c7:6f:d1:78:15:69:00:b9:34:15:7a:c4:88:b6:
fd:91:6a:c9:2c:f2:b4:f6:6e:6a:f2:3c:d6:12:42:
0b:3d:55:fd:b5:92:c6:27:46:6a:9d:ad:e6:e5:f7:
5f:a8:65:9e:e5:71:80:40:74:a6:97:14:bf:b6:e8:
c1:aa:ea:c7:53:a6:ac:a2:2d:c4:87:f6:d6:3f:7f:
92:70:80:3c:ba:8c:ad:5f:8d:27:42:89:9d:75:62:
dc:30:26:5c:6f:7f:2f:a9:6a:f5:db:e7:18:d0:5f:
9b:0c:b5:c1:ef:eb:c7:1e:89:74:df:d9:45:55:71:
07:e1:0d:1b:a3:6b:69:3b:73:41:24:37:c0:71:ce:
66:36:62:1b:bc:da:3f:e2:b2:38:6a:5c:84:a1:77:
c2:64:6a:d6:95:c8:a5:e5:bf:c8:1a:71:22:c6:8e:
06:fa:8f:7b:67:7a:55:02:f7:dd:ce:13:a0:67:78:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F4:17:A0:C2:B7:15:66:10:AF:B2:99:FB:4F:81:FE:30:F7:BD:C4
X509v3 Authority Key Identifier:
keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c7:46:0e:62:38:de:e1:47:24:21:af:5e:c1:ab:0b:3b:e3:
ac:00:c7:29:20:28:8f:7d:58:55:37:79:bb:da:89:75:f3:e4:
91:3f:8a:ed:4e:50:02:a4:52:30:c9:a0:db:c1:de:2b:34:e9:
b8:d0:88:38:a0:93:74:9e:a0:17:c8:47:c2:7c:64:83:72:92:
91:40:bd:b6:3c:fb:f3:e6:1d:c0:31:bd:38:c1:0e:46:63:47:
94:01:be:2a:cb:f3:00:63:0e:49:e9:04:9e:9b:12:2b:02:9b:
0f:19:06:6d:5a:ec:2d:9f:56:53:31:7b:e1:e3:24:8e:66:c2:
7e:0e:a7:9a:3b:42:1f:a6:6e:64:58:ff:cb:a7:81:49:09:d6:
4e:38:8c:91:66:c3:56:ba:be:47:ab:ea:f1:ad:20:e9:4f:24:
62:2f:9c:ef:5e:c2:e2:44:76:ba:21:38:b3:68:e4:9d:a9:3b:
4a:aa:1d:a0:5d:fc:93:9a:c0:28:69:a0:23:12:3c:04:13:c3:
cb:39:29:41:04:c9:89:97:8d:8e:d1:7e:09:9f:c0:41:e7:2a:
74:5f:5e:a4:5f:d2:a8:5d:4c:d5:8c:bb:6c:b1:fb:93:b5:e0:
3c:6b:51:db:95:2d:08:93:f9:cc:4d:70:05:90:b8:5d:33:58:
80:c9:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:37:16 2026 by rpki-client