$ rpki-client -vvvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json) Hash identifier: kIiiiAEsARFHGjb95Zc7BK9pv+ZGwG64BbOXQahFQww= Subject key identifier: 40:B0:47:D6:FD:8A:98:86:1E:C7:2A:BC:D3:D9:FD:0F:37:03:71:26 Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7 Certificate serial: 45CB9DFC86056DEF10BD9A9E9BFD3C23597EF41E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft Manifest number: CA Signing time: Mon 24 Aug 2026 03:16:33 +0000 Manifest this update: Mon 24 Aug 2026 03:11:33 +0000 Manifest next update: Tue 25 Aug 2026 03:45:33 +0000 Files and hashes: 1: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=) 2: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=) 3: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: h6vnGjqX0TEkiVEDHzQ+NcOk451cF+Gj657glH5ZGMc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 03:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cb:9d:fc:86:05:6d:ef:10:bd:9a:9e:9b:fd:3c:23:59:7e:f4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Validity Not Before: Aug 24 03:11:33 2026 GMT Not After : Aug 25 03:45:33 2026 GMT Subject: CN=40B047D6FD8A98861EC72ABCD3D9FD0F37037126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:89:ee:58:ee:a4:f1:dd:75:33:88:2c:eb:de: dd:3f:79:55:98:78:b2:2c:16:10:c1:f6:90:d6:d8: 98:34:e2:80:a8:7a:68:90:b3:ba:cc:47:6e:91:e4: a5:29:70:d1:d1:a3:42:e5:3d:e6:5d:16:df:e4:fb: 69:cc:54:f1:0f:ee:0b:3e:91:bd:b9:82:07:f6:23: 84:e6:49:fa:39:42:8a:36:39:83:e8:e3:29:a2:0d: ee:f2:68:b4:c9:32:7e:d1:d8:2d:1b:90:d3:1a:0e: ac:03:c0:20:08:83:ec:84:5a:14:b0:e7:8f:f1:a3: 7a:6a:74:72:03:ba:1f:3c:82:a7:12:9f:1e:bd:3f: 38:8c:ad:91:0a:9b:3b:25:0d:64:b5:82:83:35:09: a7:d3:4f:02:8e:25:c5:34:9a:cf:9d:60:e9:11:e2: e0:38:50:2b:14:81:14:53:33:39:dc:e9:4f:41:e3: 16:0b:77:8f:4c:46:aa:06:bc:6e:ad:44:51:da:94: c5:f7:cd:ff:f2:ac:41:82:db:af:cb:8c:20:ea:59: 55:39:5a:dc:21:c7:eb:b0:3e:13:06:78:6f:9e:9e: ce:39:4f:f8:a3:d5:df:56:6b:47:52:33:30:f1:f4: cb:ce:52:3e:94:f4:c2:df:df:76:29:4d:74:47:a7: cc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:47:D6:FD:8A:98:86:1E:C7:2A:BC:D3:D9:FD:0F:37:03:71:26 X509v3 Authority Key Identifier: keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:95:3b:f3:f1:18:88:ca:f7:b7:34:32:3e:63:e2:5c:8d:5b: ed:8d:0f:3e:3c:df:23:71:01:47:f5:9a:a1:d7:4a:e6:08:34: d8:ad:99:94:06:5e:f7:53:43:f6:e4:16:13:ea:1d:48:55:6f: 31:fa:e2:3d:f3:8b:ef:65:1e:26:29:aa:cc:a1:8d:b1:e8:12: ac:1d:c9:7d:ea:4c:03:32:d6:ef:48:9f:40:17:20:9f:89:32: cf:2b:12:62:fd:c5:6a:22:33:95:d0:1e:79:2e:52:bd:c9:72: f1:e8:bd:fa:5a:01:44:08:b8:65:87:ae:c4:4a:e1:10:25:15: 54:06:28:5e:f6:61:dc:99:7f:f8:e6:53:86:14:29:cb:17:21: 73:2b:2d:ba:f1:da:2a:d0:97:c7:7e:ac:83:f8:5f:fb:bb:69: 0f:c7:eb:0f:c1:03:20:df:57:2b:f2:22:47:a1:a5:b7:2f:ce: c8:4c:53:b3:06:39:4f:c2:90:37:7a:fe:01:37:5b:51:3a:6b: a6:aa:78:6b:2e:0d:1c:95:ed:a0:2d:90:0e:af:70:c8:88:0d: 35:76:51:5d:8e:f2:1b:3b:0f:d8:c8:3f:e7:cc:dd:6d:10:d1: be:8d:88:a0:fe:03:e5:5b:26:db:9a:d7:3b:d6:db:9a:16:e7: 22:91:76:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURcud/IYFbe8QvZqem/08I1l+9B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF RkUzNjhDNzAeFw0yNjA4MjQwMzExMzNaFw0yNjA4MjUwMzQ1MzNaMDMxMTAvBgNV BAMTKDQwQjA0N0Q2RkQ4QTk4ODYxRUM3MkFCQ0QzRDlGRDBGMzcwMzcxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeie5Y7qTx3XUziCzr3t0/eVWY eLIsFhDB9pDW2Jg04oCoemiQs7rMR26R5KUpcNHRo0LlPeZdFt/k+2nMVPEP7gs+ kb25ggf2I4TmSfo5Qoo2OYPo4ymiDe7yaLTJMn7R2C0bkNMaDqwDwCAIg+yEWhSw 54/xo3pqdHIDuh88gqcSnx69PziMrZEKmzslDWS1goM1CafTTwKOJcU0ms+dYOkR 4uA4UCsUgRRTMznc6U9B4xYLd49MRqoGvG6tRFHalMX3zf/yrEGC26/LjCDqWVU5 Wtwhx+uwPhMGeG+ens45T/ij1d9Wa0dSMzDx9MvOUj6U9MLf33YpTXRHp8xtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQLBH1v2KmIYexyq809n9DzcDcSYwHwYDVR0j BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5 MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADJU78/EYiMr3tzQyPmPiXI1b7Y0PPjzfI3EBR/WaoddK5gg02K2ZlAZe91ND 9uQWE+odSFVvMfriPfOL72UeJimqzKGNsegSrB3JfepMAzLW70ifQBcgn4kyzysS Yv3FaiIzldAeeS5Svcly8ei9+loBRAi4ZYeuxErhECUVVAYoXvZh3Jl/+OZThhQp yxchcystuvHaKtCXx36sg/hf+7tpD8frD8EDIN9XK/IiR6Glty/OyExTswY5T8KQ N3r+ATdbUTprpqp4ay4NHJXtoC2QDq9wyIgNNXZRXY7yGzsP2Mg/58zdbRDRvo2I oP4D5Vsm25rXO9bbmhbnIpF28w== -----END CERTIFICATE-----Generated at Mon Aug 24 05:16:23 2026 by rpki-client