
$ rpki-client -vvvf rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
File: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft (raw, json)
Hash identifier: RAdbKu2+xILA7g039bhqk+UwZCeZyyncoJQdbYeUaB0=
Subject key identifier: 50:F2:51:DB:9C:25:60:75:D3:7D:1C:F0:4F:7E:02:86:2C:E9:89:E9
Authority key identifier: 21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62
Certificate issuer: /CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62
Certificate serial: 0AB9E519CE7573771855DE457CBA47CABE3B2EC2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
Manifest number: 0177
Signing time: Mon 24 Aug 2026 05:19:21 +0000
Manifest this update: Mon 24 Aug 2026 05:14:21 +0000
Manifest next update: Tue 25 Aug 2026 07:38:21 +0000
Files and hashes: 1: 34352e3136312e3232342e302f32322d3234203d3e20323638343737.roa (hash: VQI4ymWbBnU+UgVt+pYFL4UDEQuVU0M1Kf8Kqq/NFjI=)
2: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl (hash: H2IRC+S3XN4uHo6tQ042YNTBuCQ6n9xR9zmhTiFH7yU=)
3: 323830343a353163383a3a2f33322d3336203d3e20323638343737.roa (hash: ZeYF/IADxUCs97amTb0H/O7aiJsJoEpO8oClUzCl2Rs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl
rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 07:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b9:e5:19:ce:75:73:77:18:55:de:45:7c:ba:47:ca:be:3b:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62
Validity
Not Before: Aug 24 05:14:21 2026 GMT
Not After : Aug 25 07:38:21 2026 GMT
Subject: CN=50F251DB9C256075D37D1CF04F7E02862CE989E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:41:de:46:6b:e1:5a:69:85:bb:fe:28:be:
78:06:52:0f:54:61:27:8a:4f:ff:09:c7:40:23:ad:
1d:83:c3:a0:e9:08:32:d2:10:2b:b2:bf:5c:ae:57:
7a:42:09:0b:2c:28:ef:1c:58:23:13:01:12:e7:4f:
eb:38:b8:4e:ef:68:28:b7:78:cb:7b:46:c7:8b:d1:
4a:ce:81:71:fe:76:01:5e:c6:bc:69:00:1c:3f:1d:
fe:80:61:a0:98:35:bd:26:77:ac:38:ce:a0:a4:27:
66:70:7a:93:75:e7:f9:68:d8:1d:e6:f2:12:40:ab:
ee:c3:c0:87:5f:14:a2:3d:33:0f:d6:ef:f6:76:80:
56:ea:03:38:26:2b:b4:8b:5a:ed:ee:6c:1d:7a:80:
16:a8:b6:fc:48:29:e0:38:02:38:5d:5e:94:75:b1:
89:88:33:76:10:62:a4:fb:d0:7e:d4:da:59:47:b7:
62:df:c9:0e:e5:64:1e:51:ea:67:65:01:b8:b7:ed:
4f:55:c3:24:16:ac:cd:e9:95:d4:74:ec:aa:c3:e3:
ea:f0:74:12:de:1b:1b:d4:4e:76:8f:a4:8f:40:ec:
cb:93:29:9c:f5:bb:b0:15:f5:3d:42:17:dc:ca:2f:
0a:20:76:cc:48:c8:f7:3f:61:45:9a:56:f8:46:53:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:51:DB:9C:25:60:75:D3:7D:1C:F0:4F:7E:02:86:2C:E9:89:E9
X509v3 Authority Key Identifier:
keyid:21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:f9:0a:f4:39:df:62:91:da:ce:ad:ef:e9:04:15:51:7b:
90:a3:78:07:2b:86:e0:27:3e:7a:95:2a:12:23:b8:7b:e1:61:
df:75:71:0a:e5:49:a3:9d:50:75:ce:bf:24:f2:87:c0:90:38:
2c:9f:31:af:e6:a5:d0:2e:33:16:a1:73:cc:26:bc:66:fc:55:
2f:0e:5c:ff:03:36:45:70:57:74:fa:8e:d2:5d:07:6f:bf:de:
3a:a1:cc:9d:21:a9:87:18:9a:9b:4f:54:d2:b8:29:0c:72:38:
06:47:17:7f:92:1f:4e:a0:43:a3:16:08:08:1b:a4:d9:8c:56:
c6:39:7b:5f:85:24:74:ac:6f:20:19:e3:a4:3b:83:ed:d8:2b:
f0:2d:28:9f:01:f0:12:eb:7f:8a:91:df:f5:b3:9e:11:1f:d0:
57:7d:48:0f:91:73:65:f7:7a:79:2f:fe:4d:d8:6b:6c:92:03:
4f:d7:a5:21:3d:3e:85:4a:f5:28:55:41:42:7c:a8:d9:cb:4e:
1b:db:eb:c9:48:3e:c8:2c:fa:35:a5:56:dc:c0:22:c1:86:0e:
4c:a9:d6:d8:a0:99:5e:ec:25:7e:7b:a1:3c:7f:32:ad:8e:74:
a3:48:7c:4f:ed:88:c2:74:77:0c:1f:a6:9a:a0:d7:18:77:5f:
f6:ec:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:37:21 2026 by rpki-client