
$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
File: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft (raw, json)
Hash identifier: FpusuukJ04fRLvsfpH0YX9m629wFJECy/cAWjw1sEwU=
Subject key identifier: A2:FD:97:21:0D:D3:83:44:41:E8:CE:7F:DE:A6:5B:E8:26:50:D7:EE
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Certificate issuer: /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial: 3121A3EB5C5CFCF3A2D911724EB73BBA2D077BE2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
Manifest number: 0411
Signing time: Sun 24 May 2026 13:40:50 +0000
Manifest this update: Sun 24 May 2026 13:35:50 +0000
Manifest next update: Mon 25 May 2026 15:07:50 +0000
Files and hashes: 1: 3133382e3132312e3136342e302f32342d3234203d3e20323730393130.roa (hash: DQ/dBKnGAO+nMEtu22vuOHu4SoQakMP9Pkd1UiA0ct4=)
2: 3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (hash: l17UN9IzRIABa59CeIRbssQa7kwxF2pq05HuyXEYi0U=)
3: 323830343a373335633a3a2f33322d3332203d3e20323730393130.roa (hash: Oyv+7D9xugIZCh9Lg0JSqjdqnw1enpGbnitSgxBQNbg=)
4: 3133382e3132312e3136352e302f32342d3234203d3e20323730393130.roa (hash: 7aTtgUqEyqPuej3q2lwsSTr2rk/MI0wGxGT/5iEVdrk=)
5: 3133382e3132312e3136372e302f32342d3234203d3e20323730393130.roa (hash: mkvsDsAhdYz1n1tZbIo6R1LGkWRQcfz3F9N/aJagqtU=)
6: 3133382e3132312e3136362e302f32342d3234203d3e20323730393130.roa (hash: 856oxyqm6ptr7whM8O40m6eFs/N6/chbwdBgzf+BE/g=)
7: 323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (hash: ZbLY81Qr/kgliAkBV3YAtVvd9gQwCN9bnYLAY1+FTEo=)
8: 21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl (hash: yyB77NODM+GccRl2z2u7h9wO9w+D+Ad4Q3ZeF1p88Zc=)
9: 323830343a373335633a3a2f33332d3333203d3e20323730393130.roa (hash: gUzk6XeWFdKb3L97R9Jbxb8JQipRUEL8ki7wNf67nXs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 15:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:21:a3:eb:5c:5c:fc:f3:a2:d9:11:72:4e:b7:3b:ba:2d:07:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Validity
Not Before: May 24 13:35:50 2026 GMT
Not After : May 25 15:07:50 2026 GMT
Subject: CN=A2FD97210DD3834441E8CE7FDEA65BE82650D7EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:ce:2e:a9:df:b9:78:d1:50:80:b4:10:bb:
c9:76:7b:98:e4:03:73:80:30:24:9a:11:ad:53:cf:
da:6d:8a:7b:ea:e8:da:44:08:79:0e:be:50:4c:54:
8d:5b:0b:f5:2f:0c:80:67:3b:65:14:ca:17:b5:c8:
50:61:99:df:61:e0:cd:25:7e:d5:69:66:9a:2b:7e:
66:40:4f:0e:00:80:c0:bf:b5:6f:78:d6:fd:0c:fd:
21:2c:69:b4:92:e4:dc:21:a5:d6:39:3c:72:88:bb:
56:9e:26:05:a1:d1:cc:36:68:93:3d:44:dd:c5:7d:
da:15:58:b1:16:bb:63:1f:2a:7b:be:8e:d0:cb:78:
e4:d2:74:48:78:42:83:43:6a:5c:77:12:7c:dd:51:
a8:5d:1b:00:4d:00:d7:30:0b:53:ef:86:a9:8a:69:
3f:c7:b5:51:d7:74:5c:ea:69:41:dd:86:fb:16:ce:
a4:41:e1:fe:76:56:81:5d:0b:b5:5d:0a:2d:f8:0b:
74:2c:e0:87:13:c5:b7:2b:6d:de:a8:5f:c2:a1:17:
77:00:48:86:51:4d:8c:59:54:76:12:27:0c:8a:3b:
d3:6e:f1:00:7d:82:d3:11:80:13:79:63:ba:f2:e0:
30:20:db:6b:f2:04:a0:e0:ba:52:ae:ba:00:d0:d7:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:97:21:0D:D3:83:44:41:E8:CE:7F:DE:A6:5B:E8:26:50:D7:EE
X509v3 Authority Key Identifier:
keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:ec:93:bd:9d:14:01:55:cf:61:8e:22:85:f5:c9:88:fe:
f6:e8:72:8e:a0:61:ae:42:0d:e3:07:1e:95:af:49:19:a7:3c:
bd:84:1b:81:d6:06:2b:07:8d:e3:97:44:a2:98:16:ae:8f:78:
89:65:f7:28:80:ba:ce:87:0e:c8:16:ef:0e:93:e6:f5:a7:d5:
c8:9a:34:91:43:54:fe:b7:e3:ed:c4:e6:fa:e4:5e:0a:9d:a5:
db:0b:ea:36:6e:d7:9c:f5:76:d4:99:24:f1:73:87:64:ca:94:
bd:59:83:0f:fc:de:61:af:25:62:e7:29:c9:4f:c5:8b:4a:ba:
ac:33:40:52:7e:76:77:30:1c:ea:67:11:f6:8b:4b:e6:ff:10:
f4:55:a9:d1:61:ea:52:54:45:a9:99:5f:d0:55:56:09:8d:69:
b3:71:ca:8b:9a:0d:99:42:c8:db:df:e7:60:1f:8a:27:94:ab:
07:7d:61:5a:c3:41:d1:00:e3:5a:31:6e:55:a5:3b:a9:db:df:
d9:f5:2e:4c:78:dd:6d:f4:24:59:25:fd:0e:93:6c:fc:84:ef:
6b:35:3f:91:ab:89:59:1f:76:3e:a2:be:c0:75:32:11:74:d0:
76:ae:53:d5:2f:b3:ef:00:3c:bb:92:33:02:c5:85:2a:77:00:
27:77:53:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMSGj61xc/POi2RFyTrc7ui0He+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNjA1MjQxMzM1NTBaFw0yNjA1MjUxNTA3NTBaMDMxMTAvBgNV
BAMTKEEyRkQ5NzIxMEREMzgzNDQ0MUU4Q0U3RkRFQTY1QkU4MjY1MEQ3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeo84uqd+5eNFQgLQQu8l2e5jk
A3OAMCSaEa1Tz9ptinvq6NpECHkOvlBMVI1bC/UvDIBnO2UUyhe1yFBhmd9h4M0l
ftVpZporfmZATw4AgMC/tW941v0M/SEsabSS5NwhpdY5PHKIu1aeJgWh0cw2aJM9
RN3FfdoVWLEWu2MfKnu+jtDLeOTSdEh4QoNDalx3EnzdUahdGwBNANcwC1PvhqmK
aT/HtVHXdFzqaUHdhvsWzqRB4f52VoFdC7VdCi34C3Qs4IcTxbcrbd6oX8KhF3cA
SIZRTYxZVHYSJwyKO9Nu8QB9gtMRgBN5Y7ry4DAg22vyBKDgulKuugDQ15bTAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUov2XIQ3Tg0RB6M5/3qZb6CZQ1+4wHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRUQ2YvMS8y
MUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj/Hsk72dFAFVz2GOIoX1yYj+9uhyjqBhrkIN4wcela9JGac8vYQbgdYGKweN
45dEopgWro94iWX3KIC6zocOyBbvDpPm9afVyJo0kUNU/rfj7cTm+uReCp2l2wvq
Nm7XnPV21Jkk8XOHZMqUvVmDD/zeYa8lYucpyU/Fi0q6rDNAUn52dzAc6mcR9otL
5v8Q9FWp0WHqUlRFqZlf0FVWCY1ps3HKi5oNmULI29/nYB+KJ5SrB31hWsNB0QDj
WjFuVaU7qdvf2fUuTHjdbfQkWSX9DpNs/ITvazU/kauJWR92PqK+wHUyEXTQdq5T
1S+z7wA8u5IzAsWFKncAJ3dT/A==
-----END CERTIFICATE-----
Generated at Sun May 24 17:12:06 2026 by rpki-client