
$ rpki-client -vvf rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
File: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft (raw, json)
Hash identifier: yl06+3i4EHEKn/J37SG2AqJuxj+354xFF4EdPVhG60U=
Subject key identifier: 8E:53:50:4B:2E:97:7A:E6:A1:AE:AB:18:1D:1F:B7:F0:A8:33:8F:A8
Authority key identifier: 21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E
Certificate issuer: /CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
Certificate serial: 506D01A0E70EFE589FD0C510C12865E177C835DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
Manifest number: 0258
Signing time: Sun 24 May 2026 01:51:13 +0000
Manifest this update: Sun 24 May 2026 01:46:13 +0000
Manifest next update: Mon 25 May 2026 02:15:13 +0000
Files and hashes: 1: 34352e3136392e382e302f32322d3332203d3e20323638303736.roa (hash: 3LE1zh7FrUw4Au7uc6pH9VJWyxa3s6T7x6cjtB15W1A=)
2: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl (hash: KZVAVOyFnvpug9XhUym52xo1U8sfnP9OgbXroEhB+LA=)
3: 323830343a353761303a3a2f33322d313238203d3e20323638303736.roa (hash: 6YYhEtmclqmoqkx8M/XurXA1g8tSWug7qPa0YtKN5tI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl
rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 25 May 2026 02:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:6d:01:a0:e7:0e:fe:58:9f:d0:c5:10:c1:28:65:e1:77:c8:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
Validity
Not Before: May 24 01:46:13 2026 GMT
Not After : May 25 02:15:13 2026 GMT
Subject: CN=8E53504B2E977AE6A1AEAB181D1FB7F0A8338FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:df:1c:7f:01:7e:fd:73:70:fd:61:f5:0c:
a1:2d:83:5c:30:82:8e:00:83:3f:56:20:70:bb:5a:
05:62:1d:72:00:4d:31:a9:48:5e:df:d4:31:93:ec:
92:69:54:67:5f:7b:e6:7e:03:c3:11:c5:76:68:04:
32:08:9d:cb:b0:f9:40:79:7b:72:43:c2:f5:c1:f4:
c5:bf:4f:b7:ce:c7:0a:c5:ab:20:8a:8e:4b:be:13:
f9:bb:a7:2d:01:08:5e:ba:7a:6c:e8:d7:c2:8d:d2:
3e:65:19:49:00:b9:99:08:1d:8f:39:c8:1f:60:3f:
f6:a7:e8:e5:99:5a:7e:a1:b2:cb:5d:4f:62:e7:25:
4e:2e:0e:12:69:00:ce:ed:ae:60:37:a6:c6:22:84:
ce:d9:54:b1:0e:18:78:f7:25:6d:69:18:a2:e9:4f:
6b:46:dd:c9:d6:25:d8:d8:ba:f9:ae:fc:02:8d:c9:
f0:f5:4c:5a:9b:97:89:0c:d3:f1:81:7b:e7:47:ab:
1b:13:1f:1c:a3:11:0b:27:77:86:e5:8c:89:b8:92:
0b:46:84:fe:92:80:ea:c7:2e:18:ed:0f:ad:2d:21:
b0:3d:7e:70:6f:98:0d:7b:bc:88:ed:ca:74:70:f6:
92:08:2b:f7:16:73:af:a6:a1:19:d4:27:7e:3f:a3:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:50:4B:2E:97:7A:E6:A1:AE:AB:18:1D:1F:B7:F0:A8:33:8F:A8
X509v3 Authority Key Identifier:
keyid:21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:f6:e4:d0:e8:c8:f3:c2:b0:89:8c:9a:9d:f0:b6:7f:d5:d6:
92:22:f1:b1:97:68:aa:e4:15:cd:eb:c9:21:32:f3:31:d5:18:
32:34:55:10:8f:e3:59:ac:30:c4:4f:36:66:b1:61:46:35:ad:
e9:68:ac:ed:48:d6:f2:b4:b5:7c:39:75:ad:70:2d:5b:5f:26:
ba:72:f6:05:07:6a:f6:2d:97:dc:33:3b:dd:d8:94:e6:aa:78:
96:46:23:9c:86:b2:e6:1b:ce:2f:57:9f:15:ed:d5:7c:17:ca:
68:23:fa:93:c3:73:32:11:2d:ab:54:f9:24:61:65:da:51:02:
34:8c:2f:4f:82:7a:86:99:46:5a:5c:db:c8:4c:81:2a:55:4a:
88:d3:84:3c:ab:3f:47:12:de:d7:b9:6c:c0:7b:ca:66:45:d4:
71:71:40:03:3e:a4:98:b3:a6:f1:07:43:8f:61:d9:c6:79:01:
ec:94:7d:0b:7b:84:d2:dc:ab:95:21:86:6c:de:2e:c0:63:c8:
2b:10:c4:c1:eb:23:27:0c:99:ab:42:1f:73:79:84:ca:b7:2e:
4a:79:b0:f9:88:d6:86:14:e7:d6:95:d2:f1:80:7c:52:65:f7:
78:62:06:4f:47:c4:87:73:a6:f3:6b:09:13:e2:17:27:f0:39:
c6:0c:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:52:28 2026 by rpki-client