
$ rpki-client -vvvf rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
File: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft (raw, json)
Hash identifier: Y6KAfDxfF0h4VsQqyUL8K6kJDYKqmjjg1r3W6NfUtlc=
Subject key identifier: C4:E8:8C:22:9D:B9:BF:8B:FE:E7:4B:6B:52:C4:88:0B:66:F0:35:CE
Authority key identifier: 21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E
Certificate issuer: /CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
Certificate serial: 0B7FB041E622FB1D3FA529FB84DEAC83240145EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
Manifest number: 02D3
Signing time: Mon 24 Aug 2026 05:57:44 +0000
Manifest this update: Mon 24 Aug 2026 05:52:44 +0000
Manifest next update: Tue 25 Aug 2026 07:24:44 +0000
Files and hashes: 1: 21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl (hash: cfLhkjiEz5i+Lwxk1U08zJvHowo/1CazI3weOGBuZXo=)
2: 323830343a353761303a3a2f33322d313238203d3e20323638303736.roa (hash: 6YYhEtmclqmoqkx8M/XurXA1g8tSWug7qPa0YtKN5tI=)
3: 34352e3136392e382e302f32322d3332203d3e20323638303736.roa (hash: 3LE1zh7FrUw4Au7uc6pH9VJWyxa3s6T7x6cjtB15W1A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl
rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 25 Aug 2026 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:7f:b0:41:e6:22:fb:1d:3f:a5:29:fb:84:de:ac:83:24:01:45:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DA9A8658D9028E72BA32DC1BE47519EF271F9E
Validity
Not Before: Aug 24 05:52:44 2026 GMT
Not After : Aug 25 07:24:44 2026 GMT
Subject: CN=C4E88C229DB9BF8BFEE74B6B52C4880B66F035CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:8c:99:27:f6:4e:c7:80:ff:bc:86:34:99:
0f:f0:9e:37:4b:21:74:51:3b:6a:1d:61:c7:bf:26:
e5:76:b4:05:68:36:64:42:a7:5d:04:9d:8b:f7:3c:
81:57:31:bc:5c:93:39:12:ff:b6:c9:4b:05:ba:08:
3f:0a:0b:ca:40:c6:f9:e3:62:83:09:02:04:84:eb:
ae:2f:f5:43:ed:6a:62:52:fa:33:51:36:0a:f6:9a:
3e:0d:a0:7b:09:dd:b6:9a:b6:68:d9:fd:29:d6:e3:
09:48:e0:89:83:d9:a7:34:84:5d:1d:ff:a5:b6:06:
93:bb:87:00:fd:09:53:38:8c:64:57:dc:ab:83:19:
1c:f3:de:dd:6e:21:ab:ce:ec:5a:cc:c1:4b:82:89:
f7:35:ec:ed:59:fd:bd:05:b3:92:a9:60:73:08:aa:
76:fa:38:7f:3c:b5:b9:1c:6a:7a:f2:ea:fe:54:03:
4f:b3:84:3d:79:25:16:fd:d1:16:33:37:1d:73:3a:
fd:9c:0b:35:6c:9b:eb:b7:d0:fd:32:1f:a8:0f:93:
78:b1:a5:5c:e6:ca:99:1e:3d:03:4a:1c:b0:2f:c4:
a7:73:05:38:b1:9d:40:a1:ec:6e:e2:b9:ca:c9:e8:
f7:88:38:6c:ad:0f:fb:f9:63:7b:70:52:8d:22:5f:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:8C:22:9D:B9:BF:8B:FE:E7:4B:6B:52:C4:88:0B:66:F0:35:CE
X509v3 Authority Key Identifier:
keyid:21:DA:9A:86:58:D9:02:8E:72:BA:32:DC:1B:E4:75:19:EF:27:1F:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1pXojKYVVzbYpygbLZ4YAnHf2gUc76wwY7RAZpatRtK/0/21DA9A8658D9028E72BA32DC1BE47519EF271F9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:ab:4a:79:ab:7c:df:80:93:e9:33:b2:1d:40:14:bb:3f:
52:00:89:3c:40:f9:d7:a5:5b:dc:66:35:f0:c9:de:87:c6:d7:
f0:06:e2:42:14:6c:c6:01:86:cd:73:83:4c:49:67:66:b6:f4:
36:0b:a4:12:0b:d7:80:21:67:62:17:9d:68:c7:b9:09:2b:a2:
68:b0:ac:93:4e:f2:29:be:3c:f6:a1:ef:78:77:b4:4c:20:2a:
02:04:b6:c6:c7:f6:cf:36:2e:f9:ad:d3:bd:50:b6:46:bb:f3:
9f:60:44:42:87:0f:c8:58:de:db:69:fe:b3:27:77:9e:18:7f:
bd:f0:53:df:8b:68:1a:0a:dc:3f:2b:5a:d7:9b:cd:06:40:5b:
f9:b0:b5:ef:70:26:df:31:d0:88:64:b3:1b:ed:88:96:92:25:
3d:ae:28:0d:2c:a4:8c:c1:c2:52:9c:cf:75:40:e6:8f:d6:fa:
a4:db:70:00:4e:78:c7:48:bd:9e:44:01:8a:09:9e:8c:cc:aa:
a7:2a:ff:a4:43:dd:56:fa:c0:5a:9b:88:a7:28:26:29:ff:8c:
8f:c4:5b:b9:a2:24:92:b5:61:98:3a:d6:89:ec:72:c1:c5:53:
f8:88:b6:8a:35:2f:17:f5:6c:73:0d:85:79:04:c5:1b:79:bb:
4f:e4:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:24:13 2026 by rpki-client