
$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
File: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft (raw, json)
Hash identifier: NhAvLs2Je6nuFsuGyafGJghB2lSyuw6RidMoEKe3pg4=
Subject key identifier: CA:35:EC:4D:43:E6:73:85:EA:21:A4:C4:E9:70:C9:19:39:D9:07:64
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Certificate issuer: /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial: 5A1A71E128EBDA0376B738B58A716C1B27A5B593
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
Manifest number: 0243
Signing time: Sun 22 Feb 2026 15:33:58 +0000
Manifest this update: Sun 22 Feb 2026 15:28:58 +0000
Manifest next update: Tue 24 Feb 2026 17:58:58 +0000
Files and hashes: 1: 3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (hash: PsRtW7mHTyutO0DxQQGdWmoyYKa6pQXrN/ynckkhhkg=)
2: 3138362e3235312e37362e302f32322d3234203d3e20323632393933.roa (hash: dDZBFJTgy6uf7u/054EgmCGUT/tK/Ve2awhm8WyhgyI=)
3: 323830343a316238303a3266663a3a2f34382d3438203d3e20323632393933.roa (hash: 0STruXq+XIfTiYPW08Xb6Jj7cL9IQowr5jSbbyzxCMs=)
4: 323830343a386639303a3a2f33322d3332203d3e20323733343938.roa (hash: vyEuVko/frnMCelb6uKYiRTw431v8ZOguv+v05iqEi8=)
5: 3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (hash: B6OA/UtG4WpNu4nO8tjqIg/m7ZPmuNJg+/AraO2FdBw=)
6: 323830343a316238303a3a2f33322d3334203d3e20323632393933.roa (hash: 97Ca/q3JVe60Zw9Y/8oQJDrJblO8E1C0KYjkN87TcEQ=)
7: 3138362e3235312e37382e302f32342d3234203d3e203631393232.roa (hash: VQxRN4syAFNsgoSkUbyGLUgM0m2Nj3rU72rimBNN8sU=)
8: 323830343a316238303a3266653a3a2f34382d3438203d3e20323632393933.roa (hash: 3I72140Z3ulLl5k4dKLwv/elKHlGRjQ2O3o1AuO1vTs=)
9: 21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl (hash: vZ1JVAdDIz3VwlAbvouNZVnfKt+tRmoLr0vJsmjo78A=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 24 Feb 2026 01:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:1a:71:e1:28:eb:da:03:76:b7:38:b5:8a:71:6c:1b:27:a5:b5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Validity
Not Before: Feb 22 15:28:58 2026 GMT
Not After : Feb 24 17:58:58 2026 GMT
Subject: CN=CA35EC4D43E67385EA21A4C4E970C91939D90764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:6c:68:fb:ad:2b:5e:71:dc:5e:1f:88:55:
31:ef:ba:c0:59:fe:e3:41:4a:72:51:f9:d7:71:c4:
d1:c6:2c:9f:e2:af:ea:2a:d7:5b:a2:7f:3d:05:b6:
c8:40:28:c5:16:df:d9:9f:c1:e7:e8:01:0c:6a:85:
20:1e:fe:eb:b6:d0:63:20:93:7d:4a:55:d8:11:3b:
98:fc:80:95:5d:8f:b2:55:b2:45:fd:5d:19:c6:25:
69:48:b1:19:c9:4d:04:fd:12:b2:fa:65:a9:78:56:
55:b5:80:6c:62:b2:c4:2d:bd:6c:85:92:a7:54:58:
59:2e:8d:d6:d8:02:da:db:d5:8f:9d:bb:21:73:6d:
42:48:86:bd:5b:9f:81:f4:a5:7e:5e:1d:15:d3:cd:
73:7f:66:f7:a2:c0:d4:b7:df:e4:e4:e1:6c:17:c4:
22:c1:b1:b6:ad:e3:83:6c:45:2d:c5:96:bc:6f:19:
ba:87:3e:e4:1d:57:a3:0a:50:db:22:b7:c6:89:72:
6a:90:bf:a8:f8:85:75:cf:39:83:bd:ff:65:9f:99:
6b:81:16:55:41:c2:2f:2e:fb:bd:df:14:4a:21:3d:
de:f2:45:f3:ce:2b:fa:32:96:2d:76:c4:fe:97:cc:
3d:ef:04:c3:a4:2b:55:3b:e6:6a:8b:20:b9:85:50:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:35:EC:4D:43:E6:73:85:EA:21:A4:C4:E9:70:C9:19:39:D9:07:64
X509v3 Authority Key Identifier:
keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:52:67:ab:55:e4:86:39:91:ba:5d:7a:44:58:eb:28:04:a4:
f9:5d:a6:30:ef:eb:1f:25:43:93:4c:93:95:f0:b8:e5:d7:bc:
bb:e3:f7:74:c8:bf:34:57:94:fa:5e:c5:53:0c:36:98:b2:f8:
74:b5:9f:88:df:d1:fb:08:12:0b:49:ea:58:a6:93:1c:2c:8f:
bc:31:46:38:2a:cc:8d:18:4a:bf:43:f6:59:22:64:c7:6d:03:
f1:3a:60:46:0e:c3:5a:da:e4:b8:5a:0b:24:e6:11:89:65:71:
8c:99:b9:75:6a:54:e0:9d:b5:e1:6b:70:8c:d9:9d:6f:72:29:
81:01:0e:8c:37:f5:14:a3:07:bc:17:47:1b:bc:e6:d4:da:4f:
73:c6:3c:0b:b0:41:03:77:f8:97:79:29:2f:9d:6b:d3:2e:58:
74:d5:d7:af:9a:09:0a:43:d0:d8:56:5f:2c:92:6f:a3:72:59:
cc:6b:b1:b3:65:e1:e2:dd:c3:6c:8d:3f:c4:c5:bc:7c:9f:68:
e1:28:8b:82:f3:9e:b0:0c:23:bc:fc:c0:15:40:d0:27:af:13:
7a:82:7b:cd:9e:d5:e1:0d:eb:c9:c8:33:8e:da:0f:d0:95:d0:
f8:ce:82:22:d5:2c:bd:4b:83:9c:d4:42:c7:42:23:50:90:7b:
b5:1d:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:48:32 2026 by rpki-client