$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json) Hash identifier: AcfBDV3B232HcfpLWTQCxAeYrDK8/azYx4/lMT9kLi8= Subject key identifier: 6D:10:CA:A4:6C:AA:2A:3A:0C:F4:DA:92:F9:A9:35:98:FD:E8:75:27 Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Certificate serial: 7D1159B8E0C53A3F55F9C41B42D5F51E7B328A65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft Manifest number: 68 Signing time: Fri 17 Apr 2026 01:56:54 +0000 Manifest this update: Fri 17 Apr 2026 01:51:54 +0000 Manifest next update: Sat 18 Apr 2026 05:55:54 +0000 Files and hashes: 1: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=) 2: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=) 3: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: cuQephlPL/y3QFT2jcwi7nexgKCTtZUvSp+kL+zKc1c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 05:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:11:59:b8:e0:c5:3a:3f:55:f9:c4:1b:42:d5:f5:1e:7b:32:8a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898 Validity Not Before: Apr 17 01:51:54 2026 GMT Not After : Apr 18 05:55:54 2026 GMT Subject: CN=6D10CAA46CAA2A3A0CF4DA92F9A93598FDE87527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:26:1d:cc:d6:9c:53:75:44:1e:aa:26:62: 72:60:84:e3:8a:dc:99:2f:22:54:89:79:8a:16:0a: 6c:51:a6:ef:6b:5c:3a:78:b2:fc:e8:cb:2d:56:b2: f4:d3:1a:4c:ed:bb:55:71:3d:d1:e0:2f:cd:4c:50: 53:40:a1:7c:c9:53:af:cb:dc:5c:26:49:ab:58:61: 15:3a:8c:d5:d6:81:84:d6:fc:12:70:5e:92:1b:d0: b5:f7:07:92:08:5b:3b:93:7a:8a:f7:d4:fb:68:35: 0f:09:9e:99:04:74:2d:17:0f:be:2b:a9:c1:57:1c: c8:f7:a2:c2:8b:d1:25:15:49:46:08:64:d9:32:14: 03:2e:ad:a3:91:ff:48:13:8e:2c:89:f4:cf:fc:3c: 27:73:77:d3:26:c4:a9:02:09:8d:9d:7d:e8:3c:23: 12:2e:e2:fe:21:8e:20:2a:7e:d2:d3:b5:1b:20:19: 8b:a9:b2:85:aa:a4:55:50:54:35:39:77:5d:09:c8: 60:8e:1a:81:ad:eb:e8:15:b6:76:be:38:7f:06:0a: a2:13:2f:3b:93:9a:6c:37:19:93:48:29:2e:da:2c: be:f7:bf:a2:62:84:c3:94:f5:a3:ef:d8:74:b1:d1: dd:d8:c9:e5:46:cf:3f:f3:b8:59:ca:74:08:a4:5c: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:10:CA:A4:6C:AA:2A:3A:0C:F4:DA:92:F9:A9:35:98:FD:E8:75:27 X509v3 Authority Key Identifier: keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c3:7e:7d:23:22:f4:56:89:2a:0e:cc:07:b2:84:5f:b9:9f: 3d:67:27:35:9b:93:11:80:ca:d0:52:c1:9e:9e:11:14:2e:64: 58:b6:ed:2d:73:3a:ed:32:94:ae:4e:6f:97:23:68:b2:0a:b1: 02:6e:c3:0b:18:37:02:46:26:e3:0f:1d:d3:ee:c0:78:09:af: 65:54:2c:34:19:00:3d:5f:da:8d:2e:f2:e9:eb:74:d2:e4:e9: b5:11:b4:36:69:e6:af:e9:34:4d:3a:6e:65:3e:0c:da:b8:cd: 07:f1:6f:71:04:1f:9a:7b:58:6d:73:4d:50:36:18:a4:7e:43: 61:b0:c0:59:cd:28:79:d8:14:5c:fa:09:3a:43:b9:b9:38:30: 5f:f7:ec:e4:69:b8:06:32:27:dd:46:6d:39:64:f7:75:f2:8e: d7:6d:24:a5:f1:51:80:38:72:8b:0c:f7:f9:d6:46:6e:05:74: 02:ed:c5:99:11:3b:5f:63:60:db:b3:df:ed:a6:70:e4:a0:24: c4:25:e1:be:08:d7:dc:51:3c:4e:dc:fd:0c:cd:65:2d:52:fc: 3c:bd:8f:a5:e8:30:75:c7:a9:c2:aa:d3:63:db:d6:45:de:a2: 2e:81:a8:5d:f4:fa:32:9e:35:71:cb:d3:b1:c0:02:3f:be:89: 46:5d:c6:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfRFZuODFOj9V+cQbQtX1HnsyimUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD QUQzNTg5ODAeFw0yNjA0MTcwMTUxNTRaFw0yNjA0MTgwNTU1NTRaMDMxMTAvBgNV BAMTKDZEMTBDQUE0NkNBQTJBM0EwQ0Y0REE5MkY5QTkzNTk4RkRFODc1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CCYdzNacU3VEHqomYnJghOOK 3JkvIlSJeYoWCmxRpu9rXDp4svzoyy1WsvTTGkztu1VxPdHgL81MUFNAoXzJU6/L 3FwmSatYYRU6jNXWgYTW/BJwXpIb0LX3B5IIWzuTeor31PtoNQ8JnpkEdC0XD74r qcFXHMj3osKL0SUVSUYIZNkyFAMuraOR/0gTjiyJ9M/8PCdzd9MmxKkCCY2dfeg8 IxIu4v4hjiAqftLTtRsgGYupsoWqpFVQVDU5d10JyGCOGoGt6+gVtna+OH8GCqIT LzuTmmw3GZNIKS7aLL73v6JihMOU9aPv2HSx0d3YyeVGzz/zuFnKdAikXN1tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbRDKpGyqKjoM9NqS+ak1mP3odScwHwYDVR0j BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQcN+fSMi9FaJKg7MB7KEX7mfPWcnNZuTEYDK0FLBnp4RFC5kWLbtLXM67TKU rk5vlyNosgqxAm7DCxg3AkYm4w8d0+7AeAmvZVQsNBkAPV/ajS7y6et00uTptRG0 Nmnmr+k0TTpuZT4M2rjNB/FvcQQfmntYbXNNUDYYpH5DYbDAWc0oedgUXPoJOkO5 uTgwX/fs5Gm4BjIn3UZtOWT3dfKO120kpfFRgDhyiwz3+dZGbgV0Au3FmRE7X2Ng 27Pf7aZw5KAkxCXhvgjX3FE8Ttz9DM1lLVL8PL2PpegwdcepwqrTY9vWRd6iLoGo XfT6Mp41ccvTscACP76JRl3Gnw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:21:43 2026 by rpki-client