
$ rpki-client -vvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
File: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft (raw, json)
Hash identifier: 1uciXhRGhsLoWkntEYOg0Ez2F9ygXzctZTCas4gnLSs=
Subject key identifier: 90:5D:71:E9:D2:CF:21:86:E7:3A:71:AA:6F:46:AB:F2:7A:12:40:B7
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial: 27AE0556E7D81D20950A96B852C1681A3F0D018D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
Manifest number: 2B
Signing time: Mon 02 Mar 2026 04:46:36 +0000
Manifest this update: Mon 02 Mar 2026 04:41:36 +0000
Manifest next update: Tue 03 Mar 2026 07:01:36 +0000
Files and hashes: 1: 21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl (hash: ioXuFQwtiesPrBeK5o2zISUAMuJMbmcWXaCZeU9pu3s=)
2: 3137302e37392e3137322e302f32322d3332203d3e20323636333033.roa (hash: MnJfs6TsiBi/pECmgTEXyD1yXOKpONV3xPLrn0GkifY=)
3: 323830343a333562633a3a2f33322d313238203d3e20323636333033.roa (hash: 95H0+MJ3bRg/tMB7uggONWwtz7iHZ69hxReH2hDfwGI=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ae:05:56:e7:d8:1d:20:95:0a:96:b8:52:c1:68:1a:3f:0d:01:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Validity
Not Before: Mar 2 04:41:36 2026 GMT
Not After : Mar 3 07:01:36 2026 GMT
Subject: CN=905D71E9D2CF2186E73A71AA6F46ABF27A1240B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:08:02:26:62:d1:18:ad:ed:68:52:42:a5:
a3:3b:eb:e8:10:c3:44:55:96:25:9e:5b:b8:be:ba:
90:08:17:71:78:92:d8:ce:db:0c:f9:e0:c4:4b:1b:
14:21:4e:76:3d:5a:aa:65:50:d7:9b:39:52:25:97:
c6:c7:14:8f:20:1c:16:52:0c:67:44:ff:7c:96:65:
30:f8:7e:6a:09:b6:28:1b:a1:d1:2e:60:4c:4a:a1:
2f:d6:cf:bb:70:0c:33:4a:f4:b2:ed:1f:09:da:19:
57:e5:34:09:1a:f7:2f:1c:e9:48:23:b6:5f:5d:8c:
7e:b4:69:16:02:4e:06:37:e8:1e:bb:20:bc:9c:c4:
7b:51:94:3f:dc:a9:67:ec:51:ce:86:41:0c:da:c3:
6e:8f:d4:c2:d9:38:80:78:0a:57:38:0d:06:6b:1d:
6c:a6:a5:6d:80:25:07:5e:ee:72:2d:68:42:06:ce:
50:85:57:3d:e7:d6:6f:be:b9:5b:2b:e2:bd:40:96:
3c:35:30:6d:dd:e3:51:a6:8f:fe:a2:0c:df:f0:8d:
4e:c1:86:94:16:80:06:f3:53:e6:20:33:de:b8:b2:
a6:73:ee:2f:43:06:7f:3a:d3:d4:ff:16:79:75:2d:
54:13:f1:b8:00:0d:30:d6:11:bc:b6:ad:39:ae:2f:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:71:E9:D2:CF:21:86:E7:3A:71:AA:6F:46:AB:F2:7A:12:40:B7
X509v3 Authority Key Identifier:
keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:98:e5:e8:72:db:b8:97:a8:09:6f:ba:f9:4b:8b:79:52:e9:
aa:a7:1e:c3:19:8f:da:4b:6d:a8:b7:c6:86:2f:43:2e:03:ee:
fa:a6:12:d1:b8:a8:36:d7:4b:f9:06:57:75:23:43:cc:5f:f1:
f1:96:37:f5:70:d8:27:34:e5:8a:90:57:2b:3a:d6:e5:6c:8a:
b0:4f:aa:2e:f8:9c:08:2c:aa:aa:7e:3c:2b:52:29:94:60:cf:
05:d2:c8:a3:70:9f:95:c1:64:86:85:cd:b4:49:35:95:22:8e:
41:73:53:e7:04:c3:5b:91:fb:db:21:f7:7b:cf:97:ee:db:ce:
6b:75:ef:cd:5d:b2:68:fa:36:0a:b6:2d:5b:88:d1:0e:c8:b6:
13:c2:78:bc:cf:57:d9:f9:dc:cc:b1:16:bf:61:b7:5d:87:bc:
2f:55:97:92:a1:d5:6a:a7:51:1c:8d:b9:bc:e9:5d:a3:09:a5:
f6:bf:c6:95:de:13:2f:4f:9a:71:ff:60:41:80:e2:bc:4d:42:
06:86:db:89:b0:a0:f3:64:1f:0a:ed:4d:fe:d5:09:89:e7:7d:
48:5e:1d:05:d5:7d:10:61:7c:b7:73:7c:f8:28:d1:a5:44:4f:
38:a8:1e:a8:d6:24:2f:c6:5b:e5:30:3f:aa:26:75:35:0e:cd:
40:19:1d:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJ64FVufYHSCVCpa4UsFoGj8NAY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDRUU5QjRBRTcxNjY3MUJFQkQzMjYwM0RDNUE2MUJD
QUQzNTg5ODAeFw0yNjAzMDIwNDQxMzZaFw0yNjAzMDMwNzAxMzZaMDMxMTAvBgNV
BAMTKDkwNUQ3MUU5RDJDRjIxODZFNzNBNzFBQTZGNDZBQkYyN0ExMjQwQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtwgCJmLRGK3taFJCpaM76+gQ
w0RVliWeW7i+upAIF3F4ktjO2wz54MRLGxQhTnY9WqplUNebOVIll8bHFI8gHBZS
DGdE/3yWZTD4fmoJtigbodEuYExKoS/Wz7twDDNK9LLtHwnaGVflNAka9y8c6Ugj
tl9djH60aRYCTgY36B67ILycxHtRlD/cqWfsUc6GQQzaw26P1MLZOIB4Clc4DQZr
HWympW2AJQde7nItaEIGzlCFVz3n1m++uVsr4r1Aljw1MG3d41Gmj/6iDN/wjU7B
hpQWgAbzU+YgM964sqZz7i9DBn8609T/Fnl1LVQT8bgADTDWEby2rTmuLyvBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUkF1x6dLPIYbnOnGqb0ar8noSQLcwHwYDVR0j
BBgwFoAUIc7ptK5xZnG+vTJgPcWmG8rTWJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFF
NFQvMC8yMUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0VFOUI0QUU3MTY2NzFC
RUJEMzI2MDNEQzVBNjFCQ0FEMzU4OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JCMWJSWDRKVnFFNFQvMC8y
MUNFRTlCNEFFNzE2NjcxQkVCRDMyNjAzREM1QTYxQkNBRDM1ODk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcpjl6HLbuJeoCW+6+UuLeVLpqqcewxmP2kttqLfGhi9DLgPu+qYS0bioNtdL
+QZXdSNDzF/x8ZY39XDYJzTlipBXKzrW5WyKsE+qLvicCCyqqn48K1IplGDPBdLI
o3CflcFkhoXNtEk1lSKOQXNT5wTDW5H72yH3e8+X7tvOa3XvzV2yaPo2CrYtW4jR
Dsi2E8J4vM9X2fnczLEWv2G3XYe8L1WXkqHVaqdRHI25vOldowml9r/Gld4TL0+a
cf9gQYDivE1CBobbibCg82QfCu1N/tUJied9SF4dBdV9EGF8t3N8+CjRpURPOKge
qNYkL8Zb5TA/qiZ1NQ7NQBkdOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:16 2026 by rpki-client