$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft File: 21CD91C985E580029306365FB6A119DAEFE368C7.mft (raw, json) Hash identifier: G8aDC7T/wnbtDPuR+GNRCtf+OHxsskaBUtv3foAucvs= Subject key identifier: C3:23:C5:56:B6:80:DD:76:47:03:06:78:49:A6:A1:93:3D:91:0C:88 Authority key identifier: 21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 Certificate issuer: /CN=21CD91C985E580029306365FB6A119DAEFE368C7 Certificate serial: 10DD7392487B061E652E935470409B68DBE9FCBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft Manifest number: 27 Signing time: Fri 17 Apr 2026 09:51:08 +0000 Manifest this update: Fri 17 Apr 2026 09:46:07 +0000 Manifest next update: Sat 18 Apr 2026 11:59:07 +0000 Files and hashes: 1: 21CD91C985E580029306365FB6A119DAEFE368C7.crl (hash: JqpFaY+NWgcmrYWZZQ5FdMV2aA0juOAnkYeP5HdBlrU=) 2: 34352e3232392e36382e302f32322d3332203d3e20323637323232.roa (hash: hbS0E3e8ynpXViirF0Ii3G5reF4in6ivih/Hb39MZDA=) 3: 323830343a346132633a3a2f33322d313238203d3e20323637323232.roa (hash: G3RSI6sJ8IgfSRKsUOwAlIqaJR+HqhO6L0qVkB+VD9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 11:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:dd:73:92:48:7b:06:1e:65:2e:93:54:70:40:9b:68:db:e9:fc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CD91C985E580029306365FB6A119DAEFE368C7 Validity Not Before: Apr 17 09:46:07 2026 GMT Not After : Apr 18 11:59:07 2026 GMT Subject: CN=C323C556B680DD764703067849A6A1933D910C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:b4:5c:d5:fd:10:f0:37:43:08:ff:27:df: a0:fb:48:ab:5b:4e:87:a4:35:af:8c:08:c0:81:5d: 73:c7:96:38:bd:8d:a3:b5:7c:29:1d:b2:4d:a0:e2: b3:e8:0e:80:0e:69:16:c9:c5:ca:3e:bc:ac:43:d0: 43:5a:1f:59:89:5b:91:66:0f:d6:97:fa:e6:1f:73: 42:4a:94:98:e1:5e:11:46:0c:35:38:ca:1e:17:d1: 40:e6:6c:dd:69:58:c6:83:f4:a2:2e:03:80:18:68: 49:83:ba:ed:df:42:86:6c:de:76:13:47:54:a3:89: 0b:11:87:09:27:d8:aa:31:b9:44:fe:e5:6f:8a:87: 08:b7:e5:30:cb:ce:ad:0a:60:28:56:57:67:3d:da: 62:02:92:52:5d:0d:b5:c7:2c:f7:62:92:d3:e0:7b: a9:a3:7e:35:d7:ab:83:36:cc:f4:61:8a:bb:11:36: 1d:db:45:16:5c:ed:5d:93:93:e9:4c:50:03:4e:26: 7a:87:16:4f:7c:2e:da:65:3a:16:b5:cc:d6:ea:3f: df:2e:c4:47:1c:63:cd:97:42:fc:36:a7:f9:6e:97: 0b:e2:a0:28:76:00:ec:44:b6:08:c3:1b:d8:d0:bb: 7a:db:5e:33:7d:5a:ef:0b:57:d0:07:53:3b:8b:91: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:C5:56:B6:80:DD:76:47:03:06:78:49:A6:A1:93:3D:91:0C:88 X509v3 Authority Key Identifier: keyid:21:CD:91:C9:85:E5:80:02:93:06:36:5F:B6:A1:19:DA:EF:E3:68:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CD91C985E580029306365FB6A119DAEFE368C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/3/21CD91C985E580029306365FB6A119DAEFE368C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:86:90:8e:bf:4d:f7:b5:84:1c:92:2f:c0:fa:97:04:88:4c: a3:6f:37:17:f9:81:fd:b8:ba:20:ad:f4:39:bf:e0:4d:90:7d: 01:98:5b:09:67:3f:fa:25:9f:df:85:46:4b:6c:e0:a8:1f:c6: f5:e8:35:7c:ff:85:81:89:f5:e6:83:3c:d6:a4:32:5e:12:08: 55:2e:e0:90:ff:05:0e:f7:8d:50:52:85:ee:5d:c5:1b:75:0d: be:4a:4a:a7:ec:ca:e7:b0:d8:c0:f0:9d:f9:b7:34:d8:64:a8: f7:c2:8b:03:00:05:03:ec:6d:c7:6e:28:ca:c2:b2:6d:5b:77: aa:9f:67:d0:e0:6a:0c:04:44:e7:09:c5:6c:95:c3:05:40:eb: 6d:03:b3:55:8d:04:81:75:46:fa:a3:6e:a7:ef:fc:6b:ca:27: 71:7e:b1:ac:3a:e2:dd:bf:41:2d:5f:26:0e:af:de:8d:d0:4d: af:90:12:71:b5:c4:bd:5d:79:4f:60:16:0f:db:c9:c2:a0:e5: ff:13:0c:f8:d0:5d:31:f6:c6:2b:f6:d2:27:d7:96:94:2c:fb: 90:8e:cc:af:47:94:85:4c:96:92:e5:93:91:ba:58:e1:ba:4e: 89:b7:1c:9d:1f:4a:2c:d0:0e:2d:b9:8f:9f:60:d4:da:0d:d9: e1:d7:8b:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEN1zkkh7Bh5lLpNUcECbaNvp/L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDRDkxQzk4NUU1ODAwMjkzMDYzNjVGQjZBMTE5REFF RkUzNjhDNzAeFw0yNjA0MTcwOTQ2MDdaFw0yNjA0MTgxMTU5MDdaMDMxMTAvBgNV BAMTKEMzMjNDNTU2QjY4MERENzY0NzAzMDY3ODQ5QTZBMTkzM0Q5MTBDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzrRc1f0Q8DdDCP8n36D7SKtb ToekNa+MCMCBXXPHlji9jaO1fCkdsk2g4rPoDoAOaRbJxco+vKxD0ENaH1mJW5Fm D9aX+uYfc0JKlJjhXhFGDDU4yh4X0UDmbN1pWMaD9KIuA4AYaEmDuu3fQoZs3nYT R1SjiQsRhwkn2KoxuUT+5W+Khwi35TDLzq0KYChWV2c92mICklJdDbXHLPdiktPg e6mjfjXXq4M2zPRhirsRNh3bRRZc7V2Tk+lMUANOJnqHFk98LtplOha1zNbqP98u xEccY82XQvw2p/lulwvioCh2AOxEtgjDG9jQu3rbXjN9Wu8LV9AHUzuLkcR3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwyPFVraA3XZHAwZ4Saahkz2RDIgwHwYDVR0j BBgwFoAUIc2RyYXlgAKTBjZftqEZ2u/jaMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMy8yMUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQ0Q5MUM5ODVFNTgwMDI5 MzA2MzY1RkI2QTExOURBRUZFMzY4QzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMy8y MUNEOTFDOTg1RTU4MDAyOTMwNjM2NUZCNkExMTlEQUVGRTM2OEM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAioaQjr9N97WEHJIvwPqXBIhMo283F/mB/bi6IK30Ob/gTZB9AZhbCWc/+iWf 34VGS2zgqB/G9eg1fP+FgYn15oM81qQyXhIIVS7gkP8FDveNUFKF7l3FG3UNvkpK p+zK57DYwPCd+bc02GSo98KLAwAFA+xtx24oysKybVt3qp9n0OBqDARE5wnFbJXD BUDrbQOzVY0EgXVG+qNup+/8a8oncX6xrDri3b9BLV8mDq/ejdBNr5AScbXEvV15 T2AWD9vJwqDl/xMM+NBdMfbGK/bSJ9eWlCz7kI7Mr0eUhUyWkuWTkbpY4bpOibcc nR9KLNAOLbmPn2DU2g3Z4deLiw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:28:43 2026 by rpki-client