
$ rpki-client -vvf rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
File: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft (raw, json)
Hash identifier: CwMb02d+c7NPCaL17otwiKw6Qz+Bt7dUdfZTnWZpIFA=
Subject key identifier: 9B:C2:17:6A:D8:EC:FA:25:66:8E:E3:8C:8B:FC:11:B0:6E:00:03:90
Authority key identifier: 21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62
Certificate issuer: /CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62
Certificate serial: 6639F2188E78E19CEF11B2BA5F8B636186F0038D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
Manifest number: 8D
Signing time: Mon 02 Mar 2026 02:19:23 +0000
Manifest this update: Mon 02 Mar 2026 02:14:23 +0000
Manifest next update: Tue 03 Mar 2026 04:43:23 +0000
Files and hashes: 1: 323830343a353163383a3a2f33322d3336203d3e20323638343737.roa (hash: ZeYF/IADxUCs97amTb0H/O7aiJsJoEpO8oClUzCl2Rs=)
2: 34352e3136312e3232342e302f32322d3234203d3e20323638343737.roa (hash: VQI4ymWbBnU+UgVt+pYFL4UDEQuVU0M1Kf8Kqq/NFjI=)
3: 21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl (hash: JPEfJdx4KMMbKJCP4HTSOXZwEQ6McrximvApqLMZ4/E=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl
rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 04:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:39:f2:18:8e:78:e1:9c:ef:11:b2:ba:5f:8b:63:61:86:f0:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21BA6924CF5CBE3F970DD382E5E4860AD67CAB62
Validity
Not Before: Mar 2 02:14:23 2026 GMT
Not After : Mar 3 04:43:23 2026 GMT
Subject: CN=9BC2176AD8ECFA25668EE38C8BFC11B06E000390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:be:c9:bb:0d:01:6e:62:bb:93:d1:38:cd:
73:5b:97:3b:e9:29:12:f2:ce:4d:89:1e:b6:52:b1:
c7:6a:cf:51:19:1d:ac:39:2b:34:b1:85:99:7d:54:
c3:ef:b3:93:24:03:03:e0:b7:50:9a:df:dd:3d:80:
a7:ae:1a:20:c8:48:cb:13:12:44:da:fc:2e:00:39:
58:01:77:7f:4b:46:b6:ba:20:33:d5:e2:dd:22:12:
88:37:09:83:2a:35:67:5f:3d:bd:4a:63:65:4f:3b:
a9:a2:75:74:4d:02:86:2f:a9:ba:af:f7:cf:e3:9c:
71:30:fe:7c:28:cd:6b:de:8c:4e:42:35:fb:84:0f:
69:2a:b7:a3:17:31:a8:7c:f0:18:bf:fc:e1:e5:b2:
4e:32:cf:4a:70:0f:04:6f:c5:d1:66:4f:9f:2f:fc:
e5:08:26:f4:b8:40:6d:27:09:05:70:26:78:48:56:
fd:70:e1:6d:b5:a8:2e:56:52:9f:42:16:de:27:a6:
de:3f:a9:11:80:c7:e2:1c:03:90:f8:f6:a5:5a:43:
20:ad:7d:71:97:66:90:8a:4b:c1:4a:92:3d:f2:ce:
e2:c1:9e:40:e9:f7:d3:a0:6b:eb:d4:40:68:3c:d3:
c9:c2:66:89:72:a4:e4:6d:52:87:3b:53:c6:4e:e2:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C2:17:6A:D8:EC:FA:25:66:8E:E3:8C:8B:FC:11:B0:6E:00:03:90
X509v3 Authority Key Identifier:
keyid:21:BA:69:24:CF:5C:BE:3F:97:0D:D3:82:E5:E4:86:0A:D6:7C:AB:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8zVCyPKJbNg84zdbTo1FKSa9fUF49i6EcRQXCb4tFhhZ/0/21BA6924CF5CBE3F970DD382E5E4860AD67CAB62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:35:35:c0:3d:24:b9:8e:af:f8:a9:7b:e6:b1:4a:6a:a0:
7f:a0:34:3b:b1:77:1a:66:ad:97:c9:3e:e6:45:ff:c4:ce:ea:
58:c1:03:48:ec:e2:9a:04:93:1b:09:9a:22:4a:ed:2b:11:e2:
86:d5:da:85:f6:07:dd:34:16:56:f9:8e:ea:5a:ed:76:b0:33:
a5:7b:0b:7c:12:90:fb:f5:0b:b4:ba:5a:ef:7b:19:e2:75:6a:
36:5f:71:43:b8:ed:b7:35:f2:df:3b:6c:3f:e6:8c:c6:ef:f5:
ed:35:5d:ef:3a:f1:28:b7:31:ad:a6:16:3f:e5:5b:4f:06:4e:
f8:6c:5d:44:47:ad:85:66:b7:c3:e2:9e:db:ba:c9:fe:e7:b1:
da:05:33:ad:a3:c9:da:be:bc:31:42:82:c0:88:df:b1:c7:38:
1d:8a:e4:70:e0:b0:f9:b6:9e:3f:e5:8e:4f:60:7e:8f:4e:b2:
09:2c:03:8a:0a:8e:69:b8:82:65:da:30:5a:86:84:7a:84:df:
26:12:bd:f1:b6:02:52:12:ab:ae:ac:26:18:12:55:a6:3a:50:
01:f7:67:8d:3e:14:53:fa:6e:d4:de:09:d8:3c:80:54:c3:2b:
7c:1a:17:c3:8c:85:7f:76:10:51:47:d7:85:cc:42:9e:51:10:
25:83:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:43 2026 by rpki-client