
$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json)
Hash identifier: 00QPiV2MhtTnCxPytaMQbXoa8EIGPgFz9ZsSaKyN3MU=
Subject key identifier: 9E:51:35:2B:29:6E:29:9F:86:49:7E:8C:42:66:CF:25:DF:9E:89:48
Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78
Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
Certificate serial: 750152A3D32F06567E132ACF1178E484EF01DC6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
Manifest number: 02DE
Signing time: Mon 02 Mar 2026 15:03:46 +0000
Manifest this update: Mon 02 Mar 2026 14:58:46 +0000
Manifest next update: Tue 03 Mar 2026 15:44:46 +0000
Files and hashes: 1: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: Qm7ic9QbJbc/cY0emIrd6a/+a6SuLFQyAlceLdqHkM4=)
2: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: 1QMSTpI89ZBYu3q3TVVzpeuLnkM4qPWNDuq+1kdrtzU=)
3: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl
rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Mar 2026 15:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:01:52:a3:d3:2f:06:56:7e:13:2a:cf:11:78:e4:84:ef:01:dc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
Validity
Not Before: Mar 2 14:58:46 2026 GMT
Not After : Mar 3 15:44:46 2026 GMT
Subject: CN=9E51352B296E299F86497E8C4266CF25DF9E8948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:a0:cf:df:a6:56:6b:f8:03:ce:09:41:67:
92:23:dd:94:13:9e:a4:3e:c6:48:70:ce:dc:f8:c3:
63:38:a4:64:6c:47:2b:11:a3:dd:95:29:37:b3:38:
b2:4c:5c:48:38:08:44:9b:95:45:1c:56:a6:76:bc:
14:c8:ca:e2:d6:42:d3:12:2c:0b:25:9e:e5:19:3a:
ad:71:e3:ea:b5:7f:d6:86:e8:92:63:85:4e:c2:1a:
fe:ab:88:bd:1d:67:af:a8:b0:35:6e:94:50:01:0f:
16:92:21:23:35:7d:55:3c:c2:ae:c2:c8:82:7a:47:
c4:0c:7f:0e:f8:3b:2b:38:d4:55:49:06:4f:52:1b:
fd:25:fc:8b:80:c1:24:15:ab:8f:07:79:69:90:97:
e3:72:6d:1e:d2:db:ec:83:6b:04:19:2f:da:e2:da:
2c:18:4f:29:e9:26:df:44:13:cc:2e:bb:b7:e7:55:
1b:e4:bc:99:2b:12:38:81:53:0a:2e:e2:e8:d7:9e:
b4:1d:fd:e3:a1:62:8d:be:23:d0:37:f5:af:03:56:
54:af:c2:5d:1c:63:b5:67:1c:70:1e:7a:27:fd:b8:
48:70:2d:98:4d:36:ba:4e:c4:8e:a6:cd:6d:0a:f1:
e8:3a:79:a4:a6:8f:8a:fc:a4:d7:15:10:9a:7e:6e:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:51:35:2B:29:6E:29:9F:86:49:7E:8C:42:66:CF:25:DF:9E:89:48
X509v3 Authority Key Identifier:
keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:df:d0:a5:50:4c:f7:8b:76:fe:15:bc:1e:61:8c:cf:36:
77:aa:0a:89:70:59:74:1f:da:a7:78:a7:0a:15:72:9a:49:16:
45:b0:20:77:bb:71:3c:56:65:c6:1c:90:2a:ae:e1:3d:69:c3:
c8:d0:71:8a:1d:a8:8c:4a:9e:35:8d:2a:24:29:9d:91:b6:0d:
e1:be:54:6e:00:fc:c9:72:e9:32:3d:ef:ce:c2:64:53:2e:3c:
db:36:47:36:14:47:e5:04:a4:da:c6:d4:96:36:84:d3:db:cf:
6e:21:e9:99:6b:85:16:0d:6b:5b:87:78:a9:36:2a:11:ef:91:
16:71:ee:69:a7:e2:e7:7e:25:b8:89:db:77:71:63:ea:5b:57:
ee:c4:3c:3c:7c:a6:e9:79:d0:2f:7c:03:6d:bb:fa:32:e9:98:
01:68:fa:d6:31:23:c2:8d:37:b8:9a:38:bb:a6:ec:48:e8:ef:
ca:a1:d2:0e:52:26:4f:3c:11:de:3c:9d:a7:7e:55:16:9d:c4:
f6:91:f7:44:1d:b0:92:e4:23:3d:c0:24:4a:1b:ad:b7:17:da:
4c:11:ab:a2:5a:00:be:1c:fc:1c:1d:80:81:84:90:3c:00:56:
46:1f:d1:ef:5c:5c:02:5f:5f:b5:51:31:e2:6a:cc:3e:ed:df:
f1:92:2a:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdQFSo9MvBlZ+EyrPEXjkhO8B3GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5
RjlBMUQ3ODAeFw0yNjAzMDIxNDU4NDZaFw0yNjAzMDMxNTQ0NDZaMDMxMTAvBgNV
BAMTKDlFNTEzNTJCMjk2RTI5OUY4NjQ5N0U4QzQyNjZDRjI1REY5RTg5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKD6DP36ZWa/gDzglBZ5Ij3ZQT
nqQ+xkhwztz4w2M4pGRsRysRo92VKTezOLJMXEg4CESblUUcVqZ2vBTIyuLWQtMS
LAslnuUZOq1x4+q1f9aG6JJjhU7CGv6riL0dZ6+osDVulFABDxaSISM1fVU8wq7C
yIJ6R8QMfw74Oys41FVJBk9SG/0l/IuAwSQVq48HeWmQl+NybR7S2+yDawQZL9ri
2iwYTynpJt9EE8wuu7fnVRvkvJkrEjiBUwou4ujXnrQd/eOhYo2+I9A39a8DVlSv
wl0cY7VnHHAeeif9uEhwLZhNNrpOxI6mzW0K8eg6eaSmj4r8pNcVEJp+bmVZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnlE1KyluKZ+GSX6MQmbPJd+eiUgwHwYDVR0j
BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw
WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1
M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y
MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYNff0KVQTPeLdv4VvB5hjM82d6oKiXBZdB/ap3inChVymkkWRbAgd7txPFZl
xhyQKq7hPWnDyNBxih2ojEqeNY0qJCmdkbYN4b5UbgD8yXLpMj3vzsJkUy482zZH
NhRH5QSk2sbUljaE09vPbiHpmWuFFg1rW4d4qTYqEe+RFnHuaafi534luInbd3Fj
6ltX7sQ8PHym6XnQL3wDbbv6MumYAWj61jEjwo03uJo4u6bsSOjvyqHSDlImTzwR
3jydp35VFp3E9pH3RB2wkuQjPcAkShuttxfaTBGroloAvhz8HB2AgYSQPABWRh/R
71xcAl9ftVEx4mrMPu3f8ZIqqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:27:14 2026 by rpki-client