
$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.mft
File: 21816AEF53DA4A1266254E59D156C2DF097928E3.mft (raw, json)
Hash identifier: JhAUcM/edbV7sF76PukoMqlOfalEtpjlUJE1YDgQRG8=
Subject key identifier: BE:FD:2D:A5:DC:20:71:E6:7E:42:95:0F:9C:BF:A1:6E:B0:29:F7:A3
Authority key identifier: 21:81:6A:EF:53:DA:4A:12:66:25:4E:59:D1:56:C2:DF:09:79:28:E3
Certificate issuer: /CN=21816AEF53DA4A1266254E59D156C2DF097928E3
Certificate serial: 21451C728E6CFAAFF1A08F9E110105FFC6EA17AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21816AEF53DA4A1266254E59D156C2DF097928E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.mft
Manifest number: 1C
Signing time: Sun 12 Apr 2026 11:14:27 +0000
Manifest this update: Sun 12 Apr 2026 11:09:27 +0000
Manifest next update: Mon 13 Apr 2026 12:40:27 +0000
Files and hashes: 1: 323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (hash: 2WLR0nfdvvGqKW4R7iVQ+bDDcTQXrRNGOR6tpbld4RQ=)
2: 34352e3233372e3135362e302f32322d3234203d3e20323638323836.roa (hash: MECqdCiTIcKTlMUaQtxB0CUoyF0u+2Sgccq7bc7/N4Y=)
3: 21816AEF53DA4A1266254E59D156C2DF097928E3.crl (hash: PBGhJVInMUaraJLFL/8IT/e9tmeWMZRiU1JdZ9SfzFM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.crl
rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21816AEF53DA4A1266254E59D156C2DF097928E3.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 13 Apr 2026 12:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:45:1c:72:8e:6c:fa:af:f1:a0:8f:9e:11:01:05:ff:c6:ea:17:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21816AEF53DA4A1266254E59D156C2DF097928E3
Validity
Not Before: Apr 12 11:09:27 2026 GMT
Not After : Apr 13 12:40:27 2026 GMT
Subject: CN=BEFD2DA5DC2071E67E42950F9CBFA16EB029F7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:6c:49:95:27:57:a8:b8:48:3e:fc:5f:4f:
fd:c8:c3:f8:04:11:1f:f8:1d:c5:64:df:52:12:8b:
25:4d:53:c5:79:7a:38:3c:e4:ee:ff:65:52:3f:6a:
6e:9b:ad:e2:f3:60:48:bd:97:d3:7b:23:6d:dc:37:
af:96:48:c5:3a:3c:fb:7b:98:de:47:d8:3d:22:5b:
5a:93:59:d5:d4:37:6d:6d:dc:8a:cb:14:fb:28:95:
42:f0:c7:21:61:59:4e:d3:a2:b1:b4:d8:60:af:69:
84:c6:4b:f8:45:d1:be:41:73:a8:dd:5e:81:c3:e1:
63:1b:fc:b3:4e:82:58:3a:20:6f:9d:ef:c8:d2:6d:
16:1b:31:1a:67:6f:c3:d2:73:10:ed:aa:5a:ef:74:
4d:f3:37:74:05:9e:c0:9c:15:ec:57:34:a7:4b:fb:
4b:38:9c:28:fb:43:9d:01:f9:53:4c:61:33:67:6d:
ce:31:5a:7d:88:8d:09:be:fb:ce:97:38:ac:bc:e7:
1f:a2:3d:19:50:10:cc:04:93:df:72:16:d4:dc:9b:
16:74:25:49:2e:35:73:0c:19:7d:3b:f6:f1:c2:a0:
28:db:8e:5d:a1:8f:cd:a1:f2:ab:51:33:a3:01:77:
26:80:c8:9d:ca:d6:ea:46:00:9a:b9:b0:22:fe:8e:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:2D:A5:DC:20:71:E6:7E:42:95:0F:9C:BF:A1:6E:B0:29:F7:A3
X509v3 Authority Key Identifier:
keyid:21:81:6A:EF:53:DA:4A:12:66:25:4E:59:D1:56:C2:DF:09:79:28:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21816AEF53DA4A1266254E59D156C2DF097928E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/0/21816AEF53DA4A1266254E59D156C2DF097928E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:3a:4a:e6:fc:21:a4:0c:8d:8d:ce:19:d9:9a:31:97:0b:
df:4d:e1:af:f3:8a:0b:b8:2e:d4:2f:0e:ea:ff:4b:05:b8:1d:
d1:1f:75:16:86:45:5e:ca:b5:f5:fe:54:01:ce:39:50:26:b6:
b2:61:9b:2a:7e:a9:c1:33:a1:4d:f2:eb:73:c1:cd:4f:ef:05:
82:24:39:f8:0e:62:00:7d:55:be:3c:0a:f7:ec:da:99:e4:01:
83:1c:f6:26:67:ea:9c:c6:c4:6c:66:70:71:e4:0e:b2:2b:36:
58:f8:09:24:f5:88:b1:e1:70:ca:9d:6d:9e:67:3f:b1:83:03:
22:54:bd:e1:c6:ae:92:81:a3:4e:5e:c1:61:3d:6c:e0:36:fb:
3e:0c:0f:41:aa:0d:af:7f:03:6b:0c:6b:6b:15:0f:d4:41:f1:
b4:7a:14:76:8e:43:81:0a:68:90:20:a9:9b:83:25:ac:a2:18:
7f:24:86:82:84:af:b6:b0:af:a7:5c:ab:32:43:ac:4f:e1:9e:
02:9f:57:80:0e:e7:cd:2b:5b:ff:23:e8:81:97:a3:c1:c0:51:
2d:b4:9a:bc:b2:58:8b:40:e1:b6:03:df:8a:87:5b:ef:9f:7d:
28:22:f5:b3:44:7e:1e:fa:cd:e7:b0:6c:34:7c:d4:01:af:bf:
c5:e2:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 00:34:51 2026 by rpki-client