$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json) Hash identifier: hM2HWDNAZxGdGV2C8/ccBE/SMhzBvOBWIR3AQmHoGKw= Subject key identifier: 84:EF:17:A7:08:CF:F3:24:F5:F2:90:7E:8E:23:20:3F:01:97:D2:B3 Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Certificate serial: 745BC9D98855637A3DB26271B8D755B5CA0962C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft Manifest number: 02A4 Signing time: Fri 22 Aug 2025 21:37:52 +0000 Manifest this update: Fri 22 Aug 2025 21:32:52 +0000 Manifest next update: Sun 24 Aug 2025 01:08:52 +0000 Files and hashes: 1: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: wmDpL3riMITKsdehOb1WerOO/B/5LxkeH4w08+IHZo0=) 2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=) 3: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 01:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:c9:d9:88:55:63:7a:3d:b2:62:71:b8:d7:55:b5:ca:09:62:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Validity Not Before: Aug 22 21:32:52 2025 GMT Not After : Aug 24 01:08:52 2025 GMT Subject: CN=84EF17A708CFF324F5F2907E8E23203F0197D2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:e6:f9:bb:f7:28:e9:b3:24:57:1c:eb:05: 9a:40:0d:a3:c5:ac:ca:e5:8b:00:22:61:66:48:fa: df:3a:8b:6f:92:c5:60:6a:6e:8e:2a:51:c2:08:24: 95:8a:13:e6:43:c4:5a:fa:90:7f:49:fd:5f:47:3d: c8:f9:01:e6:a1:21:b6:85:4e:3b:77:3f:02:6d:cd: 54:4f:57:ec:37:dd:ee:16:8f:1c:40:28:c8:e7:c0: 57:4f:20:73:be:96:d9:81:a2:11:9b:28:e3:8d:2d: a9:11:55:ba:70:8b:00:c6:5a:1d:5d:6a:37:20:d2: 9f:a8:20:f5:cc:94:d8:71:40:b5:d1:4e:2f:d2:63: 51:9c:3b:72:58:9a:4d:32:b1:df:bd:64:52:dc:71: e7:69:d8:2b:12:1a:97:f1:4b:28:56:2f:be:6b:2d: 5f:86:44:df:15:ad:68:09:8b:98:60:8c:00:62:7c: 9f:2a:29:9f:f1:3b:90:45:e9:7e:92:04:78:83:81: c4:bf:de:3e:df:1a:1e:26:dd:0a:3e:56:1b:a0:a6: 4b:79:f9:d8:ee:f8:7f:bf:3d:f6:a3:d3:f1:f4:a0: 85:17:41:c8:54:22:da:e8:b5:94:3e:9a:cd:05:ec: 64:d1:eb:c2:dc:89:f1:89:48:23:7d:70:4e:74:81: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EF:17:A7:08:CF:F3:24:F5:F2:90:7E:8E:23:20:3F:01:97:D2:B3 X509v3 Authority Key Identifier: keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b0:e5:40:ea:fa:a5:6a:01:ec:98:38:49:9a:a9:a6:50:01: 71:be:26:95:20:0c:3c:ca:19:d5:2a:9c:ae:47:6a:9a:5f:b6: f6:b0:d0:37:98:86:c1:43:8d:25:1a:7d:cb:9f:94:ec:b5:01: e8:13:de:91:23:00:3a:17:17:41:89:88:ae:db:46:8f:f1:94: fa:e1:1d:dd:5f:d9:d0:dd:91:39:e1:43:74:b3:46:6e:9a:7d: 64:7a:55:79:3a:93:3e:7c:74:d6:ae:1b:55:9a:2f:21:26:5a: 95:e0:a4:54:4b:f0:74:3a:4b:76:69:d7:ec:ca:43:c8:71:c4: b8:97:79:c9:34:60:fd:3d:dd:8c:aa:62:01:fa:d4:58:45:41: 72:8b:3d:d3:4d:c7:43:cd:77:0b:20:b2:25:56:d7:c6:e4:b6: 18:5c:94:e4:7b:82:d1:bd:21:b7:76:97:72:0c:5f:85:51:a6: e4:9a:6f:f6:fe:67:85:c2:dd:39:d9:b2:81:9f:a2:92:34:9e: 22:bd:92:57:66:8d:e7:7f:a1:ed:4c:47:b9:36:ea:b6:bd:fb: f1:d8:5b:08:35:57:1b:b1:ba:31:fc:93:62:8f:70:cf:0e:ad: 7b:3a:0d:70:de:9e:12:af:b5:45:bf:c4:04:0b:f7:53:c0:db: dd:47:92:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdFvJ2YhVY3o9smJxuNdVtcoJYscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5 NTFENkVCOTAeFw0yNTA4MjIyMTMyNTJaFw0yNTA4MjQwMTA4NTJaMDMxMTAvBgNV BAMTKDg0RUYxN0E3MDhDRkYzMjRGNUYyOTA3RThFMjMyMDNGMDE5N0QyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAP+b5u/co6bMkVxzrBZpADaPF rMrliwAiYWZI+t86i2+SxWBqbo4qUcIIJJWKE+ZDxFr6kH9J/V9HPcj5AeahIbaF Tjt3PwJtzVRPV+w33e4WjxxAKMjnwFdPIHO+ltmBohGbKOONLakRVbpwiwDGWh1d ajcg0p+oIPXMlNhxQLXRTi/SY1GcO3JYmk0ysd+9ZFLccedp2CsSGpfxSyhWL75r LV+GRN8VrWgJi5hgjABifJ8qKZ/xO5BF6X6SBHiDgcS/3j7fGh4m3Qo+Vhugpkt5 +dju+H+/Pfaj0/H0oIUXQchUItrotZQ+ms0F7GTR68LcifGJSCN9cE50gYolAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhO8XpwjP8yT18pB+jiMgPwGX0rMwHwYDVR0j BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84 NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrDlQOr6pWoB7Jg4SZqpplABcb4mlSAMPMoZ1Sqcrkdqml+29rDQN5iGwUON JRp9y5+U7LUB6BPekSMAOhcXQYmIrttGj/GU+uEd3V/Z0N2ROeFDdLNGbpp9ZHpV eTqTPnx01q4bVZovISZaleCkVEvwdDpLdmnX7MpDyHHEuJd5yTRg/T3djKpiAfrU WEVBcos9003HQ813CyCyJVbXxuS2GFyU5HuC0b0ht3aXcgxfhVGm5Jpv9v5nhcLd OdmygZ+ikjSeIr2SV2aN53+h7UxHuTbqtr378dhbCDVXG7G6MfyTYo9wzw6tezoN cN6eEq+1Rb/EBAv3U8Db3UeSwQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:49 2025 by rpki-client