$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json) Hash identifier: nRn6/DnNH6xB225PCpLJPg0vqNKOPxhPqvOi1LTnIjo= Subject key identifier: 2D:57:80:54:BC:E6:53:F0:A0:63:29:75:8B:94:D0:0A:6B:30:6F:39 Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Certificate serial: 58F5DCF8B9B5C0D33CCACC2A8194A6860F1F0770 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft Manifest number: 021A Signing time: Sat 10 May 2025 22:44:35 +0000 Manifest this update: Sat 10 May 2025 22:39:35 +0000 Manifest next update: Mon 12 May 2025 02:37:35 +0000 Files and hashes: 1: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=) 2: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: 8My1i2aDoze+0vZgj4G599XoS/MfaKaPu/6SPnUmQVY=) 3: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f5:dc:f8:b9:b5:c0:d3:3c:ca:cc:2a:81:94:a6:86:0f:1f:07:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Validity Not Before: May 10 22:39:35 2025 GMT Not After : May 12 02:37:35 2025 GMT Subject: CN=2D578054BCE653F0A06329758B94D00A6B306F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:05:0d:10:25:f3:45:52:ee:5d:e4:72:d6: e1:22:95:a7:66:6b:9e:48:22:10:d6:d9:8d:26:2f: 32:eb:f6:f7:3b:e0:e8:63:0f:7d:6f:f8:08:e1:82: 87:1f:76:b3:87:e3:51:dc:3b:7f:d4:da:c0:11:2a: d7:e5:bd:81:75:f2:ac:de:bf:6e:0c:e1:ca:e0:87: 7d:61:93:db:99:00:93:37:45:22:49:e1:85:8f:93: c1:b2:10:7e:cc:2c:8b:81:7b:c7:4a:ab:e3:df:f2: 38:9b:c3:d5:20:16:c8:97:f2:7d:3e:14:b7:75:52: 37:06:74:a2:ef:91:1f:df:49:c9:c6:0a:75:05:72: 43:7b:5b:02:3b:e9:d5:7c:e4:76:90:69:93:01:e5: 3f:43:33:41:4d:74:55:b1:d9:71:a7:c8:cc:11:4e: 56:2d:68:b8:2f:d5:f5:ee:38:b8:55:29:8a:51:00: 88:82:8c:f1:86:81:6f:1d:a8:e0:ee:ac:71:c4:c5: bc:f1:e6:43:55:fe:1e:0a:bf:6c:30:08:72:f0:19: 2e:f3:07:94:7d:d7:1e:81:7e:15:ed:f8:30:b4:64: f7:6f:82:c5:90:aa:c3:3d:ca:8a:b4:fe:9a:6c:b1: 05:3a:99:dc:90:7e:6d:d4:36:f4:e5:f0:a0:96:97: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:80:54:BC:E6:53:F0:A0:63:29:75:8B:94:D0:0A:6B:30:6F:39 X509v3 Authority Key Identifier: keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:71:3e:0e:e0:4e:a6:df:be:7a:e7:25:c8:25:d0:b5:dd:b3: d0:c3:e5:f3:14:58:22:fb:e0:8b:26:ee:70:8c:f5:b6:39:66: 0f:21:6e:5c:61:36:f4:48:af:ce:59:1d:e1:a9:b4:7b:bb:b3: 68:b1:ba:f5:5e:34:b2:a1:ab:d2:0a:60:fe:0e:55:6d:0b:99: 51:d3:37:e8:f5:ad:ed:5f:22:ca:96:f3:fe:14:65:72:4a:62: 2d:76:67:0b:8e:c0:3d:24:30:d4:2c:64:21:dc:94:0d:32:0f: 6f:5e:33:34:39:f0:a9:12:18:f1:4a:47:9c:38:d6:ea:8a:17: 02:22:dd:25:b7:3d:be:b9:2b:b7:16:ab:4a:f1:bc:ce:e6:26: 6f:52:ca:d7:45:96:fc:6d:98:9a:0e:c6:e5:c6:ab:a4:cc:15: 0b:c3:a2:7b:54:3c:4b:a7:dc:b9:d6:58:99:7d:f2:45:1d:77: d2:67:ed:a0:5d:1a:6d:e9:ee:f1:fb:66:7c:26:01:51:57:41: 0b:47:c5:ea:b6:bb:02:ac:48:a5:21:b7:99:6d:27:94:e0:f9: fd:34:65:6c:80:86:b9:4f:bf:ab:85:c5:01:9c:7b:8b:59:22: a2:8b:f6:e3:51:d0:5c:a5:68:45:7c:cb:74:fc:63:7b:cb:6b: 73:b1:09:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWPXc+Lm1wNM8yswqgZSmhg8fB3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5 NTFENkVCOTAeFw0yNTA1MTAyMjM5MzVaFw0yNTA1MTIwMjM3MzVaMDMxMTAvBgNV BAMTKDJENTc4MDU0QkNFNjUzRjBBMDYzMjk3NThCOTREMDBBNkIzMDZGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrQUNECXzRVLuXeRy1uEiladm a55IIhDW2Y0mLzLr9vc74OhjD31v+AjhgocfdrOH41HcO3/U2sARKtflvYF18qze v24M4crgh31hk9uZAJM3RSJJ4YWPk8GyEH7MLIuBe8dKq+Pf8jibw9UgFsiX8n0+ FLd1UjcGdKLvkR/fScnGCnUFckN7WwI76dV85HaQaZMB5T9DM0FNdFWx2XGnyMwR TlYtaLgv1fXuOLhVKYpRAIiCjPGGgW8dqODurHHExbzx5kNV/h4Kv2wwCHLwGS7z B5R91x6BfhXt+DC0ZPdvgsWQqsM9yoq0/ppssQU6mdyQfm3UNvTl8KCWlz5jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULVeAVLzmU/CgYyl1i5TQCmswbzkwHwYDVR0j BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84 NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC3E+DuBOpt++euclyCXQtd2z0MPl8xRYIvvgiybucIz1tjlmDyFuXGE29Eiv zlkd4am0e7uzaLG69V40sqGr0gpg/g5VbQuZUdM36PWt7V8iypbz/hRlckpiLXZn C47APSQw1CxkIdyUDTIPb14zNDnwqRIY8UpHnDjW6ooXAiLdJbc9vrkrtxarSvG8 zuYmb1LK10WW/G2Ymg7G5carpMwVC8Oie1Q8S6fcudZYmX3yRR130mftoF0abenu 8ftmfCYBUVdBC0fF6ra7AqxIpSG3mW0nlOD5/TRlbICGuU+/q4XFAZx7i1kioov2 41HQXKVoRXzLdPxje8trc7EJjQ== -----END CERTIFICATE-----Generated at Sun May 11 18:56:56 2025 by rpki-client