
$ rpki-client -vvvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier: WWH56HQIELRByVrkkyeXUV/xQOShyex3MMPYA6GTE40=
Subject key identifier: 34:00:B8:C5:0D:CF:B8:6D:D5:AE:68:31:6C:9B:37:B1:00:E8:61:2E
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial: 1AE229ACF4604A67E36BDF895F8E3C5B9C887970
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number: 04CB
Signing time: Sat 10 Oct 2026 20:34:11 +0000
Manifest this update: Sat 10 Oct 2026 20:29:11 +0000
Manifest next update: Sun 11 Oct 2026 23:33:11 +0000
Files and hashes: 1: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: OT2DfWyFKNvSoTJf9dwmRQtmqi5S997sL6otpiDnOD8=)
2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: E+Ma3InLA9r1gaEmUaTbdzlPYH5q+HVx3nCFL9qtnJY=)
3: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: J4hurxs3ry731dFTFoMgb7xwtvyrAEt2oytAaJZIIGU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 11 Oct 2026 23:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e2:29:ac:f4:60:4a:67:e3:6b:df:89:5f:8e:3c:5b:9c:88:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Validity
Not Before: Oct 10 20:29:11 2026 GMT
Not After : Oct 11 23:33:11 2026 GMT
Subject: CN=3400B8C50DCFB86DD5AE68316C9B37B100E8612E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:99:6d:48:70:00:c4:47:2f:95:47:c9:5b:
75:8f:6b:12:40:31:81:9f:75:0e:ec:3e:b8:97:94:
91:a6:bc:45:90:29:b6:46:ad:cc:b4:57:97:b7:70:
8f:11:48:a7:8a:13:a1:9a:94:b1:36:f5:a9:7a:07:
a3:e8:82:39:ff:1a:f3:70:7a:88:80:32:ef:27:82:
73:d2:c7:7f:4b:8d:d2:e1:af:ef:cc:4d:9d:af:ad:
88:e5:e0:ec:ad:3a:5b:3b:32:fd:cb:6a:5e:e9:47:
75:a2:45:93:9a:3b:5e:8d:3e:d9:6e:8b:57:21:3f:
1e:5b:87:a9:ce:39:66:01:69:4a:d7:b0:ea:bd:9f:
cf:3d:9a:90:73:28:04:ba:99:d9:19:a9:2f:3f:e0:
cc:22:50:9a:59:9a:f4:0d:b5:b4:e5:57:4f:01:83:
30:92:7f:99:a6:a6:b9:6a:09:f6:38:bd:5f:31:5d:
35:30:34:5a:a1:01:72:17:5c:78:d4:da:bd:76:07:
34:45:71:82:86:80:83:75:60:2f:82:51:29:7f:44:
61:68:1a:2f:e5:35:70:ed:6e:92:33:8b:f5:8a:d7:
e7:c5:9f:bf:97:35:7d:5e:54:f3:c8:54:91:69:98:
34:92:9b:23:94:ac:d0:00:80:69:3d:1d:15:81:f3:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:B8:C5:0D:CF:B8:6D:D5:AE:68:31:6C:9B:37:B1:00:E8:61:2E
X509v3 Authority Key Identifier:
keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d7:4a:ca:c1:0d:a1:13:9b:b8:0c:6d:12:58:c7:a6:30:11:
99:c4:42:93:f8:89:1d:26:5c:b8:e9:5a:88:21:5b:56:2a:17:
f2:34:39:f8:3c:a5:72:dc:f2:a6:f1:08:c4:4d:68:87:d4:c3:
ca:b1:c8:dc:c2:80:0f:59:d5:0c:57:80:2c:63:9d:22:75:f3:
1c:19:08:55:af:86:73:76:77:6a:35:42:d9:d8:0d:19:b8:1e:
42:20:4e:9f:8d:68:cf:c3:73:f6:e2:9b:eb:aa:76:92:33:61:
51:d7:b0:ba:c4:9b:2f:c9:0d:4e:8e:b2:9a:43:24:17:2a:14:
4c:61:ed:9c:83:d7:2f:b5:05:b0:1b:6b:d4:7c:bb:60:a5:aa:
33:88:6d:6e:46:b7:cd:95:03:7a:71:57:c6:a6:2a:c6:02:93:
35:68:11:41:66:d6:b6:1d:4f:0f:aa:d1:9b:b2:27:ea:02:26:
1f:70:7b:01:bf:c2:9a:43:59:33:5c:58:1b:27:75:4f:08:90:
9e:9b:c3:76:7c:b1:ab:dd:a2:0e:37:91:b2:e0:15:8d:85:e8:
0d:77:73:0c:c7:b7:67:f4:3c:dd:fa:7c:07:0b:2e:d6:ec:14:
67:35:c4:ee:77:07:37:02:6c:6a:42:15:c2:dc:6c:fd:32:88:
1a:6a:c2:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGuIprPRgSmfja9+JX448W5yIeXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5
NTFENkVCOTAeFw0yNjEwMTAyMDI5MTFaFw0yNjEwMTEyMzMzMTFaMDMxMTAvBgNV
BAMTKDM0MDBCOEM1MERDRkI4NkRENUFFNjgzMTZDOUIzN0IxMDBFODYxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlupltSHAAxEcvlUfJW3WPaxJA
MYGfdQ7sPriXlJGmvEWQKbZGrcy0V5e3cI8RSKeKE6GalLE29al6B6Pogjn/GvNw
eoiAMu8ngnPSx39LjdLhr+/MTZ2vrYjl4OytOls7Mv3Lal7pR3WiRZOaO16NPtlu
i1chPx5bh6nOOWYBaUrXsOq9n889mpBzKAS6mdkZqS8/4MwiUJpZmvQNtbTlV08B
gzCSf5mmprlqCfY4vV8xXTUwNFqhAXIXXHjU2r12BzRFcYKGgIN1YC+CUSl/RGFo
Gi/lNXDtbpIzi/WK1+fFn7+XNX1eVPPIVJFpmDSSmyOUrNAAgGk9HRWB82PbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNAC4xQ3PuG3VrmgxbJs3sQDoYS4wHwYDVR0j
BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV
eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG
OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84
NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh9dKysENoRObuAxtEljHpjARmcRCk/iJHSZcuOlaiCFbVioX8jQ5+Dylctzy
pvEIxE1oh9TDyrHI3MKAD1nVDFeALGOdInXzHBkIVa+Gc3Z3ajVC2dgNGbgeQiBO
n41oz8Nz9uKb66p2kjNhUdewusSbL8kNTo6ymkMkFyoUTGHtnIPXL7UFsBtr1Hy7
YKWqM4htbka3zZUDenFXxqYqxgKTNWgRQWbWth1PD6rRm7In6gImH3B7Ab/CmkNZ
M1xYGyd1TwiQnpvDdnyxq92iDjeRsuAVjYXoDXdzDMe3Z/Q83fp8Bwsu1uwUZzXE
7ncHNwJsakIVwtxs/TKIGmrCtw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:48:20 2026 by rpki-client