$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: tOPj6nT5uerHiB6xo+QfaqOUQsI7KuDDwHHTQN3dQqc= Subject key identifier: 94:64:6A:52:32:9E:91:B8:E2:0B:88:B0:30:7F:46:CF:2D:A2:21:A4 Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 7846B0EC1A721401F52155717F0FEFBAB88EC481 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 029D Signing time: Sat 23 Aug 2025 14:17:11 +0000 Manifest this update: Sat 23 Aug 2025 14:12:11 +0000 Manifest next update: Sun 24 Aug 2025 14:25:11 +0000 Files and hashes: 1: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: Es7X+2LtYytTh6hlPFf3SafHb0u4JvWgV7IZJUoz1Cc=) 2: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) 3: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) 4: 3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (hash: b0pL1VTBBizjwsHR6X+XXt3qIwIdd6kUaamT8TMSnKY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:46:b0:ec:1a:72:14:01:f5:21:55:71:7f:0f:ef:ba:b8:8e:c4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Aug 23 14:12:11 2025 GMT Not After : Aug 24 14:25:11 2025 GMT Subject: CN=94646A52329E91B8E20B88B0307F46CF2DA221A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:84:73:c8:a4:15:ed:dc:c5:86:af:41:07: c3:46:84:18:d8:04:98:c2:3b:88:d1:49:25:db:1e: a1:5e:1f:03:e9:b4:a4:9b:af:90:8d:d7:5d:fe:1a: 99:8e:d0:73:ca:e4:14:cf:f6:c5:e8:f9:e8:7f:ff: 01:4a:21:04:c7:ed:cb:47:93:79:bf:91:74:ff:9e: e0:5e:dc:5d:6e:e5:56:97:ee:e4:f4:c1:04:43:75: 1e:80:df:3e:7a:e9:f3:ae:2b:b6:87:cd:af:1e:0d: 8c:a9:b0:21:8f:ae:3c:6a:86:9a:f1:0c:d6:27:38: 3f:d8:e7:45:04:09:fb:15:27:31:b0:6b:2c:8c:30: f0:bc:f0:33:b1:e3:dc:df:34:88:39:d1:80:e8:ef: 24:e8:e0:bf:61:22:b4:31:a4:ec:52:9c:98:72:75: 3d:a8:28:5c:ee:c0:f2:59:1f:cb:d0:8d:b0:87:d0: dc:e7:b6:8d:88:64:03:a0:8e:29:32:bf:39:31:3a: 61:12:25:57:10:6c:b7:7b:59:1f:4a:30:72:c4:64: d4:ac:81:fd:3d:f9:e8:83:8e:81:ce:2e:56:de:29: 1c:d5:03:25:28:38:25:86:8f:fc:22:2e:75:17:c3: b7:9b:1b:ab:30:64:d6:03:7a:44:f0:c2:3e:3f:98: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:64:6A:52:32:9E:91:B8:E2:0B:88:B0:30:7F:46:CF:2D:A2:21:A4 X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:5e:b6:6b:1e:d2:68:f5:c5:08:bf:2e:a8:ef:b0:89:77: 32:df:d2:b6:ab:7f:29:18:2f:1a:f4:83:93:f1:d2:22:27:f7: 23:c6:c9:67:dd:95:89:bb:6d:f0:34:5f:66:9a:5f:0f:0a:3a: 12:08:93:05:86:63:35:96:3f:d7:90:64:0e:e3:e9:bb:ed:bc: d0:5d:5f:76:1c:99:d9:9c:0a:65:58:ff:b1:ef:1f:2f:2b:4d: 3e:13:cb:ec:b4:c5:9a:01:d6:73:93:ac:a3:96:33:7c:1b:e5: 60:70:2f:43:33:0e:96:20:fd:e1:1f:00:d4:3d:ef:23:ac:65: bb:f8:3a:8e:1b:66:77:41:6b:49:f9:12:67:4f:77:4d:c3:49: 28:a6:ad:99:14:20:f3:e4:ff:a5:80:1b:90:0b:19:dc:79:7e: 8a:5a:a4:b3:5f:90:2b:ba:bd:d6:2d:2c:7b:cf:0d:37:c9:2f: c0:b0:00:86:81:07:aa:22:89:b4:87:37:e4:d4:23:87:4c:5b: 14:3e:e3:f0:1e:50:65:3f:b7:10:a8:d0:20:59:a6:43:8b:ac: 53:cd:55:4e:08:a8:56:75:37:91:8b:b9:5d:e3:ba:7c:35:55: 3d:5d:6b:d6:af:0e:33:87:cb:e0:3e:03:55:51:10:ef:29:50: 2b:4b:e3:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeEaw7BpyFAH1IVVxfw/vuriOxIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTA4MjMxNDEyMTFaFw0yNTA4MjQxNDI1MTFaMDMxMTAvBgNV BAMTKDk0NjQ2QTUyMzI5RTkxQjhFMjBCODhCMDMwN0Y0NkNGMkRBMjIxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+YRzyKQV7dzFhq9BB8NGhBjY BJjCO4jRSSXbHqFeHwPptKSbr5CN113+GpmO0HPK5BTP9sXo+eh//wFKIQTH7ctH k3m/kXT/nuBe3F1u5VaX7uT0wQRDdR6A3z566fOuK7aHza8eDYypsCGPrjxqhprx DNYnOD/Y50UECfsVJzGwayyMMPC88DOx49zfNIg50YDo7yTo4L9hIrQxpOxSnJhy dT2oKFzuwPJZH8vQjbCH0Nznto2IZAOgjikyvzkxOmESJVcQbLd7WR9KMHLEZNSs gf09+eiDjoHOLlbeKRzVAyUoOCWGj/wiLnUXw7ebG6swZNYDekTwwj4/mH1tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlGRqUjKekbjiC4iwMH9Gzy2iIaQwHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPOVetmse0mj1xQi/LqjvsIl3Mt/Stqt/KRgvGvSDk/HSIif3I8bJZ92Vibtt 8DRfZppfDwo6EgiTBYZjNZY/15BkDuPpu+280F1fdhyZ2ZwKZVj/se8fLytNPhPL 7LTFmgHWc5Oso5YzfBvlYHAvQzMOliD94R8A1D3vI6xlu/g6jhtmd0FrSfkSZ093 TcNJKKatmRQg8+T/pYAbkAsZ3Hl+ilqks1+QK7q91i0se88NN8kvwLAAhoEHqiKJ tIc35NQjh0xbFD7j8B5QZT+3EKjQIFmmQ4usU81VTgioVnU3kYu5XeO6fDVVPV1r 1q8OM4fL4D4DVVEQ7ylQK0vj0A== -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:59 2025 by rpki-client