$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: rkCYTu8ntsZ+DtwN38NlYjIDN7W6KD3yFRLhmU4u6iA= Subject key identifier: 9F:2D:10:73:D3:C9:5F:8A:16:A3:E8:BE:09:00:09:72:B1:F2:46:2B Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 39DEF1F529E1FB92645382A9E4EDA236D111EA18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 02EA Signing time: Mon 20 Oct 2025 06:50:32 +0000 Manifest this update: Mon 20 Oct 2025 06:45:32 +0000 Manifest next update: Tue 21 Oct 2025 10:06:32 +0000 Files and hashes: 1: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) 2: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: V0TUVXwstABMed59QjXbtrpzF53It5iYUXw1yrqYfTA=) 3: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:de:f1:f5:29:e1:fb:92:64:53:82:a9:e4:ed:a2:36:d1:11:ea:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Oct 20 06:45:32 2025 GMT Not After : Oct 21 10:06:32 2025 GMT Subject: CN=9F2D1073D3C95F8A16A3E8BE09000972B1F2462B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:5b:12:e1:df:5a:cb:f6:1b:ac:1a:ae:19: 44:d2:f0:c8:72:fb:51:65:6e:da:93:66:79:0a:aa: 72:5e:7a:89:d3:ba:90:66:c9:1a:7a:a2:3c:3b:91: b9:c1:e7:2a:4e:49:77:51:20:67:f5:8c:f0:1f:15: d8:5e:bd:5f:cc:89:71:be:fa:0d:c6:3a:a4:e0:8c: 35:f0:65:6f:36:50:51:81:de:de:91:50:f8:1b:2c: 66:69:68:ee:4b:4f:b5:e1:13:6a:70:02:54:86:40: 32:10:34:eb:c5:a2:ba:00:50:2b:ca:0d:30:ad:d5: 1d:44:ba:37:e2:d7:13:5a:33:22:6b:f1:ec:46:46: d1:6a:4b:8e:2b:57:fb:92:8e:c1:67:bd:89:dd:27: 71:ec:53:97:86:c3:10:e6:80:6d:72:03:6f:11:b2: 85:b3:b1:1b:06:16:45:af:87:c2:9d:33:4f:e8:6d: 2e:ea:ef:09:b0:99:2f:66:c4:50:e0:a9:e7:e5:b1: b6:99:e9:0b:f4:ca:9c:54:62:e3:4d:92:b9:80:2f: 7f:5e:68:77:7b:a8:3a:be:0f:78:6c:b2:a7:f4:6d: 0c:8f:6e:16:d2:a6:cc:9a:aa:dc:6f:fc:27:56:2b: 47:19:15:33:e9:b0:c9:61:e9:c3:71:40:3b:50:91: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2D:10:73:D3:C9:5F:8A:16:A3:E8:BE:09:00:09:72:B1:F2:46:2B X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:dc:d8:79:cf:94:ad:50:b3:d4:fc:72:ba:29:05:13:eb:dc: 68:2b:3a:ac:9d:04:cd:cd:ef:4d:dd:6d:d1:fa:c1:ea:00:da: 2a:1a:fb:e7:1f:f1:6d:77:87:36:33:a7:af:45:48:37:57:38: 42:5f:20:78:4a:e7:44:41:4d:63:dd:15:ec:85:6a:de:33:8c: 3d:a0:73:63:ba:38:cf:64:50:e7:c5:e8:e5:f3:98:cc:59:ee: e3:37:2d:42:41:d4:a0:45:44:8e:eb:c6:b0:c0:4f:4e:5e:17: c3:96:56:f2:24:89:a3:dc:cb:d9:8d:78:14:24:9d:b4:ce:2f: a6:57:78:44:f3:fb:d2:55:7c:4f:f2:a2:a3:cb:06:76:ae:73: 8e:65:a0:ad:1e:09:77:88:d3:68:1a:9f:78:9e:af:ca:1c:c5: b0:2d:aa:4a:7a:33:cb:1f:ab:4f:11:b4:05:d8:46:d9:b5:4b: c1:49:5b:c8:5e:07:95:0f:f7:9c:9a:b5:46:05:a6:db:3f:23: 37:56:2a:5a:3a:4b:17:97:dd:96:37:fa:25:b4:fc:1a:f8:84: 22:66:4b:93:2a:95:4b:f4:f3:1b:cb:32:6e:20:5f:43:f0:8a: 05:a6:42:b1:ca:0b:8c:89:af:ee:fb:b0:e4:b8:72:a2:d7:a0: 11:49:cb:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOd7x9Snh+5JkU4Kp5O2iNtER6hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTEwMjAwNjQ1MzJaFw0yNTEwMjExMDA2MzJaMDMxMTAvBgNV BAMTKDlGMkQxMDczRDNDOTVGOEExNkEzRThCRTA5MDAwOTcyQjFGMjQ2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42VsS4d9ay/YbrBquGUTS8Mhy +1FlbtqTZnkKqnJeeonTupBmyRp6ojw7kbnB5ypOSXdRIGf1jPAfFdhevV/MiXG+ +g3GOqTgjDXwZW82UFGB3t6RUPgbLGZpaO5LT7XhE2pwAlSGQDIQNOvForoAUCvK DTCt1R1Eujfi1xNaMyJr8exGRtFqS44rV/uSjsFnvYndJ3HsU5eGwxDmgG1yA28R soWzsRsGFkWvh8KdM0/obS7q7wmwmS9mxFDgqeflsbaZ6Qv0ypxUYuNNkrmAL39e aHd7qDq+D3hssqf0bQyPbhbSpsyaqtxv/CdWK0cZFTPpsMlh6cNxQDtQkR/3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUny0Qc9PJX4oWo+i+CQAJcrHyRiswHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARtzYec+UrVCz1PxyuikFE+vcaCs6rJ0Ezc3vTd1t0frB6gDaKhr75x/xbXeH NjOnr0VIN1c4Ql8geErnREFNY90V7IVq3jOMPaBzY7o4z2RQ58Xo5fOYzFnu4zct QkHUoEVEjuvGsMBPTl4Xw5ZW8iSJo9zL2Y14FCSdtM4vpld4RPP70lV8T/Kio8sG dq5zjmWgrR4Jd4jTaBqfeJ6vyhzFsC2qSnozyx+rTxG0BdhG2bVLwUlbyF4HlQ/3 nJq1RgWm2z8jN1YqWjpLF5fdljf6JbT8GviEImZLkyqVS/TzG8sybiBfQ/CKBaZC scoLjImv7vuw5LhyotegEUnLmw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:55 2025 by rpki-client