$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: UBuZ5DV94k0frUqeQ+31b9jl/VagJT4CWFaqAALsDg8= Subject key identifier: 6B:D8:17:CA:87:F7:A1:68:6E:49:31:2F:B0:3C:D2:D4:30:D7:B2:30 Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 790D49A6231375485B0ABBCA9DBBA479E24CDCA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 0256 Signing time: Tue 01 Jul 2025 15:03:23 +0000 Manifest this update: Tue 01 Jul 2025 14:58:23 +0000 Manifest next update: Wed 02 Jul 2025 16:19:23 +0000 Files and hashes: 1: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) 2: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) 3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: k/eb3OpwMgVm41OowXjDA0xF00ouCiTzndmlKiRY1Y4=) 4: 3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (hash: b0pL1VTBBizjwsHR6X+XXt3qIwIdd6kUaamT8TMSnKY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 16:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0d:49:a6:23:13:75:48:5b:0a:bb:ca:9d:bb:a4:79:e2:4c:dc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Jul 1 14:58:23 2025 GMT Not After : Jul 2 16:19:23 2025 GMT Subject: CN=6BD817CA87F7A1686E49312FB03CD2D430D7B230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:8f:26:33:1b:70:9d:45:23:4f:f5:25:a7: 61:73:41:b0:21:09:2f:b2:1d:d0:b7:0e:52:60:cc: 47:b8:16:48:39:4b:11:ce:89:35:28:96:68:99:ea: 72:7f:6f:39:f8:52:58:6e:a7:c7:75:e0:2c:62:15: 7b:66:f7:bf:be:d1:6b:11:a6:cb:a4:08:50:c1:77: cd:99:f8:fd:33:1f:48:90:c8:8a:d3:a2:10:d5:0f: 86:97:32:1b:84:01:1a:ea:c0:a6:42:42:67:3b:6d: b2:03:e5:a1:67:71:c7:70:6e:d7:25:a6:d3:8d:2c: 31:a2:8e:7b:78:6e:2c:dd:19:21:fe:4e:b4:15:84: d8:2b:96:39:5c:8e:eb:74:4b:a5:9c:75:cc:06:37: 18:6a:8f:07:a5:ae:7e:18:df:2c:1e:ca:a1:00:50: e9:cd:81:68:92:f2:39:d4:80:63:ea:94:0e:98:8b: 0e:10:c2:26:64:bd:a4:f4:3e:4e:a5:73:40:eb:18: 7d:b9:b2:bb:54:16:86:ef:58:c4:4e:9a:21:10:47: d1:91:3b:a4:5e:59:4d:87:20:d9:47:eb:bb:e2:cc: 2c:ef:de:21:08:6b:d3:51:15:68:8b:92:df:1f:10: 46:e1:91:7e:c4:ec:0a:bb:7c:7e:cf:9e:2a:89:d8: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:17:CA:87:F7:A1:68:6E:49:31:2F:B0:3C:D2:D4:30:D7:B2:30 X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4b:67:31:33:0a:c4:27:c9:ca:9b:de:7c:02:49:7d:ed:5f: fa:a1:cb:2b:57:5d:f1:5d:4d:fd:80:4f:5f:95:8e:f0:9d:4e: b7:47:3a:d1:73:f1:67:2a:39:be:94:57:d6:d8:0b:aa:14:09: 23:18:ca:d3:68:77:93:0e:af:fa:ca:f7:f0:3b:5d:36:11:e6: ba:1e:4c:0e:df:03:08:d0:89:05:ea:7b:57:70:8e:cd:f9:2b: 66:3c:da:9b:9b:6a:9d:b1:8c:bb:73:8b:69:e8:0d:d1:ec:c1: 48:d3:80:d8:57:d0:63:d8:28:ee:8a:b3:0a:0b:73:02:45:da: 17:c1:3d:93:01:15:9a:e5:92:62:b0:29:d4:51:e3:7e:87:36: db:da:1e:cf:55:6f:93:9e:2c:09:e3:cf:33:c4:e1:a8:f9:21: 10:1d:00:bf:4a:8b:9f:ad:c7:d0:26:0e:57:f1:77:36:86:e2: c4:8b:c1:4e:6b:3c:3c:73:de:c3:1c:ba:36:5a:1a:47:a7:3a: eb:86:65:95:7d:31:51:e3:65:dd:54:62:8a:c6:50:cb:15:9b: b2:dc:a2:2b:39:de:54:84:d8:f9:61:59:6a:bb:dc:ed:2d:32: 88:52:31:e8:96:e4:3b:13:68:bd:4d:51:ef:0e:58:7e:0d:b3: dd:9d:6d:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeQ1JpiMTdUhbCrvKnbukeeJM3KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTA3MDExNDU4MjNaFw0yNTA3MDIxNjE5MjNaMDMxMTAvBgNV BAMTKDZCRDgxN0NBODdGN0ExNjg2RTQ5MzEyRkIwM0NEMkQ0MzBEN0IyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzo8mMxtwnUUjT/Ulp2FzQbAh CS+yHdC3DlJgzEe4Fkg5SxHOiTUolmiZ6nJ/bzn4Ulhup8d14CxiFXtm97++0WsR psukCFDBd82Z+P0zH0iQyIrTohDVD4aXMhuEARrqwKZCQmc7bbID5aFnccdwbtcl ptONLDGijnt4bizdGSH+TrQVhNgrljlcjut0S6WcdcwGNxhqjwelrn4Y3yweyqEA UOnNgWiS8jnUgGPqlA6Yiw4QwiZkvaT0Pk6lc0DrGH25srtUFobvWMROmiEQR9GR O6ReWU2HINlH67vizCzv3iEIa9NRFWiLkt8fEEbhkX7E7Aq7fH7PniqJ2LE1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa9gXyof3oWhuSTEvsDzS1DDXsjAwHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUtnMTMKxCfJypvefAJJfe1f+qHLK1dd8V1N/YBPX5WO8J1Ot0c60XPxZyo5 vpRX1tgLqhQJIxjK02h3kw6v+sr38DtdNhHmuh5MDt8DCNCJBep7V3COzfkrZjza m5tqnbGMu3OLaegN0ezBSNOA2FfQY9go7oqzCgtzAkXaF8E9kwEVmuWSYrAp1FHj foc229oez1Vvk54sCePPM8ThqPkhEB0Av0qLn63H0CYOV/F3NobixIvBTms8PHPe wxy6NloaR6c664ZllX0xUeNl3VRiisZQyxWbstyiKzneVITY+WFZarvc7S0yiFIx 6JbkOxNovU1R7w5Yfg2z3Z1t4w== -----END CERTIFICATE-----Generated at Tue Jul 1 22:28:36 2025 by rpki-client