
$ rpki-client -vvvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier: U3xzhTd3B491HrTJmIX5e/m8WaMsaEkF8g5VEAYFrVY=
Subject key identifier: 4D:34:49:1A:A8:54:48:38:A8:C7:B7:D6:1B:29:1C:C4:11:46:46:F4
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial: 60C58D8335BC21DF4533F6C326AAAA7FF30FD655
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number: 04E9
Signing time: Mon 02 Nov 2026 00:21:58 +0000
Manifest this update: Mon 02 Nov 2026 00:16:58 +0000
Manifest next update: Tue 03 Nov 2026 01:47:58 +0000
Files and hashes: 1: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: +jXCgtjSZmiOrkDmlcgqCPKbk53FMeOhPld8T+Rrj4E=)
2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: E+Ma3InLA9r1gaEmUaTbdzlPYH5q+HVx3nCFL9qtnJY=)
3: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: J4hurxs3ry731dFTFoMgb7xwtvyrAEt2oytAaJZIIGU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c5:8d:83:35:bc:21:df:45:33:f6:c3:26:aa:aa:7f:f3:0f:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Validity
Not Before: Nov 2 00:16:58 2026 GMT
Not After : Nov 3 01:47:58 2026 GMT
Subject: CN=4D34491AA8544838A8C7B7D61B291CC4114646F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:9a:94:cb:d3:ae:66:a0:0f:01:8e:d2:75:
f9:71:02:51:46:4d:26:ad:a0:84:bc:aa:1d:fc:52:
e8:d0:4d:55:38:84:1c:b6:14:d8:47:ee:b4:ec:b5:
1d:64:55:7b:64:5a:05:5d:44:a1:b7:14:2c:86:62:
67:97:5d:d7:60:b1:39:80:17:e6:3e:52:a9:7e:8f:
bd:69:77:25:88:61:60:55:00:fd:30:ac:1f:34:c8:
7d:91:fc:f0:a1:ad:31:4c:40:5f:6b:fd:84:6d:6e:
89:ae:5e:fc:72:03:0d:c0:c1:d5:7e:61:9a:dc:9e:
f8:be:66:58:33:58:e2:73:9d:b2:e5:ea:c7:e2:01:
ee:fb:31:c2:71:9b:b8:e2:56:f2:02:56:3f:55:2f:
cc:64:8b:70:40:af:c2:71:db:dd:1e:47:67:e3:7f:
d8:f1:e9:18:18:bb:75:d3:7e:3b:4b:a8:17:a8:9d:
b9:cd:0f:41:0c:e8:54:38:4c:35:fb:be:ef:10:78:
0c:60:fd:91:c8:ab:fc:25:b8:e9:55:22:3c:9d:39:
b3:1a:df:d5:6d:c3:21:19:4f:57:32:91:cb:e7:d2:
f6:43:37:39:66:75:6c:3f:93:bc:08:55:67:3a:7a:
bb:0e:b1:49:08:87:cf:fc:2c:06:8f:c9:1a:d4:13:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:49:1A:A8:54:48:38:A8:C7:B7:D6:1B:29:1C:C4:11:46:46:F4
X509v3 Authority Key Identifier:
keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:6a:40:db:f0:a4:a0:a2:26:8d:30:11:87:25:04:f5:81:
4b:ad:e1:70:4a:39:dd:a1:a5:8d:64:d6:e8:8b:5e:bf:52:87:
6b:d2:fb:2f:80:11:f8:ef:6c:2a:9f:94:17:c8:6e:53:53:d7:
40:a2:cb:c0:02:0e:d1:d6:5e:82:80:d3:a7:f9:bd:92:ba:4b:
64:5e:c7:c1:dc:2c:e9:6d:c4:fe:e9:21:a8:b7:b2:b7:8f:c4:
05:ce:58:ad:75:10:27:d6:fa:7c:8d:ed:68:68:20:9a:a7:40:
20:4c:17:15:eb:56:ab:58:5e:97:e1:a0:00:95:de:69:b7:bb:
28:c9:30:17:82:5f:d6:a0:27:cc:c6:40:07:db:13:fe:7e:58:
3d:42:35:dc:86:98:87:c8:04:22:83:9d:9e:97:ad:33:ff:6c:
46:22:1f:d2:39:ec:c7:51:1c:50:80:23:37:e2:99:d8:03:4b:
c0:ac:01:3c:d3:ef:6a:72:d7:e8:25:d6:c8:3e:58:79:6a:2d:
7f:8c:ad:d8:ec:b4:92:7d:cc:43:84:6d:73:29:cf:9b:99:0b:
4b:49:8a:73:00:79:28:bb:cc:84:b7:11:33:1b:9a:37:52:d7:
ec:be:5f:21:25:d1:09:55:84:62:9f:a1:1a:4f:e1:0b:a4:1e:
5d:84:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:12:58 2026 by rpki-client