$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json) Hash identifier: zYjSFcB5YL77fh19IhRPWdb7+Cz7Zg6DrjsNXwaTgBo= Subject key identifier: C3:2A:FD:96:02:E5:99:AF:C9:0C:EE:DD:DE:D3:4B:61:96:F7:4B:40 Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Certificate serial: 345D5CFD2AC27D81C707E3DE2956E35D0668BE20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft Manifest number: 0305 Signing time: Mon 03 Nov 2025 09:07:47 +0000 Manifest this update: Mon 03 Nov 2025 09:02:47 +0000 Manifest next update: Tue 04 Nov 2025 09:56:47 +0000 Files and hashes: 1: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=) 2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=) 3: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: AGc3z/q6QRJ4VtJMLMZ2IhBKQ9OxHO/7ZBqy/88BDnM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5d:5c:fd:2a:c2:7d:81:c7:07:e3:de:29:56:e3:5d:06:68:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Validity Not Before: Nov 3 09:02:47 2025 GMT Not After : Nov 4 09:56:47 2025 GMT Subject: CN=C32AFD9602E599AFC90CEEDDDED34B6196F74B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7f:59:f3:76:1c:1c:06:03:74:db:36:22:97: 61:bc:fb:94:5c:51:7e:42:2f:15:83:aa:d4:ef:d6: 2c:be:98:80:82:66:84:63:b4:4f:8d:6c:50:c5:8e: d2:d0:dc:14:ea:ce:42:53:9d:c2:c1:e8:72:af:e3: 1c:13:a8:9c:8c:b9:ac:ff:91:e2:43:03:ea:48:50: 1c:24:dc:9b:20:0c:f5:72:bf:cf:7a:2a:5e:76:df: 86:bc:ed:bd:92:48:4f:91:43:ab:7a:6f:c2:7a:c8: 6e:b5:fd:df:3f:80:20:69:1b:b4:74:d7:28:49:d8: 40:82:39:ce:fa:4e:f4:36:1e:f0:fb:68:cc:ad:6e: 9f:52:ae:d8:8b:28:f5:c7:4d:f6:6b:06:34:12:9a: 38:2e:19:82:b1:ad:3a:1d:ac:72:82:d6:43:cb:88: 20:51:5b:a4:f1:43:c3:6a:22:b5:cd:55:42:7f:f3: 46:cd:8d:3f:9d:6b:98:ba:4a:bb:61:27:34:7f:ac: cf:a4:da:69:39:3f:db:9f:35:61:2c:a6:23:2d:1f: 47:7b:2b:6e:e2:2a:9d:da:92:58:4c:78:72:04:11: 99:b8:be:7c:29:dc:2f:dd:0d:e5:94:93:16:b9:57: 74:1c:1d:d0:0a:39:d8:6b:22:ae:93:29:d8:40:00: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:FD:96:02:E5:99:AF:C9:0C:EE:DD:DE:D3:4B:61:96:F7:4B:40 X509v3 Authority Key Identifier: keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:00:87:de:eb:f1:47:6c:01:3a:bd:82:fe:b7:9b:f5:79:b4: 0e:de:37:62:ed:da:17:83:5a:1e:3d:e9:0d:61:ea:be:12:40: 3b:c7:6c:70:d1:27:3d:af:fb:f8:99:c8:fb:49:68:97:0a:cb: 7f:93:81:15:1c:4d:18:60:2f:74:9e:3d:48:a7:93:23:62:dd: 1f:4e:e1:af:00:32:1c:30:37:5a:8f:7e:98:95:a9:e8:27:d8: 15:f0:37:bf:74:b8:f6:a1:ed:10:9c:12:5b:3f:3b:df:c5:ba: 29:ec:79:29:fb:e1:a2:a3:54:45:70:54:f1:d8:cc:ed:d2:7d: b6:c6:44:8f:be:95:d3:1f:64:37:36:d0:71:49:f2:9d:64:93: fe:75:b3:40:6f:e7:00:31:63:32:e3:08:1f:6d:04:f5:f4:bd: f9:21:ee:0c:60:d7:22:ef:0c:dd:64:fe:5b:20:d2:46:10:6c: 8f:2b:b8:f7:78:9e:89:f5:1a:3e:4e:bc:68:9a:32:47:19:f8: c6:5b:49:8b:6c:a6:db:f6:ff:2d:cf:0c:d7:65:d4:a9:c2:28: 6d:2e:ff:d1:e9:27:77:14:2e:99:7f:b5:0b:b3:89:74:22:e8: 31:07:62:b9:58:35:b5:e1:ee:dc:c0:34:73:aa:b7:bf:6b:70: 8b:9e:3a:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNF1c/SrCfYHHB+PeKVbjXQZoviAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5 NTFENkVCOTAeFw0yNTExMDMwOTAyNDdaFw0yNTExMDQwOTU2NDdaMDMxMTAvBgNV BAMTKEMzMkFGRDk2MDJFNTk5QUZDOTBDRUVERERFRDM0QjYxOTZGNzRCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxf1nzdhwcBgN02zYil2G8+5Rc UX5CLxWDqtTv1iy+mICCZoRjtE+NbFDFjtLQ3BTqzkJTncLB6HKv4xwTqJyMuaz/ keJDA+pIUBwk3JsgDPVyv896Kl5234a87b2SSE+RQ6t6b8J6yG61/d8/gCBpG7R0 1yhJ2ECCOc76TvQ2HvD7aMytbp9SrtiLKPXHTfZrBjQSmjguGYKxrTodrHKC1kPL iCBRW6TxQ8NqIrXNVUJ/80bNjT+da5i6SrthJzR/rM+k2mk5P9ufNWEspiMtH0d7 K27iKp3aklhMeHIEEZm4vnwp3C/dDeWUkxa5V3QcHdAKOdhrIq6TKdhAAEZLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwyr9lgLlma/JDO7d3tNLYZb3S0AwHwYDVR0j BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84 NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGACH3uvxR2wBOr2C/reb9Xm0Dt43Yu3aF4NaHj3pDWHqvhJAO8dscNEnPa/7 +JnI+0lolwrLf5OBFRxNGGAvdJ49SKeTI2LdH07hrwAyHDA3Wo9+mJWp6CfYFfA3 v3S49qHtEJwSWz8738W6Kex5KfvhoqNURXBU8djM7dJ9tsZEj76V0x9kNzbQcUny nWST/nWzQG/nADFjMuMIH20E9fS9+SHuDGDXIu8M3WT+WyDSRhBsjyu493ieifUa Pk68aJoyRxn4xltJi2ym2/b/Lc8M12XUqcIobS7/0ekndxQumX+1C7OJdCLoMQdi uVg1teHu3MA0c6q3v2twi546Fw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:12:14 2025 by rpki-client