
$ rpki-client -vvvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier: NjvS/3H3cxjfkGrn82M4JGH8YQewginKXJeAoK5KCZE=
Subject key identifier: 11:D6:2F:DD:B5:E7:B5:19:89:62:AA:3B:6E:8E:64:4A:E9:E5:07:0F
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial: 62A464DAC323144C652B060B24114D128A4F3FA1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number: 04EA
Signing time: Mon 02 Nov 2026 17:52:04 +0000
Manifest this update: Mon 02 Nov 2026 17:47:04 +0000
Manifest next update: Tue 03 Nov 2026 19:18:04 +0000
Files and hashes: 1: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: J4hurxs3ry731dFTFoMgb7xwtvyrAEt2oytAaJZIIGU=)
2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: E+Ma3InLA9r1gaEmUaTbdzlPYH5q+HVx3nCFL9qtnJY=)
3: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: mQmOv/tZ/T1uot9aleZA+X32255/m8kYLrflJn1BrzU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 03 Nov 2026 19:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a4:64:da:c3:23:14:4c:65:2b:06:0b:24:11:4d:12:8a:4f:3f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Validity
Not Before: Nov 2 17:47:04 2026 GMT
Not After : Nov 3 19:18:04 2026 GMT
Subject: CN=11D62FDDB5E7B5198962AA3B6E8E644AE9E5070F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:34:31:bc:48:32:b3:a7:3a:29:0e:9f:13:
78:94:49:db:d7:71:9f:01:bf:bf:0c:a9:0b:a6:89:
3c:41:51:e2:7d:a6:9a:cd:40:40:55:8c:c1:63:b2:
5c:47:16:0b:30:35:1c:22:9c:32:67:6c:d9:78:a2:
3d:23:7b:5c:4e:48:df:08:d9:71:17:4d:7f:bd:15:
76:1a:bd:41:db:6f:70:40:ef:b4:c5:1d:3f:7c:7b:
26:0d:92:e5:04:0b:1e:ac:67:28:d5:40:5f:a1:ca:
79:85:1e:f6:09:c3:bd:5f:39:7f:22:00:fc:37:ba:
37:ce:8c:33:14:e1:17:66:2e:06:c8:df:f3:ee:54:
c8:89:aa:17:04:70:38:a5:b2:05:d3:7c:56:af:a1:
f3:a0:08:c9:68:34:1a:95:0e:4d:9f:53:79:83:df:
8c:72:4c:dd:c5:fb:14:af:b8:f7:35:80:9a:b8:96:
a8:e4:b8:f8:72:a6:4f:24:5a:9a:e9:8e:d4:d3:d1:
b3:bd:95:68:98:47:70:0d:ca:1a:09:cf:a2:e8:4d:
44:fb:9d:5d:91:20:8e:d7:2d:2c:78:09:26:cc:aa:
79:c5:bd:be:bb:77:ba:a4:21:0a:23:e5:fd:f4:ae:
98:c8:05:50:20:34:bb:2a:0f:dd:32:bd:8e:31:76:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:2F:DD:B5:E7:B5:19:89:62:AA:3B:6E:8E:64:4A:E9:E5:07:0F
X509v3 Authority Key Identifier:
keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:49:8b:76:ef:a5:82:64:45:22:93:86:20:05:a0:bd:bd:
a2:e5:45:ee:0d:90:46:aa:6a:e9:6b:8a:c6:93:4c:7d:11:4b:
92:3f:2d:80:83:87:84:91:8c:8d:2c:84:c7:67:4f:6d:a6:50:
a0:5f:ca:20:0c:19:d3:b1:42:51:61:f6:2e:f0:11:cd:fe:a9:
3d:52:53:ad:de:7a:c4:dd:64:b1:d7:bd:4b:66:be:7e:5c:fa:
85:f4:da:59:07:10:b9:8c:94:65:e9:d3:e3:38:16:41:87:4d:
8d:77:c2:f4:b4:fa:78:33:a5:9f:a4:04:39:3c:5d:4b:f6:43:
91:b7:d1:01:36:9d:4c:9b:77:9d:a2:49:87:3a:1d:6a:a7:09:
19:4a:f6:76:d0:82:5b:d2:c3:0e:43:67:95:93:fb:da:76:28:
25:60:06:e4:57:18:03:bb:d0:b7:fd:4c:f8:e5:a8:c9:5e:cc:
3d:d5:55:16:5d:b6:7a:4f:c3:03:fc:6e:8d:50:5c:ea:61:cb:
12:35:60:87:c5:51:af:27:49:b5:df:ce:02:7c:68:aa:20:5d:
c7:f3:d3:b7:e1:9f:31:2e:f7:81:d0:d1:52:5d:f6:de:86:bb:
74:a1:f2:28:5a:e8:ba:40:ee:c1:20:94:cd:6a:77:eb:71:a4:
1c:f5:e7:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYqRk2sMjFExlKwYLJBFNEopPP6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5
NTFENkVCOTAeFw0yNjExMDIxNzQ3MDRaFw0yNjExMDMxOTE4MDRaMDMxMTAvBgNV
BAMTKDExRDYyRkREQjVFN0I1MTk4OTYyQUEzQjZFOEU2NDRBRTlFNTA3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdTQxvEgys6c6KQ6fE3iUSdvX
cZ8Bv78MqQumiTxBUeJ9pprNQEBVjMFjslxHFgswNRwinDJnbNl4oj0je1xOSN8I
2XEXTX+9FXYavUHbb3BA77TFHT98eyYNkuUECx6sZyjVQF+hynmFHvYJw71fOX8i
APw3ujfOjDMU4RdmLgbI3/PuVMiJqhcEcDilsgXTfFavofOgCMloNBqVDk2fU3mD
34xyTN3F+xSvuPc1gJq4lqjkuPhypk8kWprpjtTT0bO9lWiYR3ANyhoJz6LoTUT7
nV2RII7XLSx4CSbMqnnFvb67d7qkIQoj5f30rpjIBVAgNLsqD90yvY4xdkZdAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEdYv3bXntRmJYqo7bo5kSunlBw8wHwYDVR0j
BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV
eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG
OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84
NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAER9Ji3bvpYJkRSKThiAFoL29ouVF7g2QRqpq6WuKxpNMfRFLkj8tgIOHhJGM
jSyEx2dPbaZQoF/KIAwZ07FCUWH2LvARzf6pPVJTrd56xN1ksde9S2a+flz6hfTa
WQcQuYyUZenT4zgWQYdNjXfC9LT6eDOln6QEOTxdS/ZDkbfRATadTJt3naJJhzod
aqcJGUr2dtCCW9LDDkNnlZP72nYoJWAG5FcYA7vQt/1M+OWoyV7MPdVVFl22ek/D
A/xujVBc6mHLEjVgh8VRrydJtd/OAnxoqiBdx/PTt+GfMS73gdDRUl323oa7dKHy
KFroukDuwSCUzWp363GkHPXnoA==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:33:15 2026 by rpki-client