$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json) Hash identifier: CC9+8yy8H91Mz8Wl40XKUlRgOHl1OYJc8RmK+JVDNA4= Subject key identifier: CD:64:37:EE:DB:D2:38:9A:A1:EB:3F:3E:A3:6E:64:10:C5:C5:7B:9E Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Certificate serial: 2F8B94466B582510FD54AE6D07F8158177404398 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft Manifest number: 02C7 Signing time: Wed 17 Sep 2025 20:19:00 +0000 Manifest this update: Wed 17 Sep 2025 20:14:00 +0000 Manifest next update: Thu 18 Sep 2025 21:05:00 +0000 Files and hashes: 1: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=) 2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=) 3: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: yqU+CkBSUFdTTFIBm2EyiQiXud7JBcPMAuR2qpFYeJc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 21:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8b:94:46:6b:58:25:10:fd:54:ae:6d:07:f8:15:81:77:40:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Validity Not Before: Sep 17 20:14:00 2025 GMT Not After : Sep 18 21:05:00 2025 GMT Subject: CN=CD6437EEDBD2389AA1EB3F3EA36E6410C5C57B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:63:27:78:89:6f:5f:bc:99:04:8a:e5:d2: f3:91:19:3b:d5:03:a4:6c:25:05:b0:5e:c8:b8:e4: d3:a4:c3:d0:d7:0d:27:50:76:d3:db:58:48:00:7a: cf:d8:92:4d:9e:e7:55:df:04:fe:c1:bc:21:ca:0c: 8b:dc:e8:35:39:5c:13:7e:5e:15:60:65:8e:dd:66: 91:b2:d8:b4:51:12:ae:03:6a:76:b6:66:5e:6c:43: 23:71:64:97:6c:48:83:43:27:29:2b:9b:db:b0:51: 0a:e2:d3:42:c4:4f:97:95:e0:61:65:5c:7b:55:ba: 6d:eb:ee:e2:01:0c:9f:b2:17:ea:1d:50:01:5f:e8: 7c:ab:12:ea:9e:d8:15:c6:f6:04:48:09:f3:0c:6d: 57:fe:3c:fe:15:ee:ed:09:83:c1:fe:db:a5:c1:67: 72:ad:be:28:57:0c:ff:57:20:69:88:0f:f3:53:7a: 3c:65:d1:01:b4:fa:09:0e:6b:64:a7:c8:ae:8c:0a: 9b:e5:21:09:9c:7c:0c:bc:e1:d6:03:a1:92:8c:63: 25:90:ab:58:24:c0:44:82:c0:5c:de:cb:af:76:f1: ab:28:77:f8:88:21:6c:9f:39:df:c5:24:31:94:61: 43:e9:98:be:b6:3f:c3:be:bd:1b:cb:da:5e:c0:3d: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:64:37:EE:DB:D2:38:9A:A1:EB:3F:3E:A3:6E:64:10:C5:C5:7B:9E X509v3 Authority Key Identifier: keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:37:4b:86:d2:a4:56:7d:e2:38:45:80:f5:72:e6:ae:d2:06: cd:5d:f4:dc:48:f4:32:30:b5:b1:03:60:7e:e6:58:d3:d2:2d: 0f:b4:1e:12:8f:27:e8:c6:ee:b2:06:1f:8f:93:e0:12:f6:27: c7:eb:c3:61:06:e4:50:24:97:5b:51:6f:3f:65:fa:7c:df:41: 65:09:66:cc:cb:b9:d7:df:24:7c:64:ee:de:c6:f3:c9:13:da: 69:1a:88:ff:4b:d5:03:c0:90:3b:fa:00:af:8c:e5:11:06:a0: 4b:ed:b4:86:8e:2e:a1:34:c9:a2:3d:d6:78:69:73:59:05:1c: 15:c9:37:b4:47:66:cd:31:26:bb:b6:f3:33:bf:63:8d:d3:a5: 0a:aa:8e:f5:7b:99:9d:79:bd:34:3b:fd:9d:9b:5e:f4:74:e6: 39:f0:11:f5:a7:d2:e0:de:d0:3f:36:b9:65:02:7a:51:58:a8: 22:c0:65:89:85:cf:26:7f:c7:65:2e:af:ee:be:26:49:72:be: b4:1b:b9:81:27:28:26:65:50:e2:6f:dc:a5:e2:91:e3:ed:bc: f7:8a:e3:68:b0:d3:b6:47:de:ca:67:51:82:6b:8c:fe:63:0b: c4:34:43:7d:b1:a8:0c:6d:74:0b:62:d5:11:3d:78:b8:7e:ed: 42:a0:35:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL4uURmtYJRD9VK5tB/gVgXdAQ5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5 NTFENkVCOTAeFw0yNTA5MTcyMDE0MDBaFw0yNTA5MTgyMTA1MDBaMDMxMTAvBgNV BAMTKENENjQzN0VFREJEMjM4OUFBMUVCM0YzRUEzNkU2NDEwQzVDNTdCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zmMneIlvX7yZBIrl0vORGTvV A6RsJQWwXsi45NOkw9DXDSdQdtPbWEgAes/Ykk2e51XfBP7BvCHKDIvc6DU5XBN+ XhVgZY7dZpGy2LRREq4Dana2Zl5sQyNxZJdsSINDJykrm9uwUQri00LET5eV4GFl XHtVum3r7uIBDJ+yF+odUAFf6HyrEuqe2BXG9gRICfMMbVf+PP4V7u0Jg8H+26XB Z3KtvihXDP9XIGmID/NTejxl0QG0+gkOa2SnyK6MCpvlIQmcfAy84dYDoZKMYyWQ q1gkwESCwFzey6928asod/iIIWyfOd/FJDGUYUPpmL62P8O+vRvL2l7APeZJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzWQ37tvSOJqh6z8+o25kEMXFe54wHwYDVR0j BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84 NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASzdLhtKkVn3iOEWA9XLmrtIGzV303Ej0MjC1sQNgfuZY09ItD7QeEo8n6Mbu sgYfj5PgEvYnx+vDYQbkUCSXW1FvP2X6fN9BZQlmzMu5198kfGTu3sbzyRPaaRqI /0vVA8CQO/oAr4zlEQagS+20ho4uoTTJoj3WeGlzWQUcFck3tEdmzTEmu7bzM79j jdOlCqqO9XuZnXm9NDv9nZte9HTmOfAR9afS4N7QPza5ZQJ6UVioIsBliYXPJn/H ZS6v7r4mSXK+tBu5gScoJmVQ4m/cpeKR4+2894rjaLDTtkfeymdRgmuM/mMLxDRD fbGoDG10C2LVET14uH7tQqA14g== -----END CERTIFICATE-----Generated at Thu Sep 18 06:07:26 2025 by rpki-client