
$ rpki-client -vvvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier: mf0N3YxVoxS+vTfKl94QPLytptXoH/3XGIp5rABixyo=
Subject key identifier: 41:FD:D2:20:D0:69:B6:AB:42:0B:11:AC:B5:34:74:3F:6C:D5:14:95
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial: 34C03F2F4B76CE94FE0DB307BD967F317AEE6272
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number: 048B
Signing time: Sat 22 Aug 2026 23:29:00 +0000
Manifest this update: Sat 22 Aug 2026 23:24:00 +0000
Manifest next update: Mon 24 Aug 2026 02:51:00 +0000
Files and hashes: 1: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: J4hurxs3ry731dFTFoMgb7xwtvyrAEt2oytAaJZIIGU=)
2: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: E+Ma3InLA9r1gaEmUaTbdzlPYH5q+HVx3nCFL9qtnJY=)
3: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: YQc7XOewpoC6ivGu1g6av+UnizI6KsVbrb7MI1ZjoWQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 24 Aug 2026 02:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c0:3f:2f:4b:76:ce:94:fe:0d:b3:07:bd:96:7f:31:7a:ee:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Validity
Not Before: Aug 22 23:24:00 2026 GMT
Not After : Aug 24 02:51:00 2026 GMT
Subject: CN=41FDD220D069B6AB420B11ACB534743F6CD51495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:c3:9d:6c:c4:80:36:6d:de:f2:1a:0e:cc:
50:83:01:fd:0b:8c:f7:fc:5a:aa:5d:5c:0b:71:9d:
d0:a5:93:b2:fc:d6:46:21:8d:65:b8:2a:14:d8:8b:
6d:e3:0f:46:1c:c8:41:e2:3c:ae:f5:e6:06:35:4d:
6a:03:0e:ad:f9:de:04:4d:4a:b0:76:81:4e:8f:61:
25:bc:48:d9:d4:93:e5:e7:2d:d0:36:17:2e:b6:eb:
fe:b4:f7:a8:b3:bc:3b:58:8d:d4:ff:fe:b9:ae:fb:
ab:2c:ec:7f:0c:04:29:f1:49:d9:7b:a2:86:7b:47:
39:b1:ae:33:d3:4c:40:62:99:41:cb:be:a1:d5:40:
02:cd:f2:5f:39:2d:40:8b:5c:af:38:32:8d:38:6c:
4d:bd:f8:bb:c7:b8:ab:17:e1:70:f5:a1:a9:c4:c9:
02:b9:a5:d5:89:7e:51:0b:33:ea:39:8e:a7:45:87:
51:21:4f:19:b1:39:1a:81:78:ae:9f:80:6f:ad:ea:
5b:23:6c:ac:7b:62:a0:e1:07:cb:a2:b8:99:db:5c:
f8:39:53:28:cd:2f:6c:fc:66:e4:35:ae:7f:7b:64:
86:2c:9d:97:68:e1:ff:b7:46:e5:17:40:1f:3c:1e:
e8:20:4d:2e:ae:28:7d:08:33:62:60:83:54:8a:93:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:D2:20:D0:69:B6:AB:42:0B:11:AC:B5:34:74:3F:6C:D5:14:95
X509v3 Authority Key Identifier:
keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:da:a4:01:c6:af:7b:44:05:45:d4:44:13:35:f7:e4:3e:65:
72:f1:bc:cd:91:8b:ce:6c:d9:58:74:33:4e:a0:41:27:e7:6e:
c6:4c:ed:63:57:a3:8b:12:9f:3e:10:e1:74:e1:9e:f2:eb:41:
94:aa:37:4b:ad:38:bf:aa:72:a1:57:ad:7e:c9:29:05:8f:a5:
68:d6:c1:01:d9:ff:34:3b:c9:e8:16:49:bc:6e:13:ab:0a:47:
c8:a5:35:2b:18:36:28:c0:b3:f5:d2:38:75:ea:c4:76:cb:73:
7f:a1:85:9a:16:20:98:d3:96:0b:62:13:9d:4a:46:08:ce:a6:
63:8f:f4:f0:3c:33:d3:fe:22:1a:f0:d1:03:12:c5:9f:9f:1b:
1d:a4:41:d7:30:da:73:73:ea:f7:94:ae:41:96:8b:25:5f:c8:
c1:df:25:5b:23:7a:84:99:f9:27:2b:69:81:3d:08:5c:38:72:
d4:fb:a5:89:fb:dd:d1:ba:42:53:3b:ee:e0:a1:a1:48:8c:2e:
d4:39:ca:81:c7:fd:29:42:c8:a3:bf:b2:93:91:15:37:ec:ab:
8f:d4:88:a0:d4:25:1d:08:df:03:50:f0:40:c5:31:83:8e:04:
76:17:43:b7:02:77:e5:17:8f:cf:93:77:88:33:80:cb:5b:7a:
92:75:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:16:30 2026 by rpki-client