$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft File: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json) Hash identifier: G4jBPETv3AxpJdL8muMJjFYd5fAQvlCOr17XOscBuxs= Subject key identifier: 5D:C8:B9:74:C1:5F:AC:0E:62:06:76:A7:A7:49:0C:AD:87:52:06:09 Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 Certificate issuer: /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Certificate serial: 12FC756187489B71E96943A2BC9024453854F133 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft Manifest number: 03F3 Signing time: Sun 24 May 2026 01:27:47 +0000 Manifest this update: Sun 24 May 2026 01:22:47 +0000 Manifest next update: Mon 25 May 2026 04:02:47 +0000 Files and hashes: 1: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: xtY9QWt7T6w5HnwQncN+dv6Ov2L/n+R17LFJvJHr9ho=) 2: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: /RLbDiimnTvXpqqoZpLt3Bu/yneZPqkm5sWwcJIaM1c=) 3: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: FE+/LhWzgs6/8u7xni4X7XMQNGvzfOnmYGtcz3qODSU=) 4: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: lLNB2cBPThclys7QPsArqC9me72DMbdsI4Zz8WzSw64=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 04:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fc:75:61:87:48:9b:71:e9:69:43:a2:bc:90:24:45:38:54:f1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Validity Not Before: May 24 01:22:47 2026 GMT Not After : May 25 04:02:47 2026 GMT Subject: CN=5DC8B974C15FAC0E620676A7A7490CAD87520609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:ca:c7:5b:69:dd:5f:a8:b3:b9:0a:57:32: 58:e4:fc:53:6c:55:94:ac:5c:48:bf:6c:f4:e5:37: 81:af:84:19:0f:5e:11:5c:95:40:be:35:52:15:90: 64:aa:d7:fa:81:f3:2e:33:93:d3:c7:9c:59:b9:04: bb:45:0d:e3:a9:09:45:f7:75:84:cf:4f:d4:f6:9e: fe:14:5e:66:55:c9:dc:fb:dd:0c:08:9d:8e:0b:54: c6:ee:ad:87:97:85:06:ad:f7:8c:f9:5a:80:b5:7c: 6b:52:2d:3e:7d:ce:d7:f2:0c:79:cb:e3:63:b9:5d: ca:d2:8f:ee:bf:99:e9:41:80:a4:4f:9a:0d:18:d0: 05:a8:83:63:c6:57:e4:73:4a:e8:42:1d:ca:1d:15: 62:56:30:4a:9b:6b:2a:e0:1a:39:e5:af:f4:3e:bd: d9:1c:93:08:55:e7:44:81:f7:97:86:89:40:aa:4b: 9f:01:47:bf:51:24:28:b0:39:37:2b:54:75:e0:4c: 0a:0b:c7:66:a7:0c:e4:60:12:0b:01:db:cc:6a:13: cf:3f:1e:6c:4f:fb:9a:a2:5d:47:f4:99:5a:18:fa: 91:8d:70:3a:46:a7:af:78:77:af:ce:fe:de:94:29: 8a:bf:8c:1e:c4:ba:49:d7:ba:aa:0b:b2:c7:a3:95: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C8:B9:74:C1:5F:AC:0E:62:06:76:A7:A7:49:0C:AD:87:52:06:09 X509v3 Authority Key Identifier: keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2d:6f:78:7a:eb:d2:e3:5e:73:35:1f:99:f3:9c:2b:a9:ac: 7d:9b:b2:ad:c8:9c:1b:15:49:5a:38:a0:6e:88:85:e6:71:ec: 7b:5c:c1:00:53:b3:6e:16:dd:4c:a9:65:e5:16:b0:d3:a2:7a: c3:84:09:44:c5:c0:41:44:8e:11:26:e0:44:d7:84:dc:50:1a: 61:a4:29:b4:cb:3a:b8:14:82:70:af:56:06:cf:1d:ff:cc:33: 76:08:db:8f:0b:06:57:b2:e6:03:fd:31:64:69:24:2f:af:17: 80:ab:f9:1c:54:69:79:1a:58:ec:ca:a9:bb:e4:47:fc:aa:a1: 47:14:31:06:17:e3:a8:03:d9:6a:fd:53:a3:7f:60:64:3c:88: 78:dc:b7:f7:eb:04:e8:80:74:ae:56:e6:48:6b:e6:d7:b1:38: 5d:ff:7f:e2:81:50:dd:28:3e:53:86:01:56:ab:b7:08:cf:1b: e6:18:48:03:b8:06:0e:bd:8b:7c:59:4f:ff:55:bc:22:c9:5f: 82:e5:41:b2:e7:df:8c:bf:ee:e3:66:33:e8:a8:ed:e5:17:27: db:1f:d8:34:19:6e:73:d4:6d:12:af:6c:49:60:09:8e:f4:a0: 18:c8:4a:9b:a8:cb:59:3d:a9:5d:a1:f5:93:c1:13:44:63:04: d5:6e:0f:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEvx1YYdIm3HpaUOivJAkRThU8TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4 MzYzN0FEMDAeFw0yNjA1MjQwMTIyNDdaFw0yNjA1MjUwNDAyNDdaMDMxMTAvBgNV BAMTKDVEQzhCOTc0QzE1RkFDMEU2MjA2NzZBN0E3NDkwQ0FEODc1MjA2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnMrHW2ndX6izuQpXMljk/FNs VZSsXEi/bPTlN4GvhBkPXhFclUC+NVIVkGSq1/qB8y4zk9PHnFm5BLtFDeOpCUX3 dYTPT9T2nv4UXmZVydz73QwInY4LVMburYeXhQat94z5WoC1fGtSLT59ztfyDHnL 42O5XcrSj+6/melBgKRPmg0Y0AWog2PGV+RzSuhCHcodFWJWMEqbayrgGjnlr/Q+ vdkckwhV50SB95eGiUCqS58BR79RJCiwOTcrVHXgTAoLx2anDORgEgsB28xqE88/ HmxP+5qiXUf0mVoY+pGNcDpGp694d6/O/t6UKYq/jB7EuknXuqoLssejle5hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXci5dMFfrA5iBnanp0kMrYdSBgkwHwYDVR0j BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5WNlAvMC84 Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASi1veHrr0uNeczUfmfOcK6msfZuyrcicGxVJWjigboiF5nHse1zBAFOzbhbd TKll5Raw06J6w4QJRMXAQUSOESbgRNeE3FAaYaQptMs6uBSCcK9WBs8d/8wzdgjb jwsGV7LmA/0xZGkkL68XgKv5HFRpeRpY7Mqpu+RH/KqhRxQxBhfjqAPZav1To39g ZDyIeNy39+sE6IB0rlbmSGvm17E4Xf9/4oFQ3Sg+U4YBVqu3CM8b5hhIA7gGDr2L fFlP/1W8IslfguVBsuffjL/u42Yz6Kjt5Rcn2x/YNBluc9RtEq9sSWAJjvSgGMhK m6jLWT2pXaH1k8ETRGME1W4PRw== -----END CERTIFICATE-----Generated at Sun May 24 13:32:12 2026 by rpki-client