
$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json)
Hash identifier: 0kuRtdv7LWinQ+lOe6Y1xgTFhZlP9RT67Vb1IwzL3CU=
Subject key identifier: 16:9F:4C:53:44:CA:EE:EA:49:41:6E:9B:A9:B2:08:2E:0E:F1:29:90
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial: 401E2B0F455F6BA14A58C761132E63ABF45877D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
Manifest number: 02FC
Signing time: Sun 02 Nov 2025 21:36:32 +0000
Manifest this update: Sun 02 Nov 2025 21:31:32 +0000
Manifest next update: Mon 03 Nov 2025 22:03:32 +0000
Files and hashes: 1: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=)
2: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=)
3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: vLUvXXwIKCireVy2C2AnFvvjQeyLfHqoHhaz3ez0gKQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 03 Nov 2025 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1e:2b:0f:45:5f:6b:a1:4a:58:c7:61:13:2e:63:ab:f4:58:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Validity
Not Before: Nov 2 21:31:32 2025 GMT
Not After : Nov 3 22:03:32 2025 GMT
Subject: CN=169F4C5344CAEEEA49416E9BA9B2082E0EF12990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:60:88:28:e9:92:fe:96:41:88:9c:b9:87:
9d:2b:ae:e0:9c:e9:15:7f:e2:e4:bc:ea:49:16:4f:
7e:ce:35:2d:46:bb:e0:25:c1:86:06:ac:53:7c:cb:
98:e0:24:fc:2e:a1:32:6c:99:a1:27:d0:a3:5a:5e:
a6:31:21:8b:4a:20:28:42:f9:52:1a:ca:e7:7a:b4:
de:ff:53:26:aa:e2:e6:c6:b4:29:d4:cb:5b:41:17:
2c:d3:ff:4c:7d:87:b9:5e:23:d1:3f:a0:85:af:3c:
74:c3:a6:f0:3e:d9:3e:49:f4:70:45:f4:98:f5:db:
2d:28:36:3a:3f:5d:b5:a2:6e:95:4a:ee:f7:39:41:
db:4d:15:46:e6:b2:5e:c8:65:d8:b2:9d:36:eb:ad:
2d:8e:a7:24:78:00:1b:b7:b5:1b:2e:0a:e1:59:ac:
0e:69:87:8f:7d:c3:3c:47:c1:cc:d5:39:91:9f:8c:
9e:25:28:06:4a:ad:65:ca:ae:de:1b:a1:5d:27:c1:
56:47:4d:3f:e8:3e:7e:4f:92:3a:59:3f:02:46:e8:
2f:a5:f7:84:8b:07:e4:66:01:1f:83:12:17:db:20:
83:b1:6f:e5:d1:17:50:6a:94:ee:f6:21:ee:25:41:
63:f3:1c:00:c5:61:4b:9c:e3:43:14:72:c7:74:54:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:4C:53:44:CA:EE:EA:49:41:6E:9B:A9:B2:08:2E:0E:F1:29:90
X509v3 Authority Key Identifier:
keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:2c:87:b5:4d:2c:48:af:68:23:9a:a2:66:27:fe:35:60:
6e:1f:28:77:cf:be:99:64:a5:4d:4e:ee:21:e8:40:e9:f7:39:
0c:58:73:86:89:6a:70:76:31:7f:2a:00:74:d6:fe:94:17:6e:
40:89:1a:78:07:07:e5:7f:9c:74:03:fc:55:e6:9c:ec:a9:01:
35:d7:74:e6:49:4a:e4:c3:b0:99:32:16:61:e0:71:bd:56:8a:
a9:38:8e:93:bf:61:50:4c:80:27:93:f6:64:46:5c:df:a4:79:
d5:b6:3b:32:1b:b3:e6:a6:a7:01:92:78:65:56:ab:d0:66:d9:
9f:48:6e:ee:84:24:39:31:fb:b9:57:22:7a:cc:36:bf:58:8c:
f1:1e:0d:61:4e:2d:27:47:86:e4:8a:e4:00:84:a1:c6:ef:94:
fe:bd:19:17:3c:2f:91:bf:bb:87:3e:09:c3:a9:d6:21:1a:f1:
83:83:cc:84:7d:52:85:bd:e9:b3:b2:c5:a6:6c:70:4f:d3:73:
54:a3:b1:2a:64:ea:fd:75:56:9d:a1:94:c2:3c:32:35:b2:6e:
54:f3:c1:cb:f6:2e:55:5e:37:a7:6b:27:94:6e:66:ac:86:3c:
07:c9:3f:d8:46:2c:f5:f4:6b:f4:fa:73:89:17:70:75:66:fe:
b4:cc:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 12:21:22 2025 by rpki-client