$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: qHjPl4TDO3j3P/fgua6+hXADdUIR6W603ebo4I+35MA= Subject key identifier: 05:AB:DF:46:A5:B4:9B:BF:D8:BB:6D:15:16:10:6E:14:A9:F2:B5:94 Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 62F070AB9E30575FC6409542B378D915AC28ED09 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 0235 Signing time: Thu 05 Jun 2025 11:48:07 +0000 Manifest this update: Thu 05 Jun 2025 11:43:07 +0000 Manifest next update: Fri 06 Jun 2025 14:41:07 +0000 Files and hashes: 1: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: QtcQxemamGk3K+qLTxIGN9vbwim4oJzCuwLwe8wNaz4=) 2: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) 3: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) 4: 3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (hash: b0pL1VTBBizjwsHR6X+XXt3qIwIdd6kUaamT8TMSnKY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Jun 2025 14:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f0:70:ab:9e:30:57:5f:c6:40:95:42:b3:78:d9:15:ac:28:ed:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Jun 5 11:43:07 2025 GMT Not After : Jun 6 14:41:07 2025 GMT Subject: CN=05ABDF46A5B49BBFD8BB6D1516106E14A9F2B594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:21:cd:65:e9:05:3e:de:8c:01:90:7d:29: 48:d3:ac:62:ee:e1:31:99:5e:a6:75:9c:51:79:0f: 63:85:bb:c5:19:f3:f3:08:2d:8f:90:7f:21:62:f2: da:7b:4d:6e:d2:ac:7c:13:ed:06:2e:c3:68:1f:4b: 2e:b6:e3:9e:a4:b7:06:32:cd:a1:ba:cc:0d:3b:e3: 83:7b:20:de:a9:a0:95:cd:a5:64:47:06:54:bf:b3: 58:1f:bd:8a:83:31:91:b9:97:f5:a5:4f:73:b9:21: 5d:16:d9:b3:5c:52:07:9e:e7:e7:54:4d:d3:3f:d9: 74:3f:14:42:6a:1f:0e:0f:09:48:77:3c:c7:2e:5f: cd:66:72:89:d4:96:86:20:88:2d:36:7f:16:f0:3e: 3e:42:b5:8b:1b:a9:ad:96:c9:4d:8f:f0:82:00:f9: a2:90:bd:c4:cb:2c:c7:d7:d4:e0:d1:8b:d4:67:9f: d3:0c:70:77:99:ca:e8:be:09:10:48:af:db:d7:f6: 4a:e5:d2:fa:b7:bd:bb:f0:47:ff:65:93:02:1a:04: e1:9e:38:e4:f6:0e:63:a4:6d:9f:1f:72:02:29:f0: 26:98:02:a6:90:80:af:e7:b2:f5:16:1e:b2:c5:49: a7:99:d8:47:77:6b:87:bb:67:8f:13:9d:ae:2c:d4: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AB:DF:46:A5:B4:9B:BF:D8:BB:6D:15:16:10:6E:14:A9:F2:B5:94 X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1c:02:69:7e:14:38:48:70:94:2f:51:4e:bb:6f:52:d1:10: 60:ce:21:12:27:9a:fb:8a:36:4f:df:27:f7:69:1c:88:89:80: 44:9f:0d:fa:a0:9c:c7:4e:01:56:56:19:30:8d:71:e7:81:30: cc:9f:b7:24:1b:da:c8:41:f0:b4:0a:ed:76:d1:cb:5e:44:f9: 2d:6a:ae:80:73:21:12:7e:75:f9:af:c6:10:22:d4:27:77:a3: ab:d4:30:62:7c:39:cc:5b:47:80:8e:98:6b:b5:af:d0:d2:65: a4:06:82:04:8f:73:a0:f0:a9:7a:98:11:04:1d:5d:4a:5a:06: 14:37:da:a5:9b:44:99:27:1f:47:48:ba:48:98:eb:67:b8:ac: eb:b7:25:de:18:06:b7:de:16:e1:b6:81:6c:a1:ab:b6:a4:8d: aa:de:71:51:45:e8:1b:be:34:eb:13:e1:7f:d1:d0:8a:40:1d: 6c:02:08:24:ec:5c:6f:76:5c:58:41:4c:ce:21:31:fd:b8:a6: 72:fa:57:45:be:8c:54:52:5b:69:f6:e5:50:8f:a5:11:46:a2: 65:b2:02:bf:42:92:eb:1f:73:3a:72:be:8c:5a:2f:09:b1:90: 6b:23:5d:ab:70:dc:3e:75:a7:d7:59:cd:0d:11:ff:08:be:e4: 03:d5:5e:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYvBwq54wV1/GQJVCs3jZFawo7QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTA2MDUxMTQzMDdaFw0yNTA2MDYxNDQxMDdaMDMxMTAvBgNV BAMTKDA1QUJERjQ2QTVCNDlCQkZEOEJCNkQxNTE2MTA2RTE0QTlGMkI1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7iHNZekFPt6MAZB9KUjTrGLu 4TGZXqZ1nFF5D2OFu8UZ8/MILY+QfyFi8tp7TW7SrHwT7QYuw2gfSy62456ktwYy zaG6zA0744N7IN6poJXNpWRHBlS/s1gfvYqDMZG5l/WlT3O5IV0W2bNcUgee5+dU TdM/2XQ/FEJqHw4PCUh3PMcuX81mconUloYgiC02fxbwPj5CtYsbqa2WyU2P8IIA +aKQvcTLLMfX1ODRi9Rnn9MMcHeZyui+CRBIr9vX9krl0vq3vbvwR/9lkwIaBOGe OOT2DmOkbZ8fcgIp8CaYAqaQgK/nsvUWHrLFSaeZ2Ed3a4e7Z48Tna4s1EAfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBavfRqW0m7/Yu20VFhBuFKnytZQwHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgRwCaX4UOEhwlC9RTrtvUtEQYM4hEiea+4o2T98n92kciImARJ8N+qCcx04B VlYZMI1x54EwzJ+3JBvayEHwtArtdtHLXkT5LWqugHMhEn51+a/GECLUJ3ejq9Qw Ynw5zFtHgI6Ya7Wv0NJlpAaCBI9zoPCpepgRBB1dSloGFDfapZtEmScfR0i6SJjr Z7is67cl3hgGt94W4baBbKGrtqSNqt5xUUXoG7406xPhf9HQikAdbAIIJOxcb3Zc WEFMziEx/bimcvpXRb6MVFJbafblUI+lEUaiZbICv0KS6x9zOnK+jFovCbGQayNd q3DcPnWn11nNDRH/CL7kA9VenQ== -----END CERTIFICATE-----Generated at Fri Jun 6 05:30:29 2025 by rpki-client