
$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json)
Hash identifier: ZjlpPk2AgcSQj1DtH5BFiOHd+eI6Y/+2za0eTE4/2Rs=
Subject key identifier: 2D:6C:38:52:56:30:12:0F:F9:C3:99:DE:68:26:44:CE:9B:E0:8D:7D
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial: 1F6ADF39EAAA252B3937A05761ECA958B3EA26EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
Manifest number: 0307
Signing time: Tue 04 Nov 2025 21:37:57 +0000
Manifest this update: Tue 04 Nov 2025 21:32:57 +0000
Manifest next update: Wed 05 Nov 2025 23:44:57 +0000
Files and hashes: 1: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=)
2: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: eob1EL5CaJK8nVL14MnZp5VTs42Wo49ASGw3BaeqZ6A=)
3: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 23:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6a:df:39:ea:aa:25:2b:39:37:a0:57:61:ec:a9:58:b3:ea:26:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Validity
Not Before: Nov 4 21:32:57 2025 GMT
Not After : Nov 5 23:44:57 2025 GMT
Subject: CN=2D6C38525630120FF9C399DE682644CE9BE08D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:a6:3c:b7:c4:f7:5a:b2:6d:93:91:4d:81:
30:87:13:b2:a6:1b:91:43:c5:b5:e9:bb:1f:1f:8b:
f2:74:86:9c:6e:88:9a:80:3c:cf:d8:af:3f:6a:72:
a6:50:07:aa:63:70:e7:ca:c0:a8:d9:b9:78:82:5f:
b7:de:38:26:5e:02:54:d6:69:88:48:d7:bb:f9:5a:
ad:6c:c0:07:dc:0b:1d:6d:ae:57:cb:c6:11:f6:5b:
1e:0b:7d:97:db:af:7d:30:a9:04:d1:90:09:4f:33:
01:29:20:61:86:dc:4e:d4:31:86:36:c6:96:9a:d2:
d3:f3:15:97:c4:e6:a7:b0:b0:4a:89:b2:f6:40:b2:
1e:de:45:4b:4a:b9:eb:17:4d:1a:cb:3e:1e:29:cb:
61:a3:f6:16:44:8a:31:c8:1a:7e:b2:07:7f:55:7f:
0b:56:08:a3:5b:36:9d:21:1a:f3:1b:70:df:c0:b0:
9f:85:16:ec:7c:a3:92:18:14:46:21:32:2f:db:9b:
12:ff:8c:25:0b:dd:ad:22:b5:d7:62:52:62:78:e8:
fb:31:cd:03:81:ed:86:d9:3d:1f:a3:56:d1:bd:e6:
31:1a:4d:56:b1:6d:0e:61:31:66:55:e0:81:6c:e7:
90:eb:5f:46:88:5c:c8:c7:c6:42:c0:a3:42:9b:40:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6C:38:52:56:30:12:0F:F9:C3:99:DE:68:26:44:CE:9B:E0:8D:7D
X509v3 Authority Key Identifier:
keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bb:65:b7:ec:dc:11:85:85:8d:55:8e:36:5e:e4:bc:af:30:
b9:c6:ee:c2:5b:95:dd:6f:49:a3:39:6b:af:26:5b:23:54:69:
fa:f5:a9:17:dc:c3:b0:ab:57:e4:69:c7:59:7b:ef:69:0e:21:
d8:06:f8:4a:83:38:31:3b:2f:24:0c:9f:be:7a:b7:a3:37:be:
5f:b5:8e:34:c8:80:df:ee:79:10:be:24:e0:46:99:34:d9:38:
37:4c:9e:d0:03:4b:5e:04:d5:bb:59:18:82:e6:84:50:68:05:
2e:4f:84:18:60:df:25:3e:64:cf:67:ec:47:58:88:34:55:c1:
7a:54:4f:e8:65:ee:c6:8f:d5:3f:03:dd:8b:6d:5e:3f:36:bd:
23:13:5c:21:0e:e4:67:6f:47:5d:37:75:85:fa:0d:fb:23:cb:
88:d6:f3:3b:36:22:7c:8d:63:c1:bc:7d:d3:84:92:b2:0b:e3:
69:a5:e1:d7:e4:26:91:0e:79:81:25:04:f8:cf:c6:19:7e:ee:
d3:e5:17:a4:29:b2:27:3b:6c:14:5e:0b:dd:cd:7d:bd:af:d5:
eb:4e:15:ae:15:43:57:15:12:cf:dc:0a:85:ac:c2:98:da:71:
ec:d9:f6:4f:5c:df:d0:b4:78:80:c3:56:f9:c5:3a:8a:31:dd:
55:23:21:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUH2rfOeqqJSs5N6BXYeypWLPqJuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5
NTFENkVCOTAeFw0yNTExMDQyMTMyNTdaFw0yNTExMDUyMzQ0NTdaMDMxMTAvBgNV
BAMTKDJENkMzODUyNTYzMDEyMEZGOUMzOTlERTY4MjY0NENFOUJFMDhEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbaY8t8T3WrJtk5FNgTCHE7Km
G5FDxbXpux8fi/J0hpxuiJqAPM/Yrz9qcqZQB6pjcOfKwKjZuXiCX7feOCZeAlTW
aYhI17v5Wq1swAfcCx1trlfLxhH2Wx4LfZfbr30wqQTRkAlPMwEpIGGG3E7UMYY2
xpaa0tPzFZfE5qewsEqJsvZAsh7eRUtKuesXTRrLPh4py2Gj9hZEijHIGn6yB39V
fwtWCKNbNp0hGvMbcN/AsJ+FFux8o5IYFEYhMi/bmxL/jCUL3a0itddiUmJ46Psx
zQOB7YbZPR+jVtG95jEaTVaxbQ5hMWZV4IFs55DrX0aIXMjHxkLAo0KbQAe3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQULWw4UlYwEg/5w5neaCZEzpvgjX0wHwYDVR0j
BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV
eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG
OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84
NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlrtlt+zcEYWFjVWONl7kvK8wucbuwluV3W9JozlrryZbI1Rp+vWpF9zDsKtX
5GnHWXvvaQ4h2Ab4SoM4MTsvJAyfvnq3oze+X7WONMiA3+55EL4k4EaZNNk4N0ye
0ANLXgTVu1kYguaEUGgFLk+EGGDfJT5kz2fsR1iINFXBelRP6GXuxo/VPwPdi21e
Pza9IxNcIQ7kZ29HXTd1hfoN+yPLiNbzOzYifI1jwbx904SSsgvjaaXh1+QmkQ55
gSUE+M/GGX7u0+UXpCmyJztsFF4L3c19va/V604VrhVDVxUSz9wKhazCmNpx7Nn2
T1zf0LR4gMNW+cU6ijHdVSMhlQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:31:32 2025 by rpki-client