$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: eg8o3OQfwgqCjsBAv31C7pKCZ1RZfZO2nQ9TuY1ZrsA= Subject key identifier: B7:E3:A6:73:24:A4:38:F1:5F:96:C9:0D:FF:EF:DE:94:DE:A2:29:57 Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 139C881D6FC12AD92333BC21A39D366B94AA73D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 0245 Signing time: Tue 17 Jun 2025 13:13:48 +0000 Manifest this update: Tue 17 Jun 2025 13:08:48 +0000 Manifest next update: Wed 18 Jun 2025 15:50:48 +0000 Files and hashes: 1: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) 2: 3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (hash: b0pL1VTBBizjwsHR6X+XXt3qIwIdd6kUaamT8TMSnKY=) 3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: RtSl2VHVH3yCNrO7mq1upKuQ+QYobiPXVJUpRKBdCdA=) 4: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 15:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9c:88:1d:6f:c1:2a:d9:23:33:bc:21:a3:9d:36:6b:94:aa:73:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Jun 17 13:08:48 2025 GMT Not After : Jun 18 15:50:48 2025 GMT Subject: CN=B7E3A67324A438F15F96C90DFFEFDE94DEA22957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:fb:07:20:4c:71:e6:97:35:03:c6:a5:03: b9:36:52:09:20:ca:22:51:9a:61:26:e3:57:b5:f9: ea:25:d9:99:3a:85:20:dc:80:3d:ae:85:38:3f:64: 66:7a:5d:c4:fe:52:b5:90:e1:41:cb:e0:45:7e:d2: a1:52:60:16:45:f5:71:fe:7f:75:e4:93:ca:67:38: 51:1d:23:b1:d9:42:62:0a:3f:00:05:c1:1f:19:4f: af:85:fe:5c:9a:0f:82:e9:74:c8:f8:52:7a:72:54: 11:b4:a4:62:cd:d2:6e:3a:73:2d:5b:1c:b5:42:99: 74:33:a6:65:b2:f3:02:39:75:a4:f6:bb:8f:8a:5e: ec:97:c5:ad:97:bf:60:a4:5c:4b:7b:df:19:e3:8c: 35:fb:5c:79:92:46:51:16:dc:95:a1:4b:17:74:10: 42:9f:5b:25:2c:9d:0b:92:47:94:5d:e8:0d:e5:b1: b3:04:5a:e5:ee:18:a1:13:7b:61:c0:19:3e:34:fa: 0a:27:04:28:b9:e1:e5:42:fe:9b:c1:47:ad:6b:0d: 94:88:e8:be:1d:a7:dd:f4:b2:64:c6:c3:e0:44:0c: 83:51:6f:f1:bc:73:c8:92:cb:89:42:92:e2:b5:db: e9:ed:fc:54:bb:70:91:01:f8:09:39:c6:02:a4:e0: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E3:A6:73:24:A4:38:F1:5F:96:C9:0D:FF:EF:DE:94:DE:A2:29:57 X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d2:53:55:de:6c:38:94:e3:63:e7:7d:a7:0b:51:b7:25:e1: 78:b0:fe:6c:16:be:35:61:d1:0f:2e:07:f2:be:d8:bb:31:ec: 84:8e:a8:5e:11:45:0d:c5:75:5b:ac:ae:ab:c2:ca:87:3f:76: 69:3e:b6:7a:f4:fe:6e:74:c6:f1:16:72:38:22:75:02:e5:a6: cd:1a:a7:ea:b5:1d:9b:64:1b:38:5e:c6:15:34:8c:0b:dd:ce: 89:41:4a:f1:e4:f5:2b:01:1d:58:05:74:ed:91:7b:13:27:3b: 02:f8:8e:8f:a3:b2:d1:8e:3a:4f:b9:11:78:b4:97:12:46:92: 6f:e9:7c:9f:17:a6:f3:fc:a5:27:52:ba:d5:79:d8:af:cc:73: ed:ad:1f:3d:39:9b:28:04:11:68:69:9e:e3:0b:f4:76:c0:64: db:ed:91:22:4d:93:ba:45:78:ea:f6:6f:92:a0:f7:12:17:4e: 48:aa:f5:80:31:7a:6a:bf:35:28:5c:32:d5:dd:ec:98:ef:c4: 97:51:f3:d3:54:13:9e:8c:c2:52:2e:28:99:08:ee:df:4b:52: 51:f2:4e:df:6f:75:4f:98:a0:b0:eb:f3:c2:a8:42:72:8b:bf: 74:6a:63:ef:92:3b:75:17:9b:0d:4d:fd:eb:25:6f:fb:f6:ab: 8f:da:b2:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE5yIHW/BKtkjM7who502a5Sqc9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTA2MTcxMzA4NDhaFw0yNTA2MTgxNTUwNDhaMDMxMTAvBgNV BAMTKEI3RTNBNjczMjRBNDM4RjE1Rjk2QzkwREZGRUZERTk0REVBMjI5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBN/sHIExx5pc1A8alA7k2Ugkg yiJRmmEm41e1+eol2Zk6hSDcgD2uhTg/ZGZ6XcT+UrWQ4UHL4EV+0qFSYBZF9XH+ f3Xkk8pnOFEdI7HZQmIKPwAFwR8ZT6+F/lyaD4LpdMj4UnpyVBG0pGLN0m46cy1b HLVCmXQzpmWy8wI5daT2u4+KXuyXxa2Xv2CkXEt73xnjjDX7XHmSRlEW3JWhSxd0 EEKfWyUsnQuSR5Rd6A3lsbMEWuXuGKETe2HAGT40+gonBCi54eVC/pvBR61rDZSI 6L4dp930smTGw+BEDINRb/G8c8iSy4lCkuK12+nt/FS7cJEB+Ak5xgKk4MxHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUt+OmcySkOPFflskN/+/elN6iKVcwHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9JTVd5sOJTjY+d9pwtRtyXheLD+bBa+NWHRDy4H8r7YuzHshI6oXhFFDcV1 W6yuq8LKhz92aT62evT+bnTG8RZyOCJ1AuWmzRqn6rUdm2QbOF7GFTSMC93OiUFK 8eT1KwEdWAV07ZF7Eyc7AviOj6Oy0Y46T7kReLSXEkaSb+l8nxem8/ylJ1K61XnY r8xz7a0fPTmbKAQRaGme4wv0dsBk2+2RIk2TukV46vZvkqD3EhdOSKr1gDF6ar81 KFwy1d3smO/El1Hz01QTnozCUi4omQju30tSUfJO3291T5igsOvzwqhCcou/dGpj 75I7dRebDU396yVv+/arj9qyeA== -----END CERTIFICATE-----Generated at Tue Jun 17 15:32:29 2025 by rpki-client