$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json) Hash identifier: YpG+S3tVOUxLXA8jmcR94VadYO2mIgfmWjN0BnTKjko= Subject key identifier: 49:D2:01:A6:10:3C:C0:F4:12:7C:4D:FF:D6:D9:BD:34:FD:1D:0C:0E Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Certificate serial: 24839B47E6244445B883FBB874076D6DF0787EE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft Manifest number: 0289 Signing time: Fri 08 Aug 2025 05:10:39 +0000 Manifest this update: Fri 08 Aug 2025 05:05:39 +0000 Manifest next update: Sat 09 Aug 2025 08:10:39 +0000 Files and hashes: 1: 3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (hash: b0pL1VTBBizjwsHR6X+XXt3qIwIdd6kUaamT8TMSnKY=) 2: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=) 3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: GdYbU29SM0NWXlwLGR5CSLa+jxWDQRYoepUcsV3P6g8=) 4: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 08:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:83:9b:47:e6:24:44:45:b8:83:fb:b8:74:07:6d:6d:f0:78:7e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359 Validity Not Before: Aug 8 05:05:39 2025 GMT Not After : Aug 9 08:10:39 2025 GMT Subject: CN=49D201A6103CC0F4127C4DFFD6D9BD34FD1D0C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:bf:58:e3:97:c6:5a:cf:78:bf:15:ee:21: ff:d4:8e:86:64:cd:08:95:c5:aa:3f:7e:4d:e7:53: d2:55:a0:77:7a:6d:5e:5c:b2:86:61:3d:52:c8:df: 70:f8:8c:57:ab:24:61:4c:f6:3a:78:91:2a:a5:9b: 5d:b0:91:6a:81:8b:cf:6a:0f:82:a4:3e:9b:43:f3: 1e:2d:2c:1b:b1:62:15:e9:87:ab:76:03:20:b1:39: d9:c0:c8:ab:6e:73:49:e0:12:73:a2:9a:cc:86:3f: 3c:8c:aa:32:0c:78:32:e2:4e:cf:d6:ff:e0:c6:7e: da:fe:ef:58:92:4f:01:e6:3f:2b:fd:55:26:26:31: 0e:68:97:8c:1f:09:01:94:34:51:4f:af:38:e9:14: 9b:13:74:2b:8c:03:8d:81:b2:13:17:36:ef:68:c2: 59:1e:35:5e:2d:fc:0f:47:c5:90:7c:00:b5:80:05: 00:4f:8a:db:c9:85:c3:18:28:27:f6:85:d7:a5:79: b5:dc:f1:3d:bd:d0:86:e3:90:de:6d:3f:b1:f6:1b: ac:98:e4:2d:40:99:79:1a:b3:96:f3:6e:d9:53:a0: f7:6c:ae:c8:9b:89:ec:7c:d9:93:eb:62:1c:4d:1d: eb:72:d9:ea:85:a2:de:2b:b0:93:22:1d:53:97:f8: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:01:A6:10:3C:C0:F4:12:7C:4D:FF:D6:D9:BD:34:FD:1D:0C:0E X509v3 Authority Key Identifier: keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8c:4c:47:09:e9:f4:00:00:7d:59:de:03:61:0f:75:c8:94: c8:5e:ca:0d:fb:af:44:35:65:4c:51:c6:6c:e1:9d:b6:c9:16: 05:41:cb:05:f1:9b:66:27:d1:5d:44:9a:92:6e:66:52:d3:c9: 54:48:1a:58:c2:5c:5a:99:df:c5:7d:41:b6:02:ca:73:c7:e7: 5a:a9:6e:c8:9c:cd:93:4b:8b:4d:35:4e:9b:0b:dd:53:05:44: bc:d9:1a:77:77:79:c2:37:b5:d9:45:87:1d:9d:6f:9d:49:00: 61:f7:7d:aa:85:a3:5b:ad:9f:0e:3b:5b:8f:58:1a:bb:67:e9: a7:4d:d9:7d:6b:12:96:10:06:e7:6d:a6:d5:1b:c9:c5:45:59: e0:10:b6:27:6c:b7:f7:90:06:bb:6e:16:e2:1c:ac:6b:1a:36: e3:fa:ec:eb:fd:6f:00:c3:0c:21:b9:ba:02:20:b1:e3:04:12: 7f:ce:ac:9c:0a:1b:f3:35:b5:a3:e7:f7:d8:8b:95:c0:d1:53: 9b:f3:9f:de:8c:46:36:3c:5c:ef:4c:0f:bf:7b:50:bb:eb:b2: 89:cf:e4:fc:2e:48:d3:9e:f7:39:59:bd:48:d9:5e:b3:83:48: 68:4d:15:4e:72:c6:ef:42:2e:5d:7e:3b:09:54:82:54:31:92: 51:81:4d:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJIObR+YkREW4g/u4dAdtbfB4fugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy MkIzQTM1OTAeFw0yNTA4MDgwNTA1MzlaFw0yNTA4MDkwODEwMzlaMDMxMTAvBgNV BAMTKDQ5RDIwMUE2MTAzQ0MwRjQxMjdDNERGRkQ2RDlCRDM0RkQxRDBDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Yr9Y45fGWs94vxXuIf/UjoZk zQiVxao/fk3nU9JVoHd6bV5csoZhPVLI33D4jFerJGFM9jp4kSqlm12wkWqBi89q D4KkPptD8x4tLBuxYhXph6t2AyCxOdnAyKtuc0ngEnOimsyGPzyMqjIMeDLiTs/W /+DGftr+71iSTwHmPyv9VSYmMQ5ol4wfCQGUNFFPrzjpFJsTdCuMA42BshMXNu9o wlkeNV4t/A9HxZB8ALWABQBPitvJhcMYKCf2hdelebXc8T290IbjkN5tP7H2G6yY 5C1AmXkas5bzbtlToPdsrsibiex82ZPrYhxNHety2eqFot4rsJMiHVOX+BZRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSdIBphA8wPQSfE3/1tm9NP0dDA4wHwYDVR0j BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1 MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84 NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQYxMRwnp9AAAfVneA2EPdciUyF7KDfuvRDVlTFHGbOGdtskWBUHLBfGbZifR XUSakm5mUtPJVEgaWMJcWpnfxX1BtgLKc8fnWqluyJzNk0uLTTVOmwvdUwVEvNka d3d5wje12UWHHZ1vnUkAYfd9qoWjW62fDjtbj1gau2fpp03ZfWsSlhAG522m1RvJ xUVZ4BC2J2y395AGu24W4hysaxo24/rs6/1vAMMMIbm6AiCx4wQSf86snAob8zW1 o+f32IuVwNFTm/Of3oxGNjxc70wPv3tQu+uyic/k/C5I0573OVm9SNles4NIaE0V TnLG70IuXX47CVSCVDGSUYFNWw== -----END CERTIFICATE-----Generated at Sat Aug 9 01:08:49 2025 by rpki-client