
$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
File: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json)
Hash identifier: XZGyarSY5qM6pxiW8b4Z9pIa9x78FPTrWe3UmfKBWHQ=
Subject key identifier: CD:6F:FE:2C:72:6B:CD:B5:B4:B7:79:AA:5E:0D:87:07:26:40:BC:38
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Certificate issuer: /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial: 745F9799F481521472834FE6AD44D5FEBBE2D578
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
Manifest number: 02FE
Signing time: Tue 04 Nov 2025 07:11:37 +0000
Manifest this update: Tue 04 Nov 2025 07:06:37 +0000
Manifest next update: Wed 05 Nov 2025 09:54:37 +0000
Files and hashes: 1: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: lT/6WcmYzGUpORGAi2BiTBhVPj5/kORLrEd7+H/HXMM=)
2: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=)
3: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 05 Nov 2025 09:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5f:97:99:f4:81:52:14:72:83:4f:e6:ad:44:d5:fe:bb:e2:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Validity
Not Before: Nov 4 07:06:37 2025 GMT
Not After : Nov 5 09:54:37 2025 GMT
Subject: CN=CD6FFE2C726BCDB5B4B779AA5E0D87072640BC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:0c:2b:53:7b:e5:68:f8:59:3b:3c:21:3f:
0d:1d:f8:54:4a:18:38:7b:ee:23:23:b8:de:dd:f9:
a2:98:65:59:3c:0a:29:34:d6:ad:40:77:68:07:a2:
00:27:30:88:05:72:6a:68:03:03:d0:86:18:2f:aa:
c3:9e:d8:f2:4a:a6:cd:af:a2:cf:49:49:7c:9f:1b:
03:d0:76:b2:f7:ca:66:8b:df:e4:43:96:d4:c8:1c:
6c:b5:59:e2:6f:ea:9e:9d:86:28:d8:e1:67:fa:02:
29:52:e7:d3:fb:80:12:95:a9:30:ef:56:21:f1:f5:
fe:ad:d1:69:80:81:94:28:e6:89:d9:eb:82:43:2e:
27:df:de:90:9c:c9:35:3b:bc:56:79:ed:9f:d2:c7:
49:e6:73:f6:6d:86:6e:2d:1a:98:66:44:0b:79:38:
c4:61:30:0c:bd:80:35:80:b2:21:9a:7f:3a:80:d3:
1b:71:f4:a2:b2:6e:50:6c:da:02:c0:d1:f0:b9:70:
07:56:cc:4d:91:1d:15:16:1a:1e:3d:a4:aa:d8:38:
6d:f9:28:46:f0:41:c0:bc:7f:81:08:ea:cc:c5:95:
0a:3e:ee:db:7b:f6:d3:4e:99:00:98:c7:e6:18:99:
06:53:32:a3:3d:c7:bb:03:b8:cc:a6:2f:d6:ae:e9:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:FE:2C:72:6B:CD:B5:B4:B7:79:AA:5E:0D:87:07:26:40:BC:38
X509v3 Authority Key Identifier:
keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:ed:cb:d3:78:fb:89:88:d7:b3:f4:84:d4:39:49:78:d8:
02:a4:9e:cc:53:5d:ea:1f:3b:21:39:6f:84:45:02:85:7e:6f:
7d:2a:ca:9a:05:5a:85:b8:86:d4:ee:06:a1:b2:33:52:25:d1:
71:1d:02:fb:8c:e3:0c:e3:e6:1f:aa:10:f5:05:af:84:09:53:
b8:5d:58:ce:fa:2a:85:4a:8c:22:fb:2d:e0:c5:9f:71:69:bb:
4b:0e:4e:c3:8e:a9:45:0a:5d:20:d9:20:2b:68:2c:80:c1:63:
66:2f:8f:92:ad:03:b3:15:fa:e2:71:d4:01:6a:22:e7:14:1d:
17:37:2a:f3:d8:a7:ef:a9:dc:64:01:f6:e7:3a:38:ce:92:ce:
38:1b:06:6e:62:46:01:b3:49:02:71:c6:af:3d:70:39:3c:cd:
78:7f:30:8e:bc:c1:66:26:22:3e:b8:a3:7f:92:35:cb:b8:09:
5e:81:eb:ac:1e:bb:30:0a:71:08:e3:9c:b8:b2:e7:28:8c:2d:
20:87:d6:38:ef:2f:6f:02:4a:d9:15:8e:ab:2e:98:08:ab:1c:
c4:91:e6:b5:75:58:cf:1a:9b:a5:29:99:da:60:68:b3:d4:fb:
ed:13:2f:cf:2f:de:ab:45:26:b0:3f:e6:47:e8:26:7c:f2:ea:
42:48:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:17:35 2025 by rpki-client