$ rpki-client -vvf rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft File: 3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft (raw, json) Hash identifier: okT3RqKyGz+Pz+XEW+pO5pfkMcKX6kk71qzE+WxppXw= Subject key identifier: B1:9E:04:16:E7:D3:A8:6C:6C:CF:5A:EB:BB:FA:F5:BF:F6:AD:42:45 Authority key identifier: 32:21:F6:BB:BA:53:17:2B:B7:A2:FE:B9:42:CD:33:35:EA:37:E2:C5 Certificate issuer: /CN=3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5 Certificate serial: 6C9B5256A8C29628B67C1E31F2CD6A3E5F9BE516 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft Manifest number: 01D2 Signing time: Mon 20 Oct 2025 05:55:04 +0000 Manifest this update: Mon 20 Oct 2025 05:50:04 +0000 Manifest next update: Tue 21 Oct 2025 07:00:04 +0000 Files and hashes: 1: 3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.crl (hash: /rvnBS5EWVQ7LaORyk+3c8jW8y6LSNpxbe3YC8mUKIM=) 2: 3137372e36362e3138302e302f32322d3234203d3e203532363735.roa (hash: UHqEKEzfIVesixSYDouhRZWEnEiq20VyE+rjIM4OAK4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.crl rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9b:52:56:a8:c2:96:28:b6:7c:1e:31:f2:cd:6a:3e:5f:9b:e5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5 Validity Not Before: Oct 20 05:50:04 2025 GMT Not After : Oct 21 07:00:04 2025 GMT Subject: CN=B19E0416E7D3A86C6CCF5AEBBBFAF5BFF6AD4245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:3b:68:11:bd:56:0c:8f:89:5c:69:94:61: 1e:84:10:f5:cf:1a:1d:76:64:25:67:6a:cc:a4:9d: af:f7:04:fb:a1:18:9b:08:7b:13:6d:aa:2a:77:0a: 18:9e:c2:37:cc:8a:48:61:a5:ba:17:e7:26:54:7e: 05:ce:c9:b1:2a:46:d9:d1:d1:2b:b8:e2:d8:ed:b0: b0:b0:32:d5:cb:4a:b6:2a:97:60:04:0c:66:90:10: a4:c9:ae:fd:68:6f:6f:d8:97:2e:05:67:41:f0:56: fd:c4:15:8f:a2:80:83:a5:07:6d:e3:66:ad:40:5e: 1c:22:e2:8b:37:54:6d:a6:5d:f6:24:69:0a:49:48: 10:36:cf:5d:09:86:a2:35:b4:d6:e4:bb:ce:87:35: 0b:f8:00:fc:bc:0a:0d:50:37:e1:ea:8a:c4:a8:d1: 40:04:2a:9e:f6:4e:4f:9a:9c:ef:83:3c:f4:7e:a9: 42:fb:7c:cc:80:f5:77:76:f4:17:5a:c1:60:18:06: ed:c7:e2:a6:36:d5:c0:89:70:52:f6:e4:a7:6a:52: fe:02:ce:50:09:f1:be:9e:0b:43:e3:44:01:24:26: dd:2b:0d:c6:15:5b:64:65:a2:b4:98:78:bf:a8:ae: 41:0a:20:cf:65:84:e2:8c:cf:09:7e:a6:8a:d0:5f: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9E:04:16:E7:D3:A8:6C:6C:CF:5A:EB:BB:FA:F5:BF:F6:AD:42:45 X509v3 Authority Key Identifier: keyid:32:21:F6:BB:BA:53:17:2B:B7:A2:FE:B9:42:CD:33:35:EA:37:E2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:c2:40:7f:17:02:e0:06:5c:e9:12:f5:a0:c4:5a:67:8a:fd: a8:5e:d2:4d:f9:cf:e1:e2:dd:b6:3b:88:f3:90:3f:3a:76:c5: 20:b0:e4:e2:c6:1e:13:e3:c0:e6:9e:d4:5f:a9:e4:50:fb:02: 81:e0:34:8f:4c:51:a6:8f:ce:33:b9:85:2f:f5:e2:cd:0c:24: e1:db:6b:01:f1:e0:8c:0d:af:ac:2b:de:a1:67:15:f0:fa:ec: a4:c2:fd:c6:ac:d4:1d:91:92:23:3e:d5:fd:df:b7:15:c5:7f: 87:ce:62:3e:e9:79:f7:9a:0e:4a:9d:7e:ec:6f:33:ef:74:23: d6:15:ed:ac:41:fc:4a:c3:86:91:9f:6c:aa:ce:9a:f2:32:ab: 5e:40:a0:9c:43:1d:ce:98:15:bd:9d:8f:92:ad:da:5e:79:08: 5e:c8:4a:5f:0a:67:31:c1:5d:ca:87:56:d7:6e:21:87:8a:b1: 82:1a:db:c4:72:de:ca:12:31:43:f4:f6:01:d5:48:2b:e4:e7: e7:89:25:c9:38:3b:eb:5d:92:9c:dd:eb:77:cb:5b:2f:68:4a: 00:28:6d:e3:00:c6:91:66:cf:8a:1b:b9:ba:b2:58:36:82:22: 44:12:eb:9c:4a:3d:87:b5:11:ae:dd:17:d3:6e:26:f4:79:75: 58:ce:32:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbJtSVqjClii2fB4x8s1qPl+b5RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyMUY2QkJCQTUzMTcyQkI3QTJGRUI5NDJDRDMzMzVF QTM3RTJDNTAeFw0yNTEwMjAwNTUwMDRaFw0yNTEwMjEwNzAwMDRaMDMxMTAvBgNV BAMTKEIxOUUwNDE2RTdEM0E4NkM2Q0NGNUFFQkJCRkFGNUJGRjZBRDQyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVATtoEb1WDI+JXGmUYR6EEPXP Gh12ZCVnasykna/3BPuhGJsIexNtqip3ChiewjfMikhhpboX5yZUfgXOybEqRtnR 0Su44tjtsLCwMtXLSrYql2AEDGaQEKTJrv1ob2/Yly4FZ0HwVv3EFY+igIOlB23j Zq1AXhwi4os3VG2mXfYkaQpJSBA2z10JhqI1tNbku86HNQv4APy8Cg1QN+HqisSo 0UAEKp72Tk+anO+DPPR+qUL7fMyA9Xd29BdawWAYBu3H4qY21cCJcFL25KdqUv4C zlAJ8b6eC0PjRAEkJt0rDcYVW2RlorSYeL+orkEKIM9lhOKMzwl+porQXzkjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsZ4EFufTqGxsz1rru/r1v/atQkUwHwYDVR0j BBgwFoAUMiH2u7pTFyu3ov65Qs0zNeo34sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3BlRG9TUWt0SEhYbjZFZ25FRXQ1UXBTWkVTdjFMaXJ2dUVRNjR3OWhK d04vMC8zMjIxRjZCQkJBNTMxNzJCQjdBMkZFQjk0MkNEMzMzNUVBMzdFMkM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMjFGNkJCQkE1MzE3MkJC N0EyRkVCOTQyQ0QzMzM1RUEzN0UyQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3BlRG9TUWt0SEhYbjZFZ25FRXQ1UXBTWkVTdjFMaXJ2dUVRNjR3OWhKd04vMC8z MjIxRjZCQkJBNTMxNzJCQjdBMkZFQjk0MkNEMzMzNUVBMzdFMkM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy8JAfxcC4AZc6RL1oMRaZ4r9qF7STfnP4eLdtjuI85A/OnbFILDk4sYeE+PA 5p7UX6nkUPsCgeA0j0xRpo/OM7mFL/XizQwk4dtrAfHgjA2vrCveoWcV8PrspML9 xqzUHZGSIz7V/d+3FcV/h85iPul595oOSp1+7G8z73Qj1hXtrEH8SsOGkZ9sqs6a 8jKrXkCgnEMdzpgVvZ2Pkq3aXnkIXshKXwpnMcFdyodW124hh4qxghrbxHLeyhIx Q/T2AdVIK+Tn54klyTg7612SnN3rd8tbL2hKACht4wDGkWbPihu5urJYNoIiRBLr nEo9h7URrt0X024m9Hl1WM4yRA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:37 2025 by rpki-client