$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft File: 22CBA337E0370365B681D563898357F37A7D4D97.mft (raw, json) Hash identifier: Na6mz22DGKd2CScQ2dRYG97lBMzsTXlsrPtMnzgRMEc= Subject key identifier: BC:3B:D3:2B:EE:12:95:E5:75:A4:3B:70:AB:44:BA:50:A5:E2:D4:0B Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97 Certificate serial: 7A01EA1F86C771A6B7A617C4E3C4694B05700013 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft Manifest number: 01A0 Signing time: Mon 20 Oct 2025 04:33:08 +0000 Manifest this update: Mon 20 Oct 2025 04:28:08 +0000 Manifest next update: Tue 21 Oct 2025 06:17:08 +0000 Files and hashes: 1: 34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (hash: px7bKqzWCRjS/nhYLdDdhRyRozqA4RvYohgLi4LW0Hc=) 2: 323830343a346439383a3a2f33322d313238203d3e20323638323037.roa (hash: y7zKx4TsW0QghEIMCq7bJ5hTklvu2VN2EabupoYne2M=) 3: 22CBA337E0370365B681D563898357F37A7D4D97.crl (hash: qaJSzCklDtOzakVbyPTD08eoEYBRxvA8xfWQ/c4TJOg=) 4: 3230302e3232352e3131322e302f32322d3332203d3e20323638323037.roa (hash: eI9fHZ3KLBcG6xXFiThpMiP1ThyI4F2F2i1mydfMToo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:01:ea:1f:86:c7:71:a6:b7:a6:17:c4:e3:c4:69:4b:05:70:00:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97 Validity Not Before: Oct 20 04:28:08 2025 GMT Not After : Oct 21 06:17:08 2025 GMT Subject: CN=BC3BD32BEE1295E575A43B70AB44BA50A5E2D40B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:0f:cd:fc:fe:a1:66:97:97:f5:38:a3:1e: 44:b5:ca:2a:88:6f:d0:a8:2f:1c:70:ac:d3:4c:33: 2e:51:e0:d4:17:8b:aa:1d:54:4c:8f:44:82:6a:d6: 2c:72:7c:77:53:b3:60:64:32:25:b2:c1:16:00:65: 78:46:b1:8d:2e:10:60:5c:1f:29:4b:3b:a6:fb:99: 69:6f:7f:1b:0f:84:15:51:0a:5f:04:9a:96:3c:ef: 77:ef:4e:41:2a:2a:a1:b5:d6:34:1e:9e:55:fe:0a: 57:06:d1:77:da:99:4b:51:7d:91:a8:ff:c5:a9:ae: 8a:f3:18:40:38:70:8a:2f:38:44:e0:32:9d:05:4c: 37:29:97:8c:eb:5e:b4:a3:41:04:9c:55:70:f4:92: 03:f2:14:73:8a:d6:91:85:77:23:c8:e7:af:a5:99: ec:34:b6:f5:f8:98:44:c1:db:0f:e5:0e:91:0c:c3: e8:14:56:93:c4:d2:a1:7a:bc:b6:90:29:aa:08:37: fe:55:97:fd:31:d1:f8:34:ad:6a:16:dd:de:bb:ea: a8:60:4c:59:d7:c1:67:80:3c:a8:e4:08:03:2e:e7: 99:85:d5:10:8b:ef:c2:2a:22:f4:2d:bd:ae:91:8f: c7:ee:69:81:c0:0b:fa:f7:37:04:91:1e:8b:9b:3b: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3B:D3:2B:EE:12:95:E5:75:A4:3B:70:AB:44:BA:50:A5:E2:D4:0B X509v3 Authority Key Identifier: keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4f:c7:f9:9d:c7:20:12:e7:44:14:10:aa:d0:ef:ce:1d:60: 7a:7e:a0:f5:d5:da:67:d2:de:6c:3e:59:1a:d4:8a:07:73:d9: b7:71:33:9c:24:30:9a:b4:fd:a6:63:98:10:30:de:9b:f1:88: 51:3f:ca:08:11:c6:8c:3e:89:3f:02:ff:3b:c9:ae:26:bb:53: c2:00:98:50:fe:ae:1a:2e:0d:c1:d8:92:17:82:dc:11:85:71: 67:c3:61:c4:53:f7:89:f3:bf:01:ae:d2:f2:29:72:05:e6:fa: 89:59:b4:dc:48:f2:1d:83:bf:7c:01:f0:c7:ca:f4:2d:6e:9b: f3:70:92:9c:0f:09:aa:18:ad:81:90:78:f2:0b:bb:66:24:00: 7a:ab:7a:11:1f:8e:fd:98:4d:c2:80:ca:05:97:b8:ce:69:e6: e6:d6:0b:f9:a0:0b:a4:bb:54:f9:9b:59:5e:78:03:55:b0:19: 7f:46:6a:26:4e:53:30:6e:5d:b6:e0:a1:52:60:0d:95:78:db: 38:03:19:df:b3:ff:8b:b4:6a:71:80:06:62:35:d3:3d:4b:f0: 08:b4:19:96:fa:89:36:91:09:23:46:c7:a7:bf:ea:79:b6:6c: e9:9f:7f:65:02:3e:b2:90:1e:c4:e9:93:5b:6b:c2:b3:0a:a6: aa:e9:e9:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUegHqH4bHcaa3phfE48RpSwVwABMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3 QTdENEQ5NzAeFw0yNTEwMjAwNDI4MDhaFw0yNTEwMjEwNjE3MDhaMDMxMTAvBgNV BAMTKEJDM0JEMzJCRUUxMjk1RTU3NUE0M0I3MEFCNDRCQTUwQTVFMkQ0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ng/N/P6hZpeX9TijHkS1yiqI b9CoLxxwrNNMMy5R4NQXi6odVEyPRIJq1ixyfHdTs2BkMiWywRYAZXhGsY0uEGBc HylLO6b7mWlvfxsPhBVRCl8EmpY873fvTkEqKqG11jQenlX+ClcG0XfamUtRfZGo /8WprorzGEA4cIovOETgMp0FTDcpl4zrXrSjQQScVXD0kgPyFHOK1pGFdyPI56+l mew0tvX4mETB2w/lDpEMw+gUVpPE0qF6vLaQKaoIN/5Vl/0x0fg0rWoW3d676qhg TFnXwWeAPKjkCAMu55mF1RCL78IqIvQtva6Rj8fuaYHAC/r3NwSRHoubOx/7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvDvTK+4SleV1pDtwq0S6UKXi1AswHwYDVR0j BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8y MkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVU/H+Z3HIBLnRBQQqtDvzh1gen6g9dXaZ9LebD5ZGtSKB3PZt3EznCQwmrT9 pmOYEDDem/GIUT/KCBHGjD6JPwL/O8muJrtTwgCYUP6uGi4NwdiSF4LcEYVxZ8Nh xFP3ifO/Aa7S8ilyBeb6iVm03EjyHYO/fAHwx8r0LW6b83CSnA8JqhitgZB48gu7 ZiQAeqt6ER+O/ZhNwoDKBZe4zmnm5tYL+aALpLtU+ZtZXngDVbAZf0ZqJk5TMG5d tuChUmANlXjbOAMZ37P/i7RqcYAGYjXTPUvwCLQZlvqJNpEJI0bHp7/qebZs6Z9/ ZQI+spAexOmTW2vCswqmqunp7Q== -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:07 2025 by rpki-client