$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer File: DDF75D11A85F5023747B20E973994EC53D23A68E.cer (raw, json) Hash identifier: zYBArFRlwFkxXdlB4XTPveUyy+iyeNCtU/FlxDKDeyg= Subject key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 61CD3A0BA8A473165EBB8AE7A8D37FAE22F2C13A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft caRepository: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 Oct 2025 00:33:08 +0000 Certificate not after: Fri 09 Oct 2026 00:38:08 +0000 Subordinate resources: AS: 263665 IP: 45.165.20.0/22 IP: 45.227.188.0/22 IP: 131.161.108.0/22 IP: 131.255.156.0/22 IP: 138.255.172.0/22 IP: 168.196.20.0/22 IP: 170.150.112.0/22 IP: 170.150.204.0/22 IP: 191.241.32.0/21 IP: 2804:1134::/32 IP: 2804:343c::/32 IP: 2804:47c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cd:3a:0b:a8:a4:73:16:5e:bb:8a:e7:a8:d3:7f:ae:22:f2:c1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 10 00:33:08 2025 GMT Not After : Oct 9 00:38:08 2026 GMT Subject: CN=DDF75D11A85F5023747B20E973994EC53D23A68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:29:78:a5:58:c6:12:33:2a:85:41:bb:6d: d9:6a:5a:50:2d:4c:b2:dc:cb:89:a0:0b:e4:c4:c5: 57:fa:b0:85:c4:d1:1c:04:8a:b8:97:46:9b:ab:53: 1d:e6:94:16:77:10:81:7d:de:2e:95:5c:9c:d5:f6: 09:54:c1:6f:61:c2:9a:82:b2:a1:14:42:cc:00:eb: 73:9c:e3:15:5b:09:31:e4:9e:6b:a4:82:fe:95:29: 0b:e7:d9:9a:27:43:12:5f:ef:17:5e:78:83:0e:59: 7e:fe:ab:ff:ce:2a:41:b6:d3:96:dc:ee:55:4f:46: f2:7e:0a:db:3e:4b:7c:4a:12:65:34:46:91:fd:f2: 96:71:0b:26:67:5a:b4:89:25:6a:0d:e4:85:c1:53: 1f:92:7b:8a:70:9a:de:34:e6:b7:b2:9f:ff:29:cc: 9f:c9:84:c3:63:3b:1a:f2:99:98:ff:7d:54:75:f4: 7c:3c:23:7e:f3:61:4f:48:b6:ca:1b:99:fc:f0:60: f7:e9:ea:81:63:9e:05:40:d4:4d:63:bb:a4:54:8b: f8:71:fe:94:72:47:07:ec:09:54:02:88:d8:b3:49: ee:b8:2f:6a:1b:8a:9e:85:cf:8e:eb:1a:6e:79:29: 97:c9:9c:74:32:93:35:99:04:5e:8f:88:32:f9:33: 1d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.20.0/22 45.227.188.0/22 131.161.108.0/22 131.255.156.0/22 138.255.172.0/22 168.196.20.0/22 170.150.112.0/22 170.150.204.0/22 191.241.32.0/21 IPv6: 2804:1134::/32 2804:343c::/32 2804:47c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263665 Signature Algorithm: sha256WithRSAEncryption 18:c5:1f:f4:ca:82:f2:45:e2:ce:9a:71:5c:61:61:76:5d:04: 1d:2b:ec:1d:7e:b5:57:db:04:3c:68:7d:a1:70:b5:b1:b3:1e: 3d:16:b4:82:b9:30:0e:f7:31:95:49:45:39:74:64:a1:14:1a: 00:63:f2:67:54:b2:80:30:be:21:25:e7:91:fe:09:cf:a7:28: b4:d8:ee:59:67:38:43:3f:ff:a6:b7:bc:fd:18:f4:01:81:87: de:52:c9:62:f4:e8:c8:11:ff:05:f0:36:77:a0:91:72:d3:7f: 8a:fe:20:da:06:a3:8e:9a:80:c8:64:7a:3e:cb:b5:a4:a0:23: e1:40:58:75:e7:44:1e:dc:f5:cc:86:0c:68:31:19:58:f0:d9: 5e:2d:34:1b:f1:4a:6d:2e:40:66:35:0a:d5:aa:2f:64:69:e1: be:80:36:72:6e:cb:e2:93:2d:7b:2e:7b:99:b4:85:ea:30:fc: 77:aa:53:b5:6b:d4:a2:c9:e2:07:4d:98:05:19:4d:a6:87:99: db:a8:74:c6:65:79:cd:fc:9b:87:a3:54:78:35:48:2a:71:6a: af:11:c9:24:81:7a:38:28:37:fe:e7:ef:17:42:1d:a4:fb:8a: a4:3e:bc:b6:79:e0:94:f9:89:4b:59:25:13:ab:26:60:47:db: 5f:ed:47:b9 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUYc06C6ikcxZeu4rnqNN/riLywTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTEwMTAwMDMzMDhaFw0yNjEwMDkwMDM4MDhaMDMxMTAvBgNV BAMTKERERjc1RDExQTg1RjUwMjM3NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheSl4pVjGEjMqhUG7bdlqWlAt TLLcy4mgC+TExVf6sIXE0RwEiriXRpurUx3mlBZ3EIF93i6VXJzV9glUwW9hwpqC sqEUQswA63Oc4xVbCTHknmukgv6VKQvn2ZonQxJf7xdeeIMOWX7+q//OKkG205bc 7lVPRvJ+Cts+S3xKEmU0RpH98pZxCyZnWrSJJWoN5IXBUx+Se4pwmt405reyn/8p zJ/JhMNjOxrymZj/fVR19Hw8I37zYU9ItsobmfzwYPfp6oFjngVA1E1ju6RUi/hx /pRyRwfsCVQCiNizSe64L2obip6Fz47rGm55KZfJnHQykzWZBF6PiDL5Mx23AgMB AAGjggN4MIIDdDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd910RqF9QI3R7 IOlzmU7FPSOmjjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU03 WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1ncmYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN N1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAvRERG NzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUzRDIzQTY4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEH AQH/BF0wWzA8BAIAATA2AwQCLaUUAwQCLeO8AwQCg6FsAwQCg/+cAwQCiv+sAwQC qMQUAwQCqpZwAwQCqpbMAwQDv/EgMBsEAgACMBUDBQAoBBE0AwUAKAQ0PAMFACgE R8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAXxMA0GCSqGSIb3DQEBCwUAA4IB AQAYxR/0yoLyReLOmnFcYWF2XQQdK+wdfrVX2wQ8aH2hcLWxsx49FrSCuTAO9zGV SUU5dGShFBoAY/JnVLKAML4hJeeR/gnPpyi02O5ZZzhDP/+mt7z9GPQBgYfeUsli 9OjIEf8F8DZ3oJFy03+K/iDaBqOOmoDIZHo+y7WkoCPhQFh150Qe3PXMhgxoMRlY 8NleLTQb8UptLkBmNQrVqi9kaeG+gDZybsviky17LnuZtIXqMPx3qlO1a9SiyeIH TZgFGU2mh5nbqHTGZXnN/JuHo1R4NUgqcWqvEckkgXo4KDf+5+8XQh2k+4qkPry2 eeCU+YlLWSUTqyZgR9tf7Ue5 -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:34 2025 by rpki-client