$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft File: 22CBA337E0370365B681D563898357F37A7D4D97.mft (raw, json) Hash identifier: +VHtwhsfIVvg0GZhzhvsVMmsMNU3MA0LiW+ym1i+tt8= Subject key identifier: 74:A4:4C:AF:15:AE:5F:00:DC:0A:03:86:F7:0A:C7:18:F9:74:41:FB Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97 Certificate serial: 235AF59A879C90A39D8599FFA27FC83852E6416E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft Manifest number: 01B2 Signing time: Sun 02 Nov 2025 15:00:00 +0000 Manifest this update: Sun 02 Nov 2025 14:55:00 +0000 Manifest next update: Mon 03 Nov 2025 18:54:00 +0000 Files and hashes: 1: 22CBA337E0370365B681D563898357F37A7D4D97.crl (hash: FOfQqqoiwpucqdeqnSDo5bYBqFEj3PFspbCAuN/wZLg=) 2: 323830343a346439383a3a2f33322d313238203d3e20323638323037.roa (hash: y7zKx4TsW0QghEIMCq7bJ5hTklvu2VN2EabupoYne2M=) 3: 3230302e3232352e3131322e302f32322d3332203d3e20323638323037.roa (hash: eI9fHZ3KLBcG6xXFiThpMiP1ThyI4F2F2i1mydfMToo=) 4: 34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (hash: px7bKqzWCRjS/nhYLdDdhRyRozqA4RvYohgLi4LW0Hc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 18:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5a:f5:9a:87:9c:90:a3:9d:85:99:ff:a2:7f:c8:38:52:e6:41:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97 Validity Not Before: Nov 2 14:55:00 2025 GMT Not After : Nov 3 18:54:00 2025 GMT Subject: CN=74A44CAF15AE5F00DC0A0386F70AC718F97441FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:35:ca:37:44:bc:c1:00:21:ef:43:0b:e4: 2c:71:f6:f1:c8:e8:b3:5e:d0:1b:94:ca:47:67:94: 86:a1:69:c8:83:d6:f1:d2:a1:96:e5:26:98:9e:8d: 5e:0c:48:7d:b9:52:de:69:0c:e5:8f:b1:4e:10:f2: 9b:c3:82:9a:79:09:40:18:96:b1:76:49:b0:d8:85: 07:c1:b8:3e:6b:3e:11:30:fa:dc:f8:94:7d:30:28: 05:94:c7:88:b9:67:4b:1a:02:dd:23:4d:eb:84:8d: 76:4d:b2:59:8f:51:3d:be:a5:4f:2b:b5:da:e9:f8: 96:8c:a1:e7:d6:e6:e9:ad:9c:62:14:8a:98:92:83: 16:15:5e:96:7d:f8:0d:c0:7b:69:d0:2a:93:fb:14: fb:50:5b:57:9e:06:54:21:36:65:69:44:df:b8:d2: a1:8f:c8:aa:97:5e:ff:bf:b0:39:a7:5a:81:f7:bb: 2f:64:4b:ab:bf:1c:1c:d4:54:18:12:66:fd:cb:a0: fd:e8:87:b0:73:49:91:0e:d6:d9:96:4b:68:bf:86: f0:59:d2:d3:d9:ad:58:c6:7a:2a:ea:93:16:54:84: a4:ee:15:0e:8c:de:3c:f5:9b:9c:d8:6c:f7:61:da: 34:ae:ee:ee:a2:7f:8d:6e:08:51:a4:cd:48:35:08: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:4C:AF:15:AE:5F:00:DC:0A:03:86:F7:0A:C7:18:F9:74:41:FB X509v3 Authority Key Identifier: keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fc:fd:48:31:3c:47:59:68:70:3b:7e:fb:49:ed:ce:b4:46: a9:f4:96:68:a7:2b:f1:f3:e5:f6:36:69:b7:07:e7:c8:99:0e: 5d:89:fa:ad:6b:fc:fa:66:78:d0:bc:5a:69:09:f1:e7:71:55: 7f:c3:5c:50:ed:af:08:c8:74:9e:30:bb:be:bf:b3:54:a9:b8: 6c:7f:23:b6:9d:26:b3:ae:94:26:22:e7:6c:d7:a6:2b:fc:93: 55:dd:9a:0d:ed:1b:9c:02:af:2a:27:23:7f:63:4a:91:24:2f: 6f:43:27:c1:21:a9:cb:82:4e:0c:f5:e4:ac:56:30:3b:07:8c: e6:19:df:7e:6e:53:d8:26:c9:49:f3:6e:fc:0a:a0:54:4f:5d: 9a:a1:0a:51:17:7b:32:ff:27:87:ae:f4:2f:10:3f:f5:f6:dc: fb:90:c2:3e:2e:7a:cb:d0:d7:95:40:a3:78:31:b5:86:c7:c1: a0:e3:ef:68:23:67:4e:ce:39:be:81:a3:13:79:25:7f:c1:9b: 50:c2:23:ed:f2:ea:e5:2e:19:a6:87:2c:7d:26:c0:c0:58:5d: 29:0d:13:51:46:05:1b:73:86:9e:eb:a8:e8:a0:bf:67:71:af: 04:c0:d4:93:23:47:76:15:46:d2:96:c7:83:0e:a5:e9:60:bd: 72:ce:a8:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI1r1moeckKOdhZn/on/IOFLmQW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3 QTdENEQ5NzAeFw0yNTExMDIxNDU1MDBaFw0yNTExMDMxODU0MDBaMDMxMTAvBgNV BAMTKDc0QTQ0Q0FGMTVBRTVGMDBEQzBBMDM4NkY3MEFDNzE4Rjk3NDQxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkTXKN0S8wQAh70ML5Cxx9vHI 6LNe0BuUykdnlIahaciD1vHSoZblJpiejV4MSH25Ut5pDOWPsU4Q8pvDgpp5CUAY lrF2SbDYhQfBuD5rPhEw+tz4lH0wKAWUx4i5Z0saAt0jTeuEjXZNslmPUT2+pU8r tdrp+JaMoefW5umtnGIUipiSgxYVXpZ9+A3Ae2nQKpP7FPtQW1eeBlQhNmVpRN+4 0qGPyKqXXv+/sDmnWoH3uy9kS6u/HBzUVBgSZv3LoP3oh7BzSZEO1tmWS2i/hvBZ 0tPZrVjGeirqkxZUhKTuFQ6M3jz1m5zYbPdh2jSu7u6if41uCFGkzUg1CD8NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdKRMrxWuXwDcCgOG9wrHGPl0QfswHwYDVR0j BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8y MkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv/z9SDE8R1locDt++0ntzrRGqfSWaKcr8fPl9jZptwfnyJkOXYn6rWv8+mZ4 0LxaaQnx53FVf8NcUO2vCMh0njC7vr+zVKm4bH8jtp0ms66UJiLnbNemK/yTVd2a De0bnAKvKicjf2NKkSQvb0MnwSGpy4JODPXkrFYwOweM5hnffm5T2CbJSfNu/Aqg VE9dmqEKURd7Mv8nh670LxA/9fbc+5DCPi56y9DXlUCjeDG1hsfBoOPvaCNnTs45 voGjE3klf8GbUMIj7fLq5S4ZpocsfSbAwFhdKQ0TUUYFG3OGnuuo6KC/Z3GvBMDU kyNHdhVG0pbHgw6l6WC9cs6oww== -----END CERTIFICATE-----Generated at Mon Nov 3 05:41:49 2025 by rpki-client