$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft File: 22CBA337E0370365B681D563898357F37A7D4D97.mft (raw, json) Hash identifier: emDSqdhhnQeotfxiDUOUSvrMwN1PJWCDMP5zQRFXge8= Subject key identifier: 2E:7E:2A:42:EC:1E:A4:D4:9E:E9:7F:BE:BA:42:C4:0E:E5:94:DA:66 Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97 Certificate serial: 531836BE494B1B6EAC36DF8B8860E826B573446F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft Manifest number: 0150 Signing time: Wed 20 Aug 2025 05:47:49 +0000 Manifest this update: Wed 20 Aug 2025 05:42:49 +0000 Manifest next update: Thu 21 Aug 2025 09:39:49 +0000 Files and hashes: 1: 22CBA337E0370365B681D563898357F37A7D4D97.crl (hash: B81cy11yE7wf2kzFDsICjd39krfL0g1BF2f/aDgIufw=) 2: 34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (hash: px7bKqzWCRjS/nhYLdDdhRyRozqA4RvYohgLi4LW0Hc=) 3: 3230302e3232352e3131322e302f32322d3332203d3e20323638323037.roa (hash: eI9fHZ3KLBcG6xXFiThpMiP1ThyI4F2F2i1mydfMToo=) 4: 323830343a346439383a3a2f33322d313238203d3e20323638323037.roa (hash: y7zKx4TsW0QghEIMCq7bJ5hTklvu2VN2EabupoYne2M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:18:36:be:49:4b:1b:6e:ac:36:df:8b:88:60:e8:26:b5:73:44:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97 Validity Not Before: Aug 20 05:42:49 2025 GMT Not After : Aug 21 09:39:49 2025 GMT Subject: CN=2E7E2A42EC1EA4D49EE97FBEBA42C40EE594DA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:06:27:fa:d8:ab:92:bb:62:a5:db:4f:44: 28:d8:16:0d:90:70:0a:89:2d:1d:f3:63:57:1d:67: ee:b5:7d:c3:11:18:53:db:93:dd:af:78:46:ba:94: d6:87:22:28:09:4e:d0:8b:b0:21:72:4c:29:91:95: 3b:e2:4a:4b:52:df:4b:fd:15:4d:81:b7:f9:93:27: 73:f2:bc:f1:73:90:a7:0b:9e:14:43:9a:51:70:0a: 4e:da:4a:4e:20:26:0d:ed:c6:b6:be:69:c6:da:70: b0:61:82:0e:e2:6a:95:86:b7:45:c7:c6:50:ee:2a: 13:6d:27:f5:5e:e8:a7:4f:32:6c:33:da:08:12:57: da:41:91:ea:fd:2b:a1:c7:33:47:4a:ea:f2:69:f1: ba:fc:47:fb:62:d6:f0:d2:95:cc:1c:a9:61:44:db: 7c:28:9e:92:9b:0e:14:87:5c:68:61:e0:33:02:c9: 49:ce:39:0f:e2:55:08:76:2e:34:0e:96:f8:fe:ca: 20:09:cb:5e:b6:b5:05:2a:b1:05:7d:06:12:39:66: 0e:22:f7:ca:67:51:46:cd:75:77:f1:10:99:1a:ef: f0:bc:4d:c6:c8:1b:15:75:81:22:1f:dd:c6:77:0b: 6b:4f:75:4c:2c:ad:60:6d:42:9e:0b:cc:b2:ee:da: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:2A:42:EC:1E:A4:D4:9E:E9:7F:BE:BA:42:C4:0E:E5:94:DA:66 X509v3 Authority Key Identifier: keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:04:a7:b2:11:55:80:ed:b3:84:4e:ab:80:f4:2c:df:9d: 50:c0:db:09:08:a1:d9:93:a1:2f:73:a1:63:3e:15:b5:63:16: 21:19:3f:f2:a1:80:cd:d3:dc:29:e3:67:ee:c9:5d:68:dd:09: 46:9c:2e:26:5a:e9:ab:2a:22:ba:eb:38:5d:bd:16:84:20:b3: bb:23:d9:93:8e:f4:b4:c6:f3:3c:ca:d8:b4:ca:91:cb:12:15: 42:ed:84:cb:e7:08:81:4c:33:89:da:d8:97:15:a3:a9:f8:21: b1:56:3b:81:58:c2:39:00:8d:7a:d7:3d:7a:a8:ad:96:e2:ac: 52:3d:ac:dd:8c:65:00:48:2c:61:97:90:ee:88:34:d2:fe:c9: c0:07:f0:74:37:a4:f6:59:f4:db:d9:98:84:c7:2b:18:24:77: 6a:ba:24:aa:5a:1b:42:89:88:e1:39:2b:d4:56:92:c0:df:83: 3f:0a:cd:0c:af:3c:bb:f9:dd:b8:8b:01:21:70:f8:ff:54:a5: f7:0d:c4:7c:7a:ad:93:d8:24:75:ee:66:b2:6b:17:51:c9:bb: 61:ce:e4:17:b1:77:3f:6a:2b:7a:49:18:bb:06:eb:72:9e:d1: 5e:7e:d1:29:f4:78:54:38:82:67:0f:1c:f3:5e:ba:c3:cd:13: 25:7a:ce:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUxg2vklLG26sNt+LiGDoJrVzRG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3 QTdENEQ5NzAeFw0yNTA4MjAwNTQyNDlaFw0yNTA4MjEwOTM5NDlaMDMxMTAvBgNV BAMTKDJFN0UyQTQyRUMxRUE0RDQ5RUU5N0ZCRUJBNDJDNDBFRTU5NERBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADAYn+tirkrtipdtPRCjYFg2Q cAqJLR3zY1cdZ+61fcMRGFPbk92veEa6lNaHIigJTtCLsCFyTCmRlTviSktS30v9 FU2Bt/mTJ3PyvPFzkKcLnhRDmlFwCk7aSk4gJg3txra+acbacLBhgg7iapWGt0XH xlDuKhNtJ/Ve6KdPMmwz2ggSV9pBker9K6HHM0dK6vJp8br8R/ti1vDSlcwcqWFE 23wonpKbDhSHXGhh4DMCyUnOOQ/iVQh2LjQOlvj+yiAJy162tQUqsQV9BhI5Zg4i 98pnUUbNdXfxEJka7/C8TcbIGxV1gSIf3cZ3C2tPdUwsrWBtQp4LzLLu2te9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULn4qQuwepNSe6X++ukLEDuWU2mYwHwYDVR0j BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8y MkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG00Ep7IRVYDts4ROq4D0LN+dUMDbCQih2ZOhL3OhYz4VtWMWIRk/8qGAzdPc KeNn7sldaN0JRpwuJlrpqyoiuus4Xb0WhCCzuyPZk470tMbzPMrYtMqRyxIVQu2E y+cIgUwzidrYlxWjqfghsVY7gVjCOQCNetc9eqitluKsUj2s3YxlAEgsYZeQ7og0 0v7JwAfwdDek9ln029mYhMcrGCR3arokqlobQomI4Tkr1FaSwN+DPwrNDK88u/nd uIsBIXD4/1Sl9w3EfHqtk9gkde5msmsXUcm7Yc7kF7F3P2orekkYuwbrcp7RXn7R KfR4VDiCZw8c8166w80TJXrO6g== -----END CERTIFICATE-----Generated at Wed Aug 20 18:31:59 2025 by rpki-client