$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft File: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft (raw, json) Hash identifier: aep0gDJNP/xB2Tj46oKfNSRUZWTVt+O/18w4I/PxRQk= Subject key identifier: C7:1D:D3:40:6B:FA:73:BC:06:D1:3D:55:1E:30:DF:4D:E1:C4:58:B4 Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB Certificate issuer: /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Certificate serial: 75DD30D979FEDF035D6B9FA266E45C3702E1A4F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft Manifest number: 02BD Signing time: Mon 03 Nov 2025 10:53:05 +0000 Manifest this update: Mon 03 Nov 2025 10:48:05 +0000 Manifest next update: Tue 04 Nov 2025 12:52:05 +0000 Files and hashes: 1: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl (hash: mcizjeCFeNo7zVSpLlaZ2pBWIINNOmjdbhPX0cNCthg=) 2: 323830343a323262303a3a2f33322d3438203d3e20323634313136.roa (hash: qqoGi+kiZZrqmP9rBhvJ1LfaPlz846VGu8vmez2bVQs=) 3: 3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa (hash: FT60wN+mTJCyFpoM4iPOVIQrtCrDtPcGjx8aPEN7+Gg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:dd:30:d9:79:fe:df:03:5d:6b:9f:a2:66:e4:5c:37:02:e1:a4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Validity Not Before: Nov 3 10:48:05 2025 GMT Not After : Nov 4 12:52:05 2025 GMT Subject: CN=C71DD3406BFA73BC06D13D551E30DF4DE1C458B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:a5:b3:12:55:9a:8d:55:4f:74:b3:40:0f: 20:64:82:13:38:cb:18:a5:65:ce:de:bb:0f:1f:2f: 7d:b3:20:8c:7d:58:a1:9d:5a:4c:ab:98:d5:e9:45: 06:74:6f:cb:8f:e0:e2:70:df:12:4e:52:4a:9e:49: bc:bd:7c:ec:bf:9f:de:ee:a7:37:1e:4a:b1:23:94: 8f:4b:60:50:c6:9b:b5:7e:01:20:ee:6d:54:1b:42: 06:d1:ee:b1:14:0f:03:3f:cd:29:d8:b2:ea:19:00: 1d:6e:33:ed:2e:a3:40:28:67:c8:ce:1b:0c:69:bd: e5:4c:cd:77:7a:d7:6d:b1:b8:d0:e2:4c:ca:bf:3c: 7f:7d:6e:a0:47:ff:76:e3:d0:52:77:c1:b7:3d:bb: 6f:16:3c:d3:54:b2:3c:b6:5f:7e:56:7a:f9:62:bb: 9e:70:80:80:d7:34:5c:57:50:56:f8:06:6d:96:99: 91:09:d5:f5:42:86:5a:e3:fb:f4:51:62:ec:ef:41: 00:06:c2:87:05:a2:3a:d2:69:10:8b:f4:2b:04:26: 56:2a:b4:42:8f:46:ab:f8:96:ad:7c:cf:2d:62:7b: 53:f3:be:01:4b:03:31:e6:7c:40:08:4c:a4:8d:78: ff:94:33:f3:50:0d:28:5d:33:20:9f:69:18:18:5f: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1D:D3:40:6B:FA:73:BC:06:D1:3D:55:1E:30:DF:4D:E1:C4:58:B4 X509v3 Authority Key Identifier: keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bb:17:ed:7b:fa:80:75:6d:72:a5:e4:e7:64:62:1e:2b:2a: 78:dd:2d:cb:2e:88:47:50:67:f6:c4:87:89:d7:e7:de:7f:d5: e9:55:10:62:43:b9:b4:e1:97:73:e3:18:da:ac:4e:f2:cd:20: 7c:3a:d4:5c:f1:54:58:51:79:fe:28:03:b2:0b:9c:7a:5b:c1: 17:d6:f5:52:09:cb:35:c5:0b:67:3f:a0:bc:cd:b4:f1:6c:92: e5:10:6c:1d:7f:22:d2:12:2d:0b:a2:39:68:a3:db:e7:cf:e3: 5f:60:44:0f:0d:6b:9b:63:9e:70:15:ef:e7:f0:f2:6f:23:f4: 71:ae:2e:d3:40:4e:b2:69:67:c8:3a:80:7f:35:68:fb:6a:19: 9e:d1:fe:7b:57:65:c2:ef:ad:f2:62:71:d3:7b:1a:32:97:66: de:5d:e9:9c:bb:cf:9b:20:47:b8:2e:52:96:eb:16:34:1d:27: 3d:1d:40:81:80:f8:16:fd:68:ed:0a:c9:8f:08:24:e3:39:57: 18:75:96:8e:a2:9c:71:64:c6:69:75:75:39:26:3c:a2:f9:b3: 90:0d:e5:06:e6:97:70:81:68:c2:1f:85:52:8f:8d:1e:8b:76: e1:cc:7d:f2:c8:82:ba:06:60:5c:80:e3:9a:a0:ad:08:23:8e: ba:d9:d0:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdd0w2Xn+3wNda5+iZuRcNwLhpPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERUIzRDJBMTRGOTg5NzI3NTNDQUY4QjdCQzVDNUUy MDI3RjdGQjAeFw0yNTExMDMxMDQ4MDVaFw0yNTExMDQxMjUyMDVaMDMxMTAvBgNV BAMTKEM3MUREMzQwNkJGQTczQkMwNkQxM0Q1NTFFMzBERjRERTFDNDU4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbKWzElWajVVPdLNADyBkghM4 yxilZc7euw8fL32zIIx9WKGdWkyrmNXpRQZ0b8uP4OJw3xJOUkqeSby9fOy/n97u pzceSrEjlI9LYFDGm7V+ASDubVQbQgbR7rEUDwM/zSnYsuoZAB1uM+0uo0AoZ8jO GwxpveVMzXd6122xuNDiTMq/PH99bqBH/3bj0FJ3wbc9u28WPNNUsjy2X35Wevli u55wgIDXNFxXUFb4Bm2WmZEJ1fVChlrj+/RRYuzvQQAGwocFojrSaRCL9CsEJlYq tEKPRqv4lq18zy1ie1PzvgFLAzHmfEAITKSNeP+UM/NQDShdMyCfaRgYX98VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxx3TQGv6c7wG0T1VHjDfTeHEWLQwHwYDVR0j BBgwFoAUIt6z0qFPmJcnU8r4t7xcXiAn9/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpY NGQvMC8yMkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyREVCM0QyQTE0Rjk4OTcy NzUzQ0FGOEI3QkM1QzVFMjAyN0Y3RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpYNGQvMC8y MkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmrsX7Xv6gHVtcqXk52RiHisqeN0tyy6IR1Bn9sSHidfn3n/V6VUQYkO5tOGX c+MY2qxO8s0gfDrUXPFUWFF5/igDsgucelvBF9b1UgnLNcULZz+gvM208WyS5RBs HX8i0hItC6I5aKPb58/jX2BEDw1rm2OecBXv5/DybyP0ca4u00BOsmlnyDqAfzVo +2oZntH+e1dlwu+t8mJx03saMpdm3l3pnLvPmyBHuC5SlusWNB0nPR1AgYD4Fv1o 7QrJjwgk4zlXGHWWjqKccWTGaXV1OSY8ovmzkA3lBuaXcIFowh+FUo+NHot24cx9 8siCugZgXIDjmqCtCCOOutnQTg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:08:24 2025 by rpki-client