$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer File: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer (raw, json) Hash identifier: fGZbb8PNNcJeaYNhyx0XEqOojuafbYg76rIbkErRkuU= Subject key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 633DFCCA6C99351363006CA0B15A4EC39E85F595 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft caRepository: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/ Notify URL: https://krill.peering.ee.columbia.edu/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 17:47:11 +0000 Certificate not after: Tue 10 Aug 2027 17:52:11 +0000 Subordinate resources: AS: 61574 -- 61576 AS: 263842 -- 263844 IP: 138.185.228.0/22 IP: 2804:269c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 14 Aug 2026 07:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3d:fc:ca:6c:99:35:13:63:00:6c:a0:b1:5a:4e:c3:9e:85:f5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 11 17:47:11 2026 GMT Not After : Aug 10 17:52:11 2027 GMT Subject: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:67:48:44:6a:0c:b9:23:04:5e:4d:e8:2c: 38:ff:58:7b:b1:d2:08:71:82:ba:98:c6:06:be:9b: 26:56:44:f4:df:9a:80:13:94:57:d2:32:e4:c6:07: 6c:bb:62:94:53:c5:4d:a4:51:13:57:05:78:2e:bc: 1b:28:75:89:81:19:44:a6:43:ef:6e:4d:dd:84:60: 1f:ee:03:d2:e4:a2:4a:65:95:7f:90:c8:36:6b:60: 37:d5:b1:2e:bc:af:92:60:39:81:c8:fe:b6:95:dc: 84:0b:6e:a7:4a:3e:a0:7e:b0:c1:68:cf:7f:a9:42: 4c:81:94:c8:53:46:5c:a9:59:26:27:04:5a:3b:d9: 6b:74:7b:56:7a:74:a3:f2:a9:ef:c2:a5:46:23:ae: 98:32:65:28:e5:60:87:8a:d3:51:c5:ff:75:a9:14: 9a:3d:82:99:85:80:64:53:9a:91:7e:e9:77:6e:c0: 2c:d2:30:a1:1b:e9:76:c1:f9:56:16:ef:1d:ec:88: e7:8c:ac:3b:be:60:80:bf:94:40:31:08:18:e5:53: b3:b5:00:f5:6d:ff:84:80:70:4f:67:fd:dc:01:91: c5:af:d7:72:62:68:84:c6:69:47:db:af:cb:a2:65: cc:33:b0:ce:31:43:60:bc:7a:fe:8a:e8:f0:13:34: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/ RPKI Manifest - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft RPKI Notify - URI:https://krill.peering.ee.columbia.edu/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 IPv6: 2804:269c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 263842-263844 Signature Algorithm: sha256WithRSAEncryption 3b:ca:18:9d:89:a4:ca:c6:c8:8c:9c:ce:c9:3c:06:8f:38:ec: 6d:c6:f2:d7:c5:a7:d8:2f:9a:f2:22:88:02:91:22:53:4b:6e: 7f:62:43:df:d9:cc:cb:57:b7:17:73:8a:24:00:d7:b4:1b:ac: 06:b9:5d:9a:70:f2:88:07:79:f1:6b:97:34:7a:7f:26:92:7d: ca:f8:a3:09:c8:7f:3e:1c:96:31:81:1a:a4:65:cd:b0:77:04: 42:46:05:55:f7:7e:2f:20:1a:e7:f7:72:3e:fb:9c:47:96:1d: a0:49:42:b0:b4:61:0b:3c:4b:28:d5:5b:0c:a2:7a:b3:5b:67: 46:2c:58:ef:f6:0e:42:aa:ad:2d:c0:0b:bf:9b:c6:44:cf:8f: 6b:6a:a9:b7:d6:ae:7c:f4:9c:c8:c6:ee:fa:8a:3c:bb:36:99: c8:2e:82:64:71:85:cb:27:3e:1b:2f:34:01:16:1f:e2:fd:87: 48:77:a5:c8:f4:32:5f:03:72:91:96:8b:50:82:1f:77:b1:83: df:a2:24:3e:36:96:47:96:c7:63:cf:f7:24:6b:f6:0b:13:ea: ee:84:aa:00:62:6b:b4:b1:73:38:40:de:e6:04:c1:7b:6f:92: 82:2d:9c:a8:62:1e:95:64:90:91:fa:47:56:2c:45:a9:a3:98: da:ad:a2:ff -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIUYz38ymyZNRNjAGygsVpOw56F9ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA4MTExNzQ3MTFaFw0yNzA4MTAxNzUyMTFaMDMxMTAvBgNV BAMTKDBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH2dIRGoMuSMEXk3oLDj/WHux 0ghxgrqYxga+myZWRPTfmoATlFfSMuTGB2y7YpRTxU2kURNXBXguvBsodYmBGUSm Q+9uTd2EYB/uA9LkokpllX+QyDZrYDfVsS68r5JgOYHI/raV3IQLbqdKPqB+sMFo z3+pQkyBlMhTRlypWSYnBFo72Wt0e1Z6dKPyqe/CpUYjrpgyZSjlYIeK01HF/3Wp FJo9gpmFgGRTmpF+6XduwCzSMKEb6XbB+VYW7x3siOeMrDu+YIC/lEAxCBjlU7O1 APVt/4SAcE9n/dwBkcWv13JiaITGaUfbr8uiZcwzsM4xQ2C8ev6K6PATNAG5AgMB AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNcpnP6oszmesk j6aFGLaGLOLojzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAR0GCCsGAQUFBwELBIIBDzCCAQswSQYI KwYBBQUHMAWGPXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUv cmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wdQYIKwYBBQUHMAqGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhGQTY4NTE4QjY4NjJDRTJFODhGLm1mdDBH BggrBgEFBQcwDYY7aHR0cHM6Ly9rcmlsbC5wZWVyaW5nLmVlLmNvbHVtYmlhLmVk dS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoq55DANBAIAAjAHAwUAKAQm nDAtBggrBgEFBQcBCAEB/wQeMBygGjAYMAoCAwDwhgIDAPCIMAoCAwQGogIDBAak MA0GCSqGSIb3DQEBCwUAA4IBAQA7yhidiaTKxsiMnM7JPAaPOOxtxvLXxafYL5ry IogCkSJTS25/YkPf2czLV7cXc4okANe0G6wGuV2acPKIB3nxa5c0en8mkn3K+KMJ yH8+HJYxgRqkZc2wdwRCRgVV934vIBrn93I++5xHlh2gSUKwtGELPEso1VsMonqz W2dGLFjv9g5Cqq0twAu/m8ZEz49raqm31q589JzIxu76ijy7NpnILoJkcYXLJz4b LzQBFh/i/YdId6XI9DJfA3KRlotQgh93sYPfoiQ+NpZHlsdjz/cka/YLE+ruhKoA Ymu0sXM4QN7mBMF7b5KCLZyoYh6VZJCR+kdWLEWpo5jaraL/ -----END CERTIFICATE-----Generated at Thu Aug 13 07:47:43 2026 by rpki-client