$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft File: 30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft (raw, json) Hash identifier: RFbO/FinGqYTvdBharsDFhexrELssapyF2YMO3p6aMc= Subject key identifier: 0C:EF:25:2E:C5:C7:37:D5:DA:85:3A:31:EE:F8:FF:63:6D:AC:6A:72 Authority key identifier: 30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87 Certificate issuer: /CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087 Certificate serial: 3A50F4E8ADBEAFA02F0C72C698E08A049E6A59D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft Manifest number: 32 Signing time: Mon 30 Jun 2025 00:34:52 +0000 Manifest this update: Mon 30 Jun 2025 00:29:52 +0000 Manifest next update: Tue 01 Jul 2025 02:04:52 +0000 Files and hashes: 1: 3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa (hash: s+b+ZHmPAQ0TIoOTrYFQTSH7aurDcQ7wHWugqIyTATw=) 2: 3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa (hash: jB7zTojyLcQTnPsiTq2vVUezgCAKqouyOG8ZGRUVx+w=) 3: 30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl (hash: bzTUKMHJzJoQxD1N/JrzdUuRD8brbr4UueQAPQ9GrD0=) 4: 323830343a323431633a3a2f33322d313238203d3e20323634323032.roa (hash: yfHnL5Ueg8Qt6Uo4nz1szJMxESYU5SdhArCzKjhR6+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 02:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:50:f4:e8:ad:be:af:a0:2f:0c:72:c6:98:e0:8a:04:9e:6a:59:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087 Validity Not Before: Jun 30 00:29:52 2025 GMT Not After : Jul 1 02:04:52 2025 GMT Subject: CN=0CEF252EC5C737D5DA853A31EEF8FF636DAC6A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:a2:1a:1f:7c:89:7d:42:b1:e2:0f:81:b3: 90:74:e2:2e:73:3e:31:b1:c2:ab:fd:61:03:f7:5e: 62:22:ac:22:44:b5:23:fb:a2:d0:c8:74:7b:56:6a: 16:f6:0f:66:3e:e4:1c:54:d8:6d:65:55:d4:1c:73: 79:e8:ee:bb:3a:17:fe:68:f6:aa:cd:76:b8:7a:ce: e5:d6:9c:05:ef:ff:52:7f:18:af:bd:b8:51:47:3b: 78:fd:77:19:64:14:38:4c:0f:57:f6:75:79:52:28: f7:46:fe:b6:2f:57:5c:0e:28:70:3b:db:48:77:a5: f9:7b:9e:03:32:34:81:fd:a8:60:3f:c7:b5:35:ee: fa:e7:4d:13:0e:97:38:87:5e:3b:7a:8c:20:a0:7c: 4a:50:52:1c:69:53:b5:46:77:52:e7:21:84:3e:a0: 0b:87:cc:43:05:9c:66:aa:a4:10:63:54:ac:40:11: 7f:11:7f:df:62:85:ee:48:e3:55:44:d9:6c:c3:3d: 2b:00:09:53:b5:d7:ad:9b:24:9b:14:8c:d1:50:9a: 0b:6a:24:21:f8:40:0f:87:93:ee:8b:45:c9:3b:a5: 6d:d4:51:ce:15:df:91:3f:2b:7c:2a:bc:ad:f8:d5: 2d:b1:0e:74:21:77:c1:89:c9:89:a4:99:91:06:ea: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EF:25:2E:C5:C7:37:D5:DA:85:3A:31:EE:F8:FF:63:6D:AC:6A:72 X509v3 Authority Key Identifier: keyid:30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:73:eb:55:c7:4b:c8:1d:c1:d4:62:50:94:cf:42:ea:9b:8e: aa:3d:2f:db:9d:00:76:1d:22:24:1e:95:4f:a3:30:69:ae:cb: 6f:dd:34:e1:67:86:a1:5d:d3:48:6f:2e:7b:46:0e:c7:50:3d: 19:47:62:24:34:48:c7:e0:a0:f7:e9:f6:49:6c:31:e4:f4:93: 77:38:92:b1:0d:71:e0:17:bd:f4:c0:31:b9:ed:fb:eb:43:c2: 8f:79:a8:c5:ef:f6:df:c9:b5:b1:30:85:8c:12:1d:3b:f1:17: 41:bf:df:ba:0f:a7:78:84:5d:39:a1:02:93:6c:a4:5b:01:96: e0:15:4f:74:f9:23:b7:5e:6f:11:eb:bc:1d:40:88:e2:97:83: 05:3a:71:e2:f1:cd:05:c7:d4:e9:be:b5:f5:13:aa:bb:2d:42: d9:e3:ed:53:d8:bc:3e:ca:31:c2:9b:ec:85:59:cb:9a:c1:34: 2b:79:57:ba:e7:78:8a:ed:e6:fc:3e:01:fe:1a:3d:e3:9c:c6: 43:0d:bc:be:da:d5:81:de:8c:6f:1c:00:70:06:dc:f6:29:71: d0:f4:04:52:25:c5:48:5a:be:cd:19:2a:d5:47:5d:f0:02:53: a0:0d:48:ff:a5:26:1e:2a:7a:ed:51:45:64:74:3c:b6:f3:cb: 54:14:cb:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOlD06K2+r6AvDHLGmOCKBJ5qWdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMkQzQURBNUQ1MjcyQkVGMkRGRTkzNjA4OUEyNDMz RTRFQTA4NzAeFw0yNTA2MzAwMDI5NTJaFw0yNTA3MDEwMjA0NTJaMDMxMTAvBgNV BAMTKDBDRUYyNTJFQzVDNzM3RDVEQTg1M0EzMUVFRjhGRjYzNkRBQzZBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfaIaH3yJfUKx4g+Bs5B04i5z PjGxwqv9YQP3XmIirCJEtSP7otDIdHtWahb2D2Y+5BxU2G1lVdQcc3no7rs6F/5o 9qrNdrh6zuXWnAXv/1J/GK+9uFFHO3j9dxlkFDhMD1f2dXlSKPdG/rYvV1wOKHA7 20h3pfl7ngMyNIH9qGA/x7U17vrnTRMOlziHXjt6jCCgfEpQUhxpU7VGd1LnIYQ+ oAuHzEMFnGaqpBBjVKxAEX8Rf99ihe5I41VE2WzDPSsACVO1162bJJsUjNFQmgtq JCH4QA+Hk+6LRck7pW3UUc4V35E/K3wqvK341S2xDnQhd8GJyYmkmZEG6gv7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDO8lLsXHN9XahTox7vj/Y22sanIwHwYDVR0j BBgwFoAUMNLTraXVJyvvLf6TYImiQz5OoIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1 MWEvMC8zMEQyRDNBREE1RDUyNzJCRUYyREZFOTM2MDg5QTI0MzNFNEVBMDg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRDJEM0FEQTVENTI3MkJF RjJERkU5MzYwODlBMjQzM0U0RUEwODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1MWEvMC8z MEQyRDNBREE1RDUyNzJCRUYyREZFOTM2MDg5QTI0MzNFNEVBMDg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPXPrVcdLyB3B1GJQlM9C6puOqj0v250Adh0iJB6VT6Mwaa7Lb9004WeGoV3T SG8ue0YOx1A9GUdiJDRIx+Cg9+n2SWwx5PSTdziSsQ1x4Be99MAxue3760PCj3mo xe/238m1sTCFjBIdO/EXQb/fug+neIRdOaECk2ykWwGW4BVPdPkjt15vEeu8HUCI 4peDBTpx4vHNBcfU6b619ROquy1C2ePtU9i8PsoxwpvshVnLmsE0K3lXuud4iu3m /D4B/ho945zGQw28vtrVgd6MbxwAcAbc9ilx0PQEUiXFSFq+zRkq1Udd8AJToA1I /6UmHip67VFFZHQ8tvPLVBTLvg== -----END CERTIFICATE-----Generated at Mon Jun 30 11:57:16 2025 by rpki-client