$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft File: 30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft (raw, json) Hash identifier: K/M/FzS+o//gEn/RkD8K2+ozhfjtSF2gNLstuzd7PBk= Subject key identifier: 9B:A2:A1:80:7B:3F:4A:D3:D9:50:F3:D7:A8:A6:45:B9:46:D7:7F:44 Authority key identifier: 30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87 Certificate issuer: /CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087 Certificate serial: 5910BFC02001D81C3647AAF988C3DF1EAE04F227 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft Manifest number: 0195 Signing time: Wed 25 Mar 2026 12:50:30 +0000 Manifest this update: Wed 25 Mar 2026 12:45:30 +0000 Manifest next update: Thu 26 Mar 2026 16:15:30 +0000 Files and hashes: 1: 323830343a323431633a3a2f33322d313238203d3e20323634323032.roa (hash: yfHnL5Ueg8Qt6Uo4nz1szJMxESYU5SdhArCzKjhR6+0=) 2: 30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl (hash: dEOHBqL91YxPh62oYk5AqtZ3b3yZx+FARXaQqgpy0CM=) 3: 3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa (hash: s+b+ZHmPAQ0TIoOTrYFQTSH7aurDcQ7wHWugqIyTATw=) 4: 3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa (hash: jB7zTojyLcQTnPsiTq2vVUezgCAKqouyOG8ZGRUVx+w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 16:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:10:bf:c0:20:01:d8:1c:36:47:aa:f9:88:c3:df:1e:ae:04:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087 Validity Not Before: Mar 25 12:45:30 2026 GMT Not After : Mar 26 16:15:30 2026 GMT Subject: CN=9BA2A1807B3F4AD3D950F3D7A8A645B946D77F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:e2:ad:94:1f:1d:83:fd:55:86:f9:f4:b4: bf:0d:38:a6:c7:1c:08:db:90:4d:b2:9a:a6:6b:4f: b2:2c:18:dc:0a:74:72:0e:61:1d:bf:4f:24:99:5d: ee:c7:43:a6:54:e8:34:af:aa:3e:ae:88:08:ed:cb: 41:c0:db:f5:ba:07:b0:14:5e:6d:e5:d5:45:b5:1a: bd:09:86:66:29:b0:99:69:f3:ee:53:2d:cf:45:5e: a7:fd:b2:b2:e1:99:d8:42:11:e2:15:be:73:d1:93: 10:23:16:4d:73:61:b2:4d:a8:9a:6c:2d:7f:20:19: 52:90:86:0a:ea:45:ad:49:b1:79:c6:0e:8c:fa:2d: 4d:5a:3f:2e:d7:87:d4:0b:6d:2d:cb:73:83:f0:9e: 75:ed:ae:38:0b:91:99:e3:23:b3:7b:2e:0a:83:d6: 0a:d1:d8:a5:57:83:c3:e7:b9:8e:f9:64:42:43:20: d3:ef:82:7e:58:00:26:1a:89:03:c8:0d:12:72:46: ff:e4:34:73:39:b4:26:c5:84:26:9e:c5:ed:f2:d6: d4:a6:96:d0:82:1d:11:45:98:ff:cc:95:55:86:25: dd:c2:84:73:b6:4a:c5:7f:95:a2:83:1f:4c:34:7f: 19:5f:7b:e6:55:a4:24:14:52:d3:e6:1d:8a:c4:dd: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A2:A1:80:7B:3F:4A:D3:D9:50:F3:D7:A8:A6:45:B9:46:D7:7F:44 X509v3 Authority Key Identifier: keyid:30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ba:21:8f:6d:0c:29:96:ea:02:8e:b1:61:c5:6f:09:15:c6: 0e:c1:59:14:09:41:79:39:4e:2d:11:29:a4:1e:83:57:f7:95: 87:44:83:46:25:f0:fb:eb:31:93:e7:e3:b5:fa:bc:02:e3:bf: 28:79:8b:82:38:ed:40:c3:6a:81:26:12:fb:3b:c0:32:b2:11: 76:d6:43:ee:2a:bf:11:be:09:c2:d6:da:77:78:4f:79:b8:9f: 6f:c0:4c:ab:db:e7:18:cf:c1:c9:78:26:9d:53:e3:4b:17:e5: a1:32:bf:c0:03:23:4b:fc:7a:e9:74:62:c4:5c:8a:39:af:7e: 9e:3b:60:9c:93:a4:ab:3e:fd:98:a1:a2:a4:ba:be:4a:8f:1e: da:fa:31:5b:39:5a:7e:28:15:83:9f:ac:5b:66:1a:c4:c8:58: 9e:a8:12:74:ae:9e:31:69:6c:a4:e6:94:f5:16:b9:f6:67:75: 82:85:30:06:df:17:5e:a2:a4:00:c6:57:8d:c7:0e:bc:b3:ee: ad:59:81:4a:48:0a:55:3f:1d:34:b3:de:a0:5c:84:69:bb:33: 33:ba:33:9c:22:6e:99:b3:e7:d0:5e:6d:1a:e5:f0:69:6e:03: d0:6c:59:b6:c7:15:ee:ab:5b:33:1b:c6:42:94:de:99:c4:a3: ca:03:d9:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWRC/wCAB2Bw2R6r5iMPfHq4E8icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMkQzQURBNUQ1MjcyQkVGMkRGRTkzNjA4OUEyNDMz RTRFQTA4NzAeFw0yNjAzMjUxMjQ1MzBaFw0yNjAzMjYxNjE1MzBaMDMxMTAvBgNV BAMTKDlCQTJBMTgwN0IzRjRBRDNEOTUwRjNEN0E4QTY0NUI5NDZENzdGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChSeKtlB8dg/1Vhvn0tL8NOKbH HAjbkE2ymqZrT7IsGNwKdHIOYR2/TySZXe7HQ6ZU6DSvqj6uiAjty0HA2/W6B7AU Xm3l1UW1Gr0JhmYpsJlp8+5TLc9FXqf9srLhmdhCEeIVvnPRkxAjFk1zYbJNqJps LX8gGVKQhgrqRa1JsXnGDoz6LU1aPy7Xh9QLbS3Lc4PwnnXtrjgLkZnjI7N7LgqD 1grR2KVXg8PnuY75ZEJDINPvgn5YACYaiQPIDRJyRv/kNHM5tCbFhCaexe3y1tSm ltCCHRFFmP/MlVWGJd3ChHO2SsV/laKDH0w0fxlfe+ZVpCQUUtPmHYrE3Y3JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm6KhgHs/StPZUPPXqKZFuUbXf0QwHwYDVR0j BBgwFoAUMNLTraXVJyvvLf6TYImiQz5OoIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1 MWEvMC8zMEQyRDNBREE1RDUyNzJCRUYyREZFOTM2MDg5QTI0MzNFNEVBMDg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRDJEM0FEQTVENTI3MkJF RjJERkU5MzYwODlBMjQzM0U0RUEwODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1MWEvMC8z MEQyRDNBREE1RDUyNzJCRUYyREZFOTM2MDg5QTI0MzNFNEVBMDg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYLohj20MKZbqAo6xYcVvCRXGDsFZFAlBeTlOLREppB6DV/eVh0SDRiXw++sx k+fjtfq8AuO/KHmLgjjtQMNqgSYS+zvAMrIRdtZD7iq/Eb4Jwtbad3hPebifb8BM q9vnGM/ByXgmnVPjSxfloTK/wAMjS/x66XRixFyKOa9+njtgnJOkqz79mKGipLq+ So8e2voxWzlafigVg5+sW2YaxMhYnqgSdK6eMWlspOaU9Ra59md1goUwBt8XXqKk AMZXjccOvLPurVmBSkgKVT8dNLPeoFyEabszM7oznCJumbPn0F5tGuXwaW4D0GxZ tscV7qtbMxvGQpTemcSjygPZQw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:32 2026 by rpki-client