$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft File: 30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft (raw, json) Hash identifier: sQBISolaIj4RksqijJWWQuFYPhHQZpAGqERKTRZcKsI= Subject key identifier: 2D:BA:8A:80:EF:D9:EE:7B:BD:F3:96:C6:F0:23:CB:A8:11:FD:3E:82 Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD Certificate issuer: /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD Certificate serial: 75FEE17BB51BC9611902476D58DC40976AF52497 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft Manifest number: 02F4 Signing time: Mon 20 Oct 2025 09:29:18 +0000 Manifest this update: Mon 20 Oct 2025 09:24:18 +0000 Manifest next update: Tue 21 Oct 2025 10:22:18 +0000 Files and hashes: 1: 3133312e3136312e3136302e302f32322d3234203d3e203631383132.roa (hash: bH/5S1klBcEX/xa8FsmC1ttegugNsPmbzk+c0lTKk2Y=) 2: 3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (hash: +j3WMwV/2NxbsL9VEgWaiA9Vc0I6O5E82YW+EKzRPAU=) 3: 323830343a313962303a3a2f33322d3438203d3e203631383132.roa (hash: UpXZvMnfN7ZQ4csvZrx/3+9tud0/4UDi/+GurEGzm2I=) 4: 3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa (hash: QLRJ4/fyDzYvXnclF3NRy/s0hJIu5kEYq31YQwf3h+4=) 5: 30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl (hash: beqJaBM6Y1x545Fr4uHyUsmKyDrvYgHfNUCJdRuLoa8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fe:e1:7b:b5:1b:c9:61:19:02:47:6d:58:dc:40:97:6a:f5:24:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD Validity Not Before: Oct 20 09:24:18 2025 GMT Not After : Oct 21 10:22:18 2025 GMT Subject: CN=2DBA8A80EFD9EE7BBDF396C6F023CBA811FD3E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:0b:08:df:4c:60:33:f0:73:4b:66:23:cc: 89:56:74:14:7f:90:2f:4a:91:c7:63:c3:b6:39:9a: 29:3e:46:45:0f:21:19:35:ac:53:1b:8c:62:5d:56: aa:c9:70:7d:d7:e2:1e:5d:dd:76:8f:ab:7f:f8:8c: 11:75:cb:92:d4:03:50:4e:7d:e1:e0:a2:79:fb:8c: d2:86:e7:45:43:12:c5:3e:61:cb:c2:a5:66:92:93: 91:e7:d4:2f:f3:68:fd:31:35:01:40:25:71:1f:77: cb:34:bc:a5:c9:d8:4e:17:39:fb:2d:d1:eb:97:0d: 30:01:14:b7:a6:dc:f9:50:f3:63:e2:9d:09:9a:6c: f0:71:66:16:06:3d:99:c3:ed:ec:df:bf:ee:5e:fa: 00:a6:c5:95:b9:47:16:15:81:74:94:61:d5:86:e9: 67:98:e2:da:ce:82:4e:7c:c5:1a:93:a9:7f:df:c6: 2e:fd:0b:60:90:ca:ad:d5:cb:8f:34:21:b1:67:dd: 6a:c9:77:94:b6:b8:65:15:ef:5a:cf:30:d9:b5:10: 95:32:65:b8:e6:db:fb:3e:77:92:5c:43:3d:68:65: b1:a5:51:32:84:87:b1:5f:cd:04:d1:a1:3c:8d:27: f6:73:c9:8f:80:b9:6e:77:fc:e4:ec:19:e1:69:ba: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BA:8A:80:EF:D9:EE:7B:BD:F3:96:C6:F0:23:CB:A8:11:FD:3E:82 X509v3 Authority Key Identifier: keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f1:1c:f3:04:bb:d2:bb:68:67:fd:6b:2e:3f:3b:5a:42:c2: 3a:39:a4:a1:f2:b7:7f:41:47:d1:c6:b7:92:56:65:95:b8:d2: 41:ed:3c:9c:76:1b:d7:b0:d9:23:bd:0f:ad:4d:83:91:f5:52: 89:96:1a:2d:93:33:1b:86:41:28:e2:54:a8:c6:2e:00:56:52: eb:7e:ab:4d:05:37:da:3d:2c:a9:59:2c:be:2b:49:ad:37:0d: 4d:8a:cd:1f:55:ed:cb:30:ad:bf:93:7e:08:78:51:85:d3:31: 60:f5:a3:53:de:a0:3e:70:db:81:98:1f:83:48:b9:b9:81:ed: 88:f3:c3:07:4c:d6:e3:f2:29:d5:13:0c:61:4f:0c:07:cf:9d: 90:52:cf:1e:78:b6:9c:73:7f:20:d7:4c:ce:f0:6f:b8:89:25: d4:e7:b6:e3:59:2a:41:80:96:e5:53:d1:e1:8e:fb:bb:15:f8: ca:06:c2:73:f4:e9:7a:7b:36:d8:71:9b:a7:45:9b:e5:77:5d: fa:33:bb:61:e5:d1:99:57:de:e7:6a:3d:8c:d5:84:a9:9d:6a: 78:0b:db:aa:5d:93:bb:f7:9b:db:ed:a7:e4:85:e4:8e:a9:57: ab:e5:ac:43:5b:48:54:82:b6:41:18:a1:e6:69:45:31:9c:1d: 9c:18:96:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdf7he7UbyWEZAkdtWNxAl2r1JJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDQjBGNThCMUQ3OUE3NTlEOTE0QUY5N0JBMTI4N0Mz OUZFOURGRDAeFw0yNTEwMjAwOTI0MThaFw0yNTEwMjExMDIyMThaMDMxMTAvBgNV BAMTKDJEQkE4QTgwRUZEOUVFN0JCREYzOTZDNkYwMjNDQkE4MTFGRDNFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QAsI30xgM/BzS2YjzIlWdBR/ kC9Kkcdjw7Y5mik+RkUPIRk1rFMbjGJdVqrJcH3X4h5d3XaPq3/4jBF1y5LUA1BO feHgonn7jNKG50VDEsU+YcvCpWaSk5Hn1C/zaP0xNQFAJXEfd8s0vKXJ2E4XOfst 0euXDTABFLem3PlQ82PinQmabPBxZhYGPZnD7ezfv+5e+gCmxZW5RxYVgXSUYdWG 6WeY4trOgk58xRqTqX/fxi79C2CQyq3Vy480IbFn3WrJd5S2uGUV71rPMNm1EJUy Zbjm2/s+d5JcQz1oZbGlUTKEh7FfzQTRoTyNJ/ZzyY+AuW53/OTsGeFpuv8JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULbqKgO/Z7nu985bG8CPLqBH9PoIwHwYDVR0j BBgwFoAUMMsPWLHXmnWdkUr5e6EofDn+nf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQdGNEUUdXR2VtMXJneXFvbU03azFLaWd1bXZYUHpqZjNHcUJ1ZVlu RUUvMS8zMENCMEY1OEIxRDc5QTc1OUQ5MTRBRjk3QkExMjg3QzM5RkU5REZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwQ0IwRjU4QjFENzlBNzU5 RDkxNEFGOTdCQTEyODdDMzlGRTlERkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQdGNEUUdXR2VtMXJneXFvbU03azFLaWd1bXZYUHpqZjNHcUJ1ZVluRUUvMS8z MENCMEY1OEIxRDc5QTc1OUQ5MTRBRjk3QkExMjg3QzM5RkU5REZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJvEc8wS70rtoZ/1rLj87WkLCOjmkofK3f0FH0ca3klZllbjSQe08nHYb17DZ I70PrU2DkfVSiZYaLZMzG4ZBKOJUqMYuAFZS636rTQU32j0sqVksvitJrTcNTYrN H1XtyzCtv5N+CHhRhdMxYPWjU96gPnDbgZgfg0i5uYHtiPPDB0zW4/Ip1RMMYU8M B8+dkFLPHni2nHN/INdMzvBvuIkl1Oe241kqQYCW5VPR4Y77uxX4ygbCc/Tpens2 2HGbp0Wb5Xdd+jO7YeXRmVfe52o9jNWEqZ1qeAvbql2Tu/eb2+2n5IXkjqlXq+Ws Q1tIVIK2QRih5mlFMZwdnBiWzw== -----END CERTIFICATE-----Generated at Mon Oct 20 11:26:45 2025 by rpki-client