$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft File: 30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft (raw, json) Hash identifier: stWH6YH5LHMKgSlOgE4jRsFlLmz4Muq8T09+sDsrSKo= Subject key identifier: D6:17:E2:D4:59:09:F2:B9:A9:69:7F:E6:A7:CB:7D:F4:1B:AA:EA:DA Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD Certificate issuer: /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD Certificate serial: 1E8A0BD366154C5EFB216CC8BCD1690D13036F5C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft Manifest number: 0263 Signing time: Thu 03 Jul 2025 10:00:27 +0000 Manifest this update: Thu 03 Jul 2025 09:55:27 +0000 Manifest next update: Fri 04 Jul 2025 12:40:27 +0000 Files and hashes: 1: 3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (hash: +j3WMwV/2NxbsL9VEgWaiA9Vc0I6O5E82YW+EKzRPAU=) 2: 323830343a313962303a3a2f33322d3438203d3e203631383132.roa (hash: UpXZvMnfN7ZQ4csvZrx/3+9tud0/4UDi/+GurEGzm2I=) 3: 3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa (hash: QLRJ4/fyDzYvXnclF3NRy/s0hJIu5kEYq31YQwf3h+4=) 4: 30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl (hash: kxdcN1RLYqJeuc2DOi8QYHBsF+0aqC/W/lWsIxwKZwQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 12:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8a:0b:d3:66:15:4c:5e:fb:21:6c:c8:bc:d1:69:0d:13:03:6f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD Validity Not Before: Jul 3 09:55:27 2025 GMT Not After : Jul 4 12:40:27 2025 GMT Subject: CN=D617E2D45909F2B9A9697FE6A7CB7DF41BAAEADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7a:18:72:d5:22:72:a6:06:55:87:a0:56:ee: bc:c0:8d:0c:a7:04:d1:a7:53:6c:bc:d9:a3:3f:c9: 42:cb:fc:a8:e9:d3:5a:a4:bd:bc:8c:9f:5f:f1:1e: 1e:0d:04:f8:f8:27:cc:4b:49:a3:90:ef:b4:a1:12: 87:0b:84:1c:6b:c6:96:b1:1c:58:d6:a9:c3:5e:57: 50:6c:d7:dc:f4:74:15:46:27:46:a4:81:eb:da:bb: a1:05:9f:85:0a:5e:cf:54:bb:c9:4a:5b:65:7f:3a: 80:ff:cf:bb:2b:c8:de:6b:97:09:0d:04:43:f9:d4: f0:f5:35:09:86:ee:d9:b9:40:76:fa:8f:15:0f:43: 57:42:d3:9d:ae:e0:16:b0:a2:91:cb:d4:77:f8:3c: 96:87:ee:53:16:26:6b:de:ea:f3:58:ce:cd:90:c5: 67:9d:d0:10:17:5a:d4:fa:80:f7:af:0e:a8:85:91: 84:b3:cc:93:f1:02:23:36:86:3d:42:9f:c1:26:20: d1:35:8d:3b:fa:94:af:56:7b:c1:53:b2:38:74:47: 82:a6:aa:87:d6:3e:17:58:8b:46:25:a4:01:f8:0a: 26:1d:7d:48:26:f1:98:5a:30:2d:c4:94:1a:46:8c: a8:e8:38:59:c4:84:ea:69:30:fd:c7:66:bf:f6:3f: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:17:E2:D4:59:09:F2:B9:A9:69:7F:E6:A7:CB:7D:F4:1B:AA:EA:DA X509v3 Authority Key Identifier: keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:59:21:0a:6d:7f:e4:71:ce:06:13:9b:55:34:67:56:58:e8: b7:ef:af:91:a4:8f:2e:ce:87:c2:16:1f:0e:56:93:4b:f7:d1: 9b:53:cc:cc:fb:e0:c3:db:72:7d:9f:79:2c:a1:ad:bf:71:29: 14:5b:3f:01:74:ce:61:a9:9a:e0:ce:02:e9:b6:f1:b6:26:ff: 19:fc:45:69:b2:e3:14:a1:df:ee:28:90:e9:5a:0a:8d:8b:8e: 30:b7:78:46:ec:1c:d1:f6:56:41:a8:82:62:da:e4:87:e8:44: 81:25:25:b4:63:af:9c:1a:f0:57:41:fc:1c:6a:56:08:7c:67: 8e:b0:27:c4:dc:83:2a:fb:18:08:67:f2:a6:18:80:fa:d4:66: 60:79:92:d6:15:9a:f7:37:dc:d0:9c:6a:78:e6:49:67:ff:69: da:2d:6b:f5:6a:91:a4:d0:e9:31:93:18:03:72:e4:5a:68:87: e7:8b:a5:38:36:40:da:2d:b0:76:c5:93:2e:fb:c7:67:64:92: 66:79:b4:68:f6:71:24:74:82:ff:7b:52:85:4f:4c:53:20:e8: 27:e2:cb:9d:14:41:87:f7:92:d4:1b:8e:b0:53:06:d5:f4:b3: ca:09:81:ab:26:22:a8:fe:26:a0:71:7c:2f:98:b4:61:5f:20: dc:87:19:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHooL02YVTF77IWzIvNFpDRMDb1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDQjBGNThCMUQ3OUE3NTlEOTE0QUY5N0JBMTI4N0Mz OUZFOURGRDAeFw0yNTA3MDMwOTU1MjdaFw0yNTA3MDQxMjQwMjdaMDMxMTAvBgNV BAMTKEQ2MTdFMkQ0NTkwOUYyQjlBOTY5N0ZFNkE3Q0I3REY0MUJBQUVBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpehhy1SJypgZVh6BW7rzAjQyn BNGnU2y82aM/yULL/Kjp01qkvbyMn1/xHh4NBPj4J8xLSaOQ77ShEocLhBxrxpax HFjWqcNeV1Bs19z0dBVGJ0akgevau6EFn4UKXs9Uu8lKW2V/OoD/z7sryN5rlwkN BEP51PD1NQmG7tm5QHb6jxUPQ1dC052u4BawopHL1Hf4PJaH7lMWJmve6vNYzs2Q xWed0BAXWtT6gPevDqiFkYSzzJPxAiM2hj1Cn8EmINE1jTv6lK9We8FTsjh0R4Km qofWPhdYi0YlpAH4CiYdfUgm8ZhaMC3ElBpGjKjoOFnEhOppMP3HZr/2P0xZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1hfi1FkJ8rmpaX/mp8t99Buq6towHwYDVR0j BBgwFoAUMMsPWLHXmnWdkUr5e6EofDn+nf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQdGNEUUdXR2VtMXJneXFvbU03azFLaWd1bXZYUHpqZjNHcUJ1ZVlu RUUvMS8zMENCMEY1OEIxRDc5QTc1OUQ5MTRBRjk3QkExMjg3QzM5RkU5REZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwQ0IwRjU4QjFENzlBNzU5 RDkxNEFGOTdCQTEyODdDMzlGRTlERkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQdGNEUUdXR2VtMXJneXFvbU03azFLaWd1bXZYUHpqZjNHcUJ1ZVluRUUvMS8z MENCMEY1OEIxRDc5QTc1OUQ5MTRBRjk3QkExMjg3QzM5RkU5REZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcFkhCm1/5HHOBhObVTRnVljot++vkaSPLs6HwhYfDlaTS/fRm1PMzPvgw9ty fZ95LKGtv3EpFFs/AXTOYama4M4C6bbxtib/GfxFabLjFKHf7iiQ6VoKjYuOMLd4 Ruwc0fZWQaiCYtrkh+hEgSUltGOvnBrwV0H8HGpWCHxnjrAnxNyDKvsYCGfyphiA +tRmYHmS1hWa9zfc0JxqeOZJZ/9p2i1r9WqRpNDpMZMYA3LkWmiH54ulODZA2i2w dsWTLvvHZ2SSZnm0aPZxJHSC/3tShU9MUyDoJ+LLnRRBh/eS1BuOsFMG1fSzygmB qyYiqP4moHF8L5i0YV8g3IcZgA== -----END CERTIFICATE-----Generated at Thu Jul 3 18:10:36 2025 by rpki-client