$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft File: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft (raw, json) Hash identifier: FtEAvSHqtW5urOm2c30Vvu5udtccJB3UogPonjrzGp4= Subject key identifier: 91:51:C4:A6:77:C7:C4:52:3E:25:2A:30:C1:CE:6E:0A:E9:DF:7F:C3 Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 Certificate issuer: /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Certificate serial: 2545D17B399E96BE1BD4FF7D9FAFC161D7ECDE22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft Manifest number: 01BA Signing time: Mon 20 Oct 2025 07:04:21 +0000 Manifest this update: Mon 20 Oct 2025 06:59:21 +0000 Manifest next update: Tue 21 Oct 2025 07:50:21 +0000 Files and hashes: 1: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl (hash: R8OyX7JFxsz+27eMqdbn2MmiIiYBpuExuP0ztWZhhjw=) 2: 323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (hash: B+W9Frc+XlYM7J/MsTk/HS6qJWiZIbS4YJ+YQvXnnuc=) 3: 3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (hash: rL+TkHgeBzF/RxGQbctSGIejhaFIapqJpjb9Ehb1bjU=) 4: 3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa (hash: 5v9hnDEi09hRUO2yXK4a7ymdq4lnC5yaazp+8/R5Opo=) 5: 323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (hash: DAqu5vHYMmBzgjKw3m7YZkJtCc2eRZUK716q7SojePk=) 6: 323830343a313239383a3a2f33352d3438203d3e20323633343836.roa (hash: sljh31mJ0RJTBcb4KweO4CaaM79EEO0P440gQgwgF2U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:45:d1:7b:39:9e:96:be:1b:d4:ff:7d:9f:af:c1:61:d7:ec:de:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Validity Not Before: Oct 20 06:59:21 2025 GMT Not After : Oct 21 07:50:21 2025 GMT Subject: CN=9151C4A677C7C4523E252A30C1CE6E0AE9DF7FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:28:e4:a1:1a:23:ee:f9:ac:31:4f:9f:4d: 92:fa:f3:74:5c:cc:f7:ac:57:6b:55:98:f4:7e:1f: 86:ed:67:5a:ce:33:7a:08:53:7e:84:1b:ed:07:29: ca:84:c9:3b:65:00:d4:26:09:91:6a:54:e4:cc:f4: 54:b8:f0:fd:30:1b:da:ef:27:49:57:fd:ba:b5:16: ce:80:e0:ac:6b:b9:fb:fa:c3:10:c2:f9:b0:db:62: f9:41:a3:1a:78:6e:41:f4:90:88:45:48:d6:b0:04: 19:53:04:94:e6:93:42:dd:cd:63:ac:bd:07:3b:f9: bf:fe:21:bb:79:1a:91:55:02:b7:3c:c6:98:d4:2b: 8a:10:55:ad:4b:76:5d:c6:fa:75:54:be:5e:e6:a7: d8:47:8e:7b:6a:a9:d3:88:ae:55:10:7d:cf:5b:3e: 78:19:a2:85:07:37:5e:aa:43:db:0d:97:9f:b3:93: 41:c7:a5:e9:a2:ea:12:b7:26:4b:b7:04:8e:42:04: 1e:de:b7:b5:0e:b8:12:72:b9:01:50:be:9c:e2:cb: e9:6e:a3:30:94:d1:c1:a2:60:37:fb:30:61:12:b1: 2e:90:52:64:7e:56:21:eb:ad:29:29:30:71:c4:bd: a9:61:7b:e0:0a:fa:fd:69:a6:06:26:0e:b6:1d:aa: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:C4:A6:77:C7:C4:52:3E:25:2A:30:C1:CE:6E:0A:E9:DF:7F:C3 X509v3 Authority Key Identifier: keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:67:82:07:fb:ba:f7:93:2e:6b:4f:94:62:d8:12:b9:83:57: b8:35:c5:20:53:be:22:da:de:77:97:f0:b9:e7:3e:f3:69:5b: 92:46:24:68:65:23:61:d2:23:7b:b1:84:1c:2e:00:16:a8:20: 8b:f2:15:d9:91:e3:f1:2a:a4:b9:4f:56:46:fb:6e:d5:61:a1: 88:f3:fe:1e:48:3b:e3:38:f4:76:7a:d2:2a:45:a9:24:80:c9: cd:b0:3e:53:d1:e7:f4:db:ef:b6:20:3e:13:75:b7:b0:0c:de: 5a:29:f5:c6:10:f9:52:78:15:35:73:8c:f3:7b:23:8a:7e:63: 73:2e:b7:f0:25:78:d1:50:aa:8f:57:e4:9e:02:e6:9d:a4:15: ed:0d:fd:b9:e3:a3:af:11:34:b5:0d:92:d7:77:24:95:1b:08: 96:d0:e7:87:d8:00:9b:a7:8f:cc:d2:24:b6:75:86:e2:78:4e: 82:90:f7:01:05:1a:28:85:28:a3:04:28:41:5f:a9:8e:41:11: 4d:70:29:07:03:09:14:e5:8e:6f:0e:e9:01:d9:81:07:61:11: df:1a:d8:51:92:25:74:55:f9:72:40:82:95:ed:db:e6:40:16: d3:ef:17:f2:2c:4a:e3:1d:f8:aa:e0:09:af:4f:57:69:b4:f6: 93:d5:79:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJUXRezmelr4b1P99n6/BYdfs3iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxNTdDRUZFRUJEMEM3RDhBMjlFQ0U0QTI0MzQzMjc3 MzJGRkRGNjAeFw0yNTEwMjAwNjU5MjFaFw0yNTEwMjEwNzUwMjFaMDMxMTAvBgNV BAMTKDkxNTFDNEE2NzdDN0M0NTIzRTI1MkEzMEMxQ0U2RTBBRTlERjdGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iijkoRoj7vmsMU+fTZL683Rc zPesV2tVmPR+H4btZ1rOM3oIU36EG+0HKcqEyTtlANQmCZFqVOTM9FS48P0wG9rv J0lX/bq1Fs6A4Kxrufv6wxDC+bDbYvlBoxp4bkH0kIhFSNawBBlTBJTmk0LdzWOs vQc7+b/+Ibt5GpFVArc8xpjUK4oQVa1Ldl3G+nVUvl7mp9hHjntqqdOIrlUQfc9b PngZooUHN16qQ9sNl5+zk0HHpemi6hK3Jku3BI5CBB7et7UOuBJyuQFQvpziy+lu ozCU0cGiYDf7MGESsS6QUmR+ViHrrSkpMHHEvalhe+AK+v1ppgYmDrYdqji1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkVHEpnfHxFI+JSowwc5uCunff8MwHwYDVR0j BBgwFoAUMBV87+69DH2KKezkokNDJ3Mv/fYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz ZmEvMC8zMDE1N0NFRkVFQkQwQzdEOEEyOUVDRTRBMjQzNDMyNzczMkZGREY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMTU3Q0VGRUVCRDBDN0Q4 QTI5RUNFNEEyNDM0MzI3NzMyRkZERjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkzZmEvMC8z MDE1N0NFRkVFQkQwQzdEOEEyOUVDRTRBMjQzNDMyNzczMkZGREY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqGeCB/u695Mua0+UYtgSuYNXuDXFIFO+Itred5fwuec+82lbkkYkaGUjYdIj e7GEHC4AFqggi/IV2ZHj8SqkuU9WRvtu1WGhiPP+Hkg74zj0dnrSKkWpJIDJzbA+ U9Hn9NvvtiA+E3W3sAzeWin1xhD5UngVNXOM83sjin5jcy638CV40VCqj1fkngLm naQV7Q39ueOjrxE0tQ2S13cklRsIltDnh9gAm6ePzNIktnWG4nhOgpD3AQUaKIUo owQoQV+pjkERTXApBwMJFOWObw7pAdmBB2ER3xrYUZIldFX5ckCCle3b5kAW0+8X 8ixK4x34quAJr09XabT2k9V5GA== -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:12 2025 by rpki-client