$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft File: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft (raw, json) Hash identifier: ckWVfOLoAC3AyJJMQLleIS6jAfI+aYlj/atzte5YyFo= Subject key identifier: CB:E2:81:9B:8A:7E:BF:E2:37:4D:35:0D:07:B2:EB:A8:AA:CF:B4:F9 Authority key identifier: 30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 Certificate issuer: /CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Certificate serial: 512C848563AFCD7861127BF7D6248AB96832ADC8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft Manifest number: 028C Signing time: Wed 25 Mar 2026 21:59:35 +0000 Manifest this update: Wed 25 Mar 2026 21:54:35 +0000 Manifest next update: Fri 27 Mar 2026 01:09:35 +0000 Files and hashes: 1: 3139312e3234322e3234382e302f32312d3234203d3e20323633343836.roa (hash: glCLFbOxW2PCoRYdk4hxxyDsKYKPG8LjGydPR561h5I=) 2: 323830343a313239383a343030303a3a2f33352d3438203d3e20323633343836.roa (hash: /odm13J0Q0QBMhPTX/VMZh0ff32AD8dQ47t3ooxA/Dc=) 3: 323830343a313239383a3a2f33352d3438203d3e20323633343836.roa (hash: GeXN8AfUeZtZ6LJw4jHk7bMzBmH35tLmH0QHbZSaChY=) 4: 30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl (hash: IOCwoGwDyS9CaQNBpZX9BLYQk1FYbUCMhi1TF04yioM=) 5: 3137302e37392e3132382e302f32322d3234203d3e20323633343836.roa (hash: 9x6AeTnaxlFJN3EpyCOL1htkgeBO61dQPorErDQL9FI=) 6: 323830343a313239383a633030303a3a2f33342d3438203d3e20323633343836.roa (hash: 2qmrHaxk6Rv/luAiYpuIkARCcKBzgZsTcrcKH7VvjVM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 01:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2c:84:85:63:af:cd:78:61:12:7b:f7:d6:24:8a:b9:68:32:ad:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6 Validity Not Before: Mar 25 21:54:35 2026 GMT Not After : Mar 27 01:09:35 2026 GMT Subject: CN=CBE2819B8A7EBFE2374D350D07B2EBA8AACFB4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:08:51:72:4e:f2:02:2c:78:a5:b9:50:da: dd:bd:9e:ff:55:21:58:00:de:e2:4e:a4:ee:a1:ca: 1f:3a:17:31:9a:e2:5b:42:28:15:d9:9f:a1:1e:b2: bb:1d:c2:bb:d1:9a:52:be:fc:5f:87:08:be:8d:47: 58:79:9f:6f:2f:ea:4f:d5:77:8f:2e:bf:f7:74:1b: c5:8d:54:c1:b1:31:a9:38:a6:f5:67:1d:7b:6a:6d: a4:f0:99:23:20:7c:e3:99:c6:11:50:04:3d:a0:7a: 31:36:f6:b6:2b:33:57:32:7c:fa:29:08:92:2f:e7: 20:c3:c9:96:48:93:d5:50:a1:74:7d:76:bb:b0:e7: 44:e6:a6:0e:31:54:1f:8e:0e:52:0c:a1:cd:d0:1c: 51:1f:f5:cc:d7:6f:30:e3:8c:20:73:58:f4:14:9c: 7c:9d:ab:eb:7a:0d:55:2b:8a:81:1a:9e:6d:05:24: a0:aa:30:4a:e6:34:47:b1:86:23:d9:36:cb:65:5a: a3:73:13:5b:a6:0f:03:a8:a1:5b:1e:67:fe:a0:29: 2c:2c:cf:1b:87:6b:bc:6b:df:ad:2a:e0:9f:b1:47: 18:d5:66:da:88:c2:81:d9:a7:e3:d5:cd:fb:78:59: 04:ac:38:2a:87:63:c6:aa:44:d9:dc:2c:85:3d:22: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:81:9B:8A:7E:BF:E2:37:4D:35:0D:07:B2:EB:A8:AA:CF:B4:F9 X509v3 Authority Key Identifier: keyid:30:15:7C:EF:EE:BD:0C:7D:8A:29:EC:E4:A2:43:43:27:73:2F:FD:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/30157CEFEEBD0C7D8A29ECE4A2434327732FFDF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:53:72:f1:b6:6a:87:3a:62:82:e3:2f:58:5b:ed:a2:09:e8: d1:08:7c:88:83:ba:ec:b1:d0:35:eb:54:62:52:10:68:6a:a9: f4:b1:02:8f:4a:c0:ed:7b:31:6e:d6:cb:72:6e:51:1b:9c:6b: c4:29:4e:5b:35:9b:a3:34:d0:fb:55:06:3e:00:db:4e:81:57: 1d:db:27:3e:c9:3c:d1:af:f3:c7:06:c2:d5:21:6d:ec:e8:e1: 26:13:3b:52:74:ff:a2:5d:4e:7b:6e:30:4c:e9:58:a1:12:6e: c3:a8:43:03:94:96:a1:44:f4:ea:22:67:66:8d:1c:05:94:ad: 2f:6d:bd:20:ae:54:71:12:75:48:c3:7f:f0:f3:db:e3:71:23: 5b:da:ac:f1:46:f1:50:fe:9d:12:0e:ff:ff:0e:1a:17:cc:5a: 76:ae:b1:46:10:e7:db:93:08:51:75:2a:7c:b4:f5:89:28:f3: ee:b9:94:e8:0e:f6:71:c4:cb:8b:92:74:c1:44:b7:46:5d:e1: 28:b5:54:73:00:5d:d4:48:3c:57:ba:67:0d:8c:96:27:36:4d: 35:51:cf:9d:52:9d:24:34:a2:3d:02:49:c2:59:59:0c:7f:13: f2:06:e1:43:b2:d3:5a:9c:8b:94:10:2a:16:13:c0:b9:de:d1: 31:e9:76:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUSyEhWOvzXhhEnv31iSKuWgyrcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAxNTdDRUZFRUJEMEM3RDhBMjlFQ0U0QTI0MzQzMjc3 MzJGRkRGNjAeFw0yNjAzMjUyMTU0MzVaFw0yNjAzMjcwMTA5MzVaMDMxMTAvBgNV BAMTKENCRTI4MTlCOEE3RUJGRTIzNzREMzUwRDA3QjJFQkE4QUFDRkI0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCQhRck7yAix4pblQ2t29nv9V IVgA3uJOpO6hyh86FzGa4ltCKBXZn6EesrsdwrvRmlK+/F+HCL6NR1h5n28v6k/V d48uv/d0G8WNVMGxMak4pvVnHXtqbaTwmSMgfOOZxhFQBD2gejE29rYrM1cyfPop CJIv5yDDyZZIk9VQoXR9druw50Tmpg4xVB+ODlIMoc3QHFEf9czXbzDjjCBzWPQU nHydq+t6DVUrioEanm0FJKCqMErmNEexhiPZNstlWqNzE1umDwOooVseZ/6gKSws zxuHa7xr360q4J+xRxjVZtqIwoHZp+PVzft4WQSsOCqHY8aqRNncLIU9Ii8NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy+KBm4p+v+I3TTUNB7LrqKrPtPkwHwYDVR0j BBgwFoAUMBV87+69DH2KKezkokNDJ3Mv/fYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkz ZmEvMC8zMDE1N0NFRkVFQkQwQzdEOEEyOUVDRTRBMjQzNDMyNzczMkZGREY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMTU3Q0VGRUVCRDBDN0Q4 QTI5RUNFNEEyNDM0MzI3NzMyRkZERjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkZUSGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkzZmEvMC8z MDE1N0NFRkVFQkQwQzdEOEEyOUVDRTRBMjQzNDMyNzczMkZGREY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMlNy8bZqhzpiguMvWFvtogno0Qh8iIO67LHQNetUYlIQaGqp9LECj0rA7Xsx btbLcm5RG5xrxClOWzWbozTQ+1UGPgDbToFXHdsnPsk80a/zxwbC1SFt7OjhJhM7 UnT/ol1Oe24wTOlYoRJuw6hDA5SWoUT06iJnZo0cBZStL229IK5UcRJ1SMN/8PPb 43EjW9qs8UbxUP6dEg7//w4aF8xadq6xRhDn25MIUXUqfLT1iSjz7rmU6A72ccTL i5J0wUS3Rl3hKLVUcwBd1Eg8V7pnDYyWJzZNNVHPnVKdJDSiPQJJwllZDH8T8gbh Q7LTWpyLlBAqFhPAud7RMel2RA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:29 2026 by rpki-client