$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft File: 30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft (raw, json) Hash identifier: 0twciubFhPelWRyIf+627eoa2EHwOhiWKUZzy0Lw7HU= Subject key identifier: D7:B6:8A:50:53:89:E1:00:BE:02:4E:31:A0:19:D8:D3:17:C7:C1:42 Authority key identifier: 30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87 Certificate issuer: /CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087 Certificate serial: 194E1B23CF051F1A4AD222F648064F4AC9B10CFD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft Manifest number: DB Signing time: Tue 04 Nov 2025 17:39:49 +0000 Manifest this update: Tue 04 Nov 2025 17:34:49 +0000 Manifest next update: Wed 05 Nov 2025 19:22:49 +0000 Files and hashes: 1: 30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl (hash: DqxQTLlNyXjgaW+GkXzkgcvpiCbnu480v1Bp5KxQnYI=) 2: 323830343a323431633a3a2f33322d313238203d3e20323634323032.roa (hash: yfHnL5Ueg8Qt6Uo4nz1szJMxESYU5SdhArCzKjhR6+0=) 3: 3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa (hash: s+b+ZHmPAQ0TIoOTrYFQTSH7aurDcQ7wHWugqIyTATw=) 4: 3137302e3233332e34342e302f32322d3332203d3e20323634323032.roa (hash: jB7zTojyLcQTnPsiTq2vVUezgCAKqouyOG8ZGRUVx+w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4e:1b:23:cf:05:1f:1a:4a:d2:22:f6:48:06:4f:4a:c9:b1:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D2D3ADA5D5272BEF2DFE936089A2433E4EA087 Validity Not Before: Nov 4 17:34:49 2025 GMT Not After : Nov 5 19:22:49 2025 GMT Subject: CN=D7B68A505389E100BE024E31A019D8D317C7C142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:fb:07:f2:52:7f:79:32:a5:20:b9:34:5a: 30:e4:f4:69:ba:f6:b4:f0:8c:31:af:34:31:af:41: e5:93:9c:43:47:e8:7d:b2:22:7c:15:22:19:cb:95: 3a:3c:a7:84:b0:08:25:30:17:9f:53:f2:75:f3:66: a2:0e:46:e1:e8:9a:eb:0b:6b:75:24:00:d8:37:65: 6a:c7:e3:7a:5f:eb:49:28:74:36:2b:f1:b5:0d:d2: 06:fc:e8:72:b1:7c:7f:4e:c6:60:b7:90:01:43:70: 79:12:49:ff:28:34:37:86:c3:e9:96:8e:cc:6e:63: 86:83:36:59:dc:cc:07:b0:97:6d:e9:94:9c:e6:fe: 0b:2c:d2:37:b6:c2:74:47:4c:4d:de:19:bb:13:d1: 0b:91:8d:00:80:13:9f:01:a9:88:5a:e2:cf:f4:c3: 09:82:41:f9:cd:b2:fc:3d:13:8c:17:b6:de:2d:63: ae:8c:9c:2d:59:97:b3:03:12:ef:8c:ff:8a:0d:75: 96:7b:1f:2a:e6:87:c9:53:df:4a:22:ef:53:4c:38: 35:fa:1e:75:ea:a4:46:cd:62:ca:72:b4:64:73:17: b0:61:43:c1:5b:db:8d:e2:65:12:b8:7f:a7:2d:d7: 2b:4d:fd:52:c4:0b:54:4f:00:36:10:ce:da:0f:6f: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:8A:50:53:89:E1:00:BE:02:4E:31:A0:19:D8:D3:17:C7:C1:42 X509v3 Authority Key Identifier: keyid:30:D2:D3:AD:A5:D5:27:2B:EF:2D:FE:93:60:89:A2:43:3E:4E:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/0/30D2D3ADA5D5272BEF2DFE936089A2433E4EA087.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7c:a0:af:9d:ed:d8:4e:08:41:f9:31:b8:42:a8:a8:53:87: ba:6d:62:23:77:5a:14:8b:ad:6d:c5:1f:fd:e8:56:14:6b:39: d8:57:4c:77:02:e1:4a:0a:a3:ce:fa:7b:99:d2:f6:72:0f:f0: b6:99:19:da:47:94:c6:f5:52:55:68:15:f0:99:cf:14:9d:bf: 68:ae:d9:82:16:43:3d:9b:fc:eb:61:d0:55:9b:ba:b6:56:50: 50:2c:ba:bf:a1:e4:4f:c0:de:a0:90:9b:13:38:18:e8:56:3e: 03:fb:2c:a5:72:12:cf:5b:4b:06:2d:b6:84:0b:47:78:4f:e5: fa:4b:d2:3e:c7:53:33:ce:32:8a:af:4c:de:e4:73:7d:bd:a8: 0a:98:8d:9f:ed:ef:c0:dd:b6:23:c0:cd:17:7d:ce:76:0d:7b: c5:9b:fe:c7:d8:e1:c4:82:02:f1:6e:ce:6e:fa:44:70:0a:f8: 54:85:b4:bd:40:de:8c:9f:fa:1a:2a:d4:05:6d:8f:24:2a:4b: 91:ec:7b:f1:e9:12:00:b0:20:da:28:ad:c2:24:75:5d:d5:ae: d6:d5:44:dd:9e:26:6b:d3:64:01:c9:04:72:ab:39:c6:8c:96: dc:d8:de:69:dd:37:2c:72:0f:a6:1f:80:10:4f:af:24:b4:bf: 26:b3:78:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGU4bI88FHxpK0iL2SAZPSsmxDP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMkQzQURBNUQ1MjcyQkVGMkRGRTkzNjA4OUEyNDMz RTRFQTA4NzAeFw0yNTExMDQxNzM0NDlaFw0yNTExMDUxOTIyNDlaMDMxMTAvBgNV BAMTKEQ3QjY4QTUwNTM4OUUxMDBCRTAyNEUzMUEwMTlEOEQzMTdDN0MxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKfsH8lJ/eTKlILk0WjDk9Gm6 9rTwjDGvNDGvQeWTnENH6H2yInwVIhnLlTo8p4SwCCUwF59T8nXzZqIORuHomusL a3UkANg3ZWrH43pf60kodDYr8bUN0gb86HKxfH9OxmC3kAFDcHkSSf8oNDeGw+mW jsxuY4aDNlnczAewl23plJzm/gss0je2wnRHTE3eGbsT0QuRjQCAE58BqYha4s/0 wwmCQfnNsvw9E4wXtt4tY66MnC1Zl7MDEu+M/4oNdZZ7Hyrmh8lT30oi71NMODX6 HnXqpEbNYspytGRzF7BhQ8Fb243iZRK4f6ct1ytN/VLEC1RPADYQztoPb3ypAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU17aKUFOJ4QC+Ak4xoBnY0xfHwUIwHwYDVR0j BBgwFoAUMNLTraXVJyvvLf6TYImiQz5OoIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1 MWEvMC8zMEQyRDNBREE1RDUyNzJCRUYyREZFOTM2MDg5QTI0MzNFNEVBMDg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRDJEM0FEQTVENTI3MkJF RjJERkU5MzYwODlBMjQzM0U0RUEwODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1MWEvMC8z MEQyRDNBREE1RDUyNzJCRUYyREZFOTM2MDg5QTI0MzNFNEVBMDg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT3ygr53t2E4IQfkxuEKoqFOHum1iI3daFIutbcUf/ehWFGs52FdMdwLhSgqj zvp7mdL2cg/wtpkZ2keUxvVSVWgV8JnPFJ2/aK7ZghZDPZv862HQVZu6tlZQUCy6 v6HkT8DeoJCbEzgY6FY+A/sspXISz1tLBi22hAtHeE/l+kvSPsdTM84yiq9M3uRz fb2oCpiNn+3vwN22I8DNF33Odg17xZv+x9jhxIIC8W7ObvpEcAr4VIW0vUDejJ/6 GirUBW2PJCpLkex78ekSALAg2iitwiR1XdWu1tVE3Z4ma9NkAckEcqs5xoyW3Nje ad03LHIPph+AEE+vJLS/JrN49g== -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:37 2025 by rpki-client