$ rpki-client -vvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft File: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json) Hash identifier: RnqiDJXakWy0tpl3zuuN4hZF2FMM3CHWvKtvVQN+p1Y= Subject key identifier: 38:93:08:6B:65:E3:E4:7C:37:9F:D4:E8:0C:63:87:A2:BD:38:09:34 Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3 Certificate issuer: /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3 Certificate serial: 3AF9DF17CF7A6ED3758718D4BCD8FE08A7DBE2AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft Manifest number: 020B Signing time: Sat 23 Aug 2025 06:24:15 +0000 Manifest this update: Sat 23 Aug 2025 06:19:15 +0000 Manifest next update: Sun 24 Aug 2025 06:53:15 +0000 Files and hashes: 1: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: vk9OVW3c5Q5DiZcyAu6ta/V/T9+fv3MLFRCQpej+qY8=) 2: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: ieRIrM8Ny5p80dT7b969zuXi0G0le+0zXn+sMeziFnU=) 3: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: G4iDjim9ZP2mcYoqhTWD71U7yEb2XLo3UK/gaEO33kY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 06:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f9:df:17:cf:7a:6e:d3:75:87:18:d4:bc:d8:fe:08:a7:db:e2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3 Validity Not Before: Aug 23 06:19:15 2025 GMT Not After : Aug 24 06:53:15 2025 GMT Subject: CN=3893086B65E3E47C379FD4E80C6387A2BD380934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:bf:ae:7c:4e:aa:5d:e5:41:02:20:0f:af: 6c:f7:5b:20:34:15:59:c7:99:23:58:ec:ce:bd:bd: ce:24:8f:12:75:6c:00:f9:f7:b2:be:50:83:b0:f2: b5:5d:8b:bf:97:f6:66:7c:e2:f0:d4:f6:b8:d4:a7: a7:2c:11:45:cd:1d:1a:22:86:45:c0:0c:89:6a:02: 1c:64:f7:88:bd:94:78:9f:9b:2a:c7:5d:4b:8d:38: d9:71:98:f5:9e:32:b7:a5:bf:a5:a0:6a:ea:60:cc: 93:f6:67:dd:09:e3:8a:69:f2:e4:8e:2d:47:1b:23: 1e:36:a2:1d:15:0d:25:aa:71:55:aa:85:52:e9:a2: 10:ce:cf:e2:ef:ba:b2:3c:ea:f2:d9:b4:8a:14:02: c0:df:35:9f:81:b7:43:2a:49:41:6c:34:6f:d1:4a: 2f:bb:ee:ee:b0:7c:f2:74:69:e7:69:40:85:99:7c: 11:d4:bf:0b:79:0a:8e:22:ee:e7:7d:2a:be:24:f3: 92:bb:36:d2:1b:ab:82:dc:3b:2b:95:60:9f:44:8d: 1b:05:b4:a4:10:71:a1:68:e0:08:f5:b7:05:9b:77: 4b:96:1c:95:ae:f2:e1:fb:fc:bd:f2:de:8f:e5:31: 09:ca:27:9c:f4:12:b8:ec:19:ba:f4:f7:05:4f:cb: 11:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:93:08:6B:65:E3:E4:7C:37:9F:D4:E8:0C:63:87:A2:BD:38:09:34 X509v3 Authority Key Identifier: keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d1:ff:01:20:3f:b6:3c:03:59:69:28:7e:81:37:ca:4e:ac: f1:fa:18:0e:08:0e:13:91:be:ed:d6:92:d6:fd:82:71:69:55: 86:95:5d:5e:74:89:fa:31:93:5f:53:2a:60:36:96:d7:17:e4: 3f:be:60:19:91:dc:d3:20:6a:d7:5d:ed:84:ef:78:d6:98:a5: e1:7e:5d:81:30:be:3f:89:73:07:c7:bc:d2:f4:da:0b:28:e4: 6c:4f:ac:e5:43:b0:1b:04:6f:91:37:5a:26:90:76:01:f1:19: f0:d6:b8:05:c8:7c:20:2d:2b:fa:b8:2c:c6:1e:1c:cd:4c:27: 93:ef:9e:f3:5d:1e:16:9a:cd:06:7a:12:f7:78:b6:95:28:12: e4:b2:67:f9:d9:4c:53:ff:53:3f:32:84:3d:02:b0:74:85:45: 1e:8c:b5:ac:5d:19:fe:2b:5f:e7:74:e4:0e:2c:c6:d1:65:ad: ad:42:9d:08:e8:8b:30:4a:67:8b:df:d5:6d:40:a2:bb:09:ea: a4:fc:37:4d:68:30:11:69:d6:45:6f:ab:22:b8:c3:12:1c:04: fa:a1:4e:49:1d:f3:21:59:68:b5:32:55:01:6a:84:49:f7:b2: 8e:dc:9c:2c:1f:65:38:24:69:bb:86:e3:c3:0e:5d:21:14:3a: a2:d4:29:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOvnfF896btN1hxjUvNj+CKfb4qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBDMzNBN0ZCNUZGRENDRUM5OUVFRjhBNjlDQUY5MUQ1 NzkxQTlBMzAeFw0yNTA4MjMwNjE5MTVaFw0yNTA4MjQwNjUzMTVaMDMxMTAvBgNV BAMTKDM4OTMwODZCNjVFM0U0N0MzNzlGRDRFODBDNjM4N0EyQkQzODA5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTL+ufE6qXeVBAiAPr2z3WyA0 FVnHmSNY7M69vc4kjxJ1bAD597K+UIOw8rVdi7+X9mZ84vDU9rjUp6csEUXNHRoi hkXADIlqAhxk94i9lHifmyrHXUuNONlxmPWeMrelv6WgaupgzJP2Z90J44pp8uSO LUcbIx42oh0VDSWqcVWqhVLpohDOz+LvurI86vLZtIoUAsDfNZ+Bt0MqSUFsNG/R Si+77u6wfPJ0aedpQIWZfBHUvwt5Co4i7ud9Kr4k85K7NtIbq4LcOyuVYJ9EjRsF tKQQcaFo4Aj1twWbd0uWHJWu8uH7/L3y3o/lMQnKJ5z0ErjsGbr09wVPyxEtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOJMIa2Xj5Hw3n9ToDGOHor04CTQwHwYDVR0j BBgwFoAUUMM6f7X/3M7Jnu+Kacr5HVeRqaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZ S3EvMC81MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzMzQTdGQjVGRkRDQ0VD OTlFRUY4QTY5Q0FGOTFENTc5MUE5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZS3EvMC81 MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUtH/ASA/tjwDWWkofoE3yk6s8foYDggOE5G+7daS1v2CcWlVhpVdXnSJ+jGT X1MqYDaW1xfkP75gGZHc0yBq113thO941pil4X5dgTC+P4lzB8e80vTaCyjkbE+s 5UOwGwRvkTdaJpB2AfEZ8Na4Bch8IC0r+rgsxh4czUwnk++e810eFprNBnoS93i2 lSgS5LJn+dlMU/9TPzKEPQKwdIVFHoy1rF0Z/itf53TkDizG0WWtrUKdCOiLMEpn i9/VbUCiuwnqpPw3TWgwEWnWRW+rIrjDEhwE+qFOSR3zIVlotTJVAWqESfeyjtyc LB9lOCRpu4bjww5dIRQ6otQpvg== -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:01 2025 by rpki-client