$ rpki-client -vvf rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft File: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft (raw, json) Hash identifier: B5FnDUN4j6pdXk18Yq0dvN490ZGKso4OoC3NL4YNbpI= Subject key identifier: 19:4B:5D:3D:32:D5:46:21:E7:81:15:A3:D9:3B:CA:EF:EE:CD:B4:26 Authority key identifier: 50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3 Certificate issuer: /CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3 Certificate serial: 3B4F545DAA24CA14B2D71A8EA738DBFDB8056AA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft Manifest number: 026A Signing time: Mon 03 Nov 2025 08:42:43 +0000 Manifest this update: Mon 03 Nov 2025 08:37:43 +0000 Manifest next update: Tue 04 Nov 2025 09:01:43 +0000 Files and hashes: 1: 323830343a376233303a3a2f33322d313238203d3e20323731343136.roa (hash: G4iDjim9ZP2mcYoqhTWD71U7yEb2XLo3UK/gaEO33kY=) 2: 3138312e3138392e34302e302f32322d3332203d3e20323731343136.roa (hash: ieRIrM8Ny5p80dT7b969zuXi0G0le+0zXn+sMeziFnU=) 3: 50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl (hash: RWmlElcw5riUsvd+BzGMrmTeqVui9heqmf+vVs+ogms=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4f:54:5d:aa:24:ca:14:b2:d7:1a:8e:a7:38:db:fd:b8:05:6a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3 Validity Not Before: Nov 3 08:37:43 2025 GMT Not After : Nov 4 09:01:43 2025 GMT Subject: CN=194B5D3D32D54621E78115A3D93BCAEFEECDB426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:3b:55:24:04:59:91:4c:db:8c:1e:50:0b: 73:a8:ee:cf:a3:36:3a:53:14:3e:a0:df:f2:e8:66: be:fb:73:7e:a0:24:eb:9c:4f:45:37:d8:37:87:0a: ce:39:8c:8c:65:2c:c2:c0:d5:92:7d:40:c7:1f:c0: 5b:2e:0e:04:f1:7e:75:19:9b:94:5d:43:0d:3a:1b: e9:2c:51:95:89:fd:6d:e0:66:1f:4a:45:75:2d:0b: 09:e7:57:6e:d6:c9:e4:4f:3a:36:10:25:ad:ee:7d: 4a:c5:34:89:8d:53:12:9a:36:65:8b:3f:22:f2:a1: d0:12:c5:5c:52:b8:5a:74:53:e0:42:ac:24:43:20: 9d:c3:85:1f:06:90:03:55:4d:4e:30:80:df:07:ef: 9b:dc:8b:6d:53:41:f1:28:7c:cb:3e:0e:a9:52:ef: 41:2a:cb:f5:05:b4:f8:7d:a7:18:bd:6b:14:24:25: 34:44:67:4b:e0:e5:39:f8:c5:0d:a6:e2:5a:27:77: 9e:5e:89:dc:f8:6b:0e:88:86:06:9c:1e:23:be:70: 7d:e9:a3:04:7e:bb:fe:c2:b3:e9:a2:81:6a:05:5a: 6e:22:6b:ec:7a:76:73:1f:8a:b0:9c:0b:d2:1d:ef: f5:00:25:5b:d3:6d:5e:36:aa:94:0a:e5:0e:11:94: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4B:5D:3D:32:D5:46:21:E7:81:15:A3:D9:3B:CA:EF:EE:CD:B4:26 X509v3 Authority Key Identifier: keyid:50:C3:3A:7F:B5:FF:DC:CE:C9:9E:EF:8A:69:CA:F9:1D:57:91:A9:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gtro4z2pXmYyVLwPVPzoswSGtDbw2xm1ekPmiZULRYKq/0/50C33A7FB5FFDCCEC99EEF8A69CAF91D5791A9A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0b:35:6b:ad:83:ff:6c:3c:f5:6c:be:c7:0b:26:dc:58:8e: f6:b9:45:e2:a7:7f:35:9a:36:99:1d:c8:26:50:d3:9f:2e:8b: 03:17:36:7f:29:b3:1a:fd:14:5d:f1:1f:95:81:7c:20:cc:5a: 30:b9:f2:e8:ea:01:31:88:23:52:0f:15:49:ac:27:9d:11:de: 6d:7a:46:fd:ac:50:25:9b:98:65:04:da:f8:a5:db:b9:99:b6: dc:82:08:ec:95:a9:a2:31:cc:34:f7:6c:70:ac:74:2f:20:00: 58:43:cc:75:73:07:27:33:b4:da:de:e4:a8:11:80:80:54:3d: b8:44:7a:3d:f4:2d:b3:4c:5a:09:85:f8:44:9f:86:c9:3b:f6: 4f:db:6d:a4:b1:6f:ea:f0:bf:48:ae:68:7d:dd:db:f6:99:42: 63:37:1a:4c:41:a2:eb:06:aa:82:10:75:92:37:c5:7c:84:28: ca:74:d7:51:d5:af:2d:34:a8:f9:4f:ee:89:85:22:16:2a:2b: 25:24:6a:5c:7a:63:a2:ac:a9:48:3f:1d:4f:6b:77:c6:26:8d: 89:51:c1:13:99:33:4a:23:0a:6c:0a:95:e2:02:21:b7:b4:10: 8d:3b:20:d0:26:34:b6:d6:96:cb:f5:77:92:73:ed:09:45:5d: cb:3c:65:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO09UXaokyhSy1xqOpzjb/bgFaqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBDMzNBN0ZCNUZGRENDRUM5OUVFRjhBNjlDQUY5MUQ1 NzkxQTlBMzAeFw0yNTExMDMwODM3NDNaFw0yNTExMDQwOTAxNDNaMDMxMTAvBgNV BAMTKDE5NEI1RDNEMzJENTQ2MjFFNzgxMTVBM0Q5M0JDQUVGRUVDREI0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDjtVJARZkUzbjB5QC3Oo7s+j NjpTFD6g3/LoZr77c36gJOucT0U32DeHCs45jIxlLMLA1ZJ9QMcfwFsuDgTxfnUZ m5RdQw06G+ksUZWJ/W3gZh9KRXUtCwnnV27WyeRPOjYQJa3ufUrFNImNUxKaNmWL PyLyodASxVxSuFp0U+BCrCRDIJ3DhR8GkANVTU4wgN8H75vci21TQfEofMs+DqlS 70Eqy/UFtPh9pxi9axQkJTREZ0vg5Tn4xQ2m4lond55eidz4aw6IhgacHiO+cH3p owR+u/7Cs+migWoFWm4ia+x6dnMfirCcC9Id7/UAJVvTbV42qpQK5Q4RlNZzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGUtdPTLVRiHngRWj2TvK7+7NtCYwHwYDVR0j BBgwFoAUUMM6f7X/3M7Jnu+Kacr5HVeRqaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZ S3EvMC81MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwQzMzQTdGQjVGRkRDQ0VD OTlFRUY4QTY5Q0FGOTFENTc5MUE5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3RybzR6MnBYbVl5Vkx3UFZQem9zd1NHdERidzJ4bTFla1BtaVpVTFJZS3EvMC81 MEMzM0E3RkI1RkZEQ0NFQzk5RUVGOEE2OUNBRjkxRDU3OTFBOUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQs1a62D/2w89Wy+xwsm3FiO9rlF4qd/NZo2mR3IJlDTny6LAxc2fymzGv0U XfEflYF8IMxaMLny6OoBMYgjUg8VSawnnRHebXpG/axQJZuYZQTa+KXbuZm23III 7JWpojHMNPdscKx0LyAAWEPMdXMHJzO02t7kqBGAgFQ9uER6PfQts0xaCYX4RJ+G yTv2T9ttpLFv6vC/SK5ofd3b9plCYzcaTEGi6waqghB1kjfFfIQoynTXUdWvLTSo +U/uiYUiFiorJSRqXHpjoqypSD8dT2t3xiaNiVHBE5kzSiMKbAqV4gIht7QQjTsg 0CY0ttaWy/V3knPtCUVdyzxl7g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:59 2025 by rpki-client