
$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
File:                     3806DB121C9269AE400CDA71100F88AF76F0469C.mft (raw, json)
Hash identifier:          DbpG7nQMl4nc94V+PyOhgFqZ+hEqDyy7I2QrYQsyQeo=
Subject key identifier:   E2:B1:28:AE:BB:B9:C8:90:59:62:AD:68:E0:C9:1E:D4:88:50:AB:08
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       107E2D70D734CEBBF550C230CAA62FFE2BBCDF14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
Manifest number:          F0
Signing time:             Mon 03 Nov 2025 23:33:03 +0000
Manifest this update:     Mon 03 Nov 2025 23:28:03 +0000
Manifest next update:     Wed 05 Nov 2025 00:20:03 +0000
Files and hashes:         1: 34352e36352e3230372e302f32342d3234203d3e20323636353434.roa (hash: HN+ibNQPnjQKEy+6daDYwjC3EGgE2MpL0tKnPJaG6Q4=)
                          2: 34352e36352e3230352e302f32342d3234203d3e20323636353434.roa (hash: K/OR4CMDl8MGm0NCL5xsoeDPOZ5RPjzWr+x0ljdAQJg=)
                          3: 323830343a336461343a3a2f33322d3332203d3e20323636353434.roa (hash: ipwGkCTBQmX1cvsr0PUrqqEYXfnH+zyF+gvJgN8s0SY=)
                          4: 34352e36352e3230362e302f32342d3234203d3e20323636353434.roa (hash: Y7/wLaSwZ4owowIJ7oYhF3gfsNHPmnIp2UNsN/Kdd0Y=)
                          5: 34352e36352e3230342e302f32342d3234203d3e20323636353434.roa (hash: ZDV9joO7pQJGZb3hNWZAfEIDaKavwNz5Ecx2KuR8oRA=)
                          6: 3806DB121C9269AE400CDA71100F88AF76F0469C.crl (hash: THGCvnS6f+QqRWnk6yuUnesagIto2FfUIjkBB8uoRo8=)
                          7: 34352e36352e3230362e302f32332d3233203d3e20323636353434.roa (hash: dKH5+TtXiJzbmXC6uhYfTEatb/QA4MfJHTTM1xkrfTo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:20:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7e:2d:70:d7:34:ce:bb:f5:50:c2:30:ca:a6:2f:fe:2b:bc:df:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: Nov  3 23:28:03 2025 GMT
            Not After : Nov  5 00:20:03 2025 GMT
        Subject: CN=E2B128AEBBB9C8905962AD68E0C91ED48850AB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:11:f9:46:7d:c8:b7:b5:51:4b:40:8e:7b:
                    34:84:a9:71:01:33:5b:2f:2c:36:97:3b:66:b7:a0:
                    95:14:3b:42:d7:8d:fd:5b:12:bc:df:25:05:a5:18:
                    0b:58:58:eb:7b:5d:f8:04:9f:3e:bd:2a:74:22:f0:
                    2c:61:24:d6:ad:05:d7:b3:0b:82:15:77:e0:c7:1a:
                    c4:15:0b:5b:80:d3:ba:19:47:a7:91:68:e7:ab:b3:
                    ca:0e:41:6b:d3:6a:df:d6:fc:83:3f:68:66:ee:65:
                    81:b7:91:00:79:15:47:05:2f:8b:e2:de:87:42:b9:
                    7a:61:8c:09:a8:04:bc:25:a1:75:c3:58:a6:dd:6a:
                    63:b8:b8:24:57:da:e1:b5:71:39:fe:5e:55:a6:b8:
                    a1:c0:5a:91:7b:f5:05:f2:99:21:ae:a3:f6:70:b0:
                    48:8b:12:99:73:42:30:7e:13:a4:4c:0f:92:48:d7:
                    f7:c8:7b:4f:47:55:9b:2e:be:5f:fe:08:a5:b1:b8:
                    4d:89:62:07:4c:d9:18:9e:5a:18:b2:01:31:d0:e3:
                    5d:45:7d:3f:3c:b3:c7:93:69:53:a6:f9:eb:d2:9f:
                    3a:c7:4a:57:7b:45:9a:8f:09:9b:0b:19:30:77:a5:
                    35:fa:69:71:1a:a3:57:8b:cd:91:31:17:74:3d:27:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B1:28:AE:BB:B9:C8:90:59:62:AD:68:E0:C9:1E:D4:88:50:AB:08
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         88:8b:04:63:86:90:e4:98:f2:d9:50:fb:3f:a6:7c:23:a8:52:
         96:9b:23:a2:4c:c8:15:85:97:3e:ee:12:bf:81:a0:83:53:5b:
         f0:52:03:35:9a:2c:8f:f1:c1:2f:dd:73:8a:5a:81:8e:06:95:
         30:37:28:f8:9d:c7:17:0c:ca:e1:8e:43:6c:41:10:f4:3e:29:
         65:63:57:af:fc:35:37:ba:55:90:83:10:35:94:1a:78:17:2e:
         d6:6e:2a:e6:31:d6:5c:46:55:24:f5:c1:45:4d:cf:52:27:da:
         a1:96:09:d7:05:e8:67:dd:4e:ff:ab:50:9b:33:55:26:a5:d1:
         db:df:97:77:af:90:8a:37:9c:34:54:98:f5:a0:07:41:aa:bc:
         58:16:56:22:14:27:98:d2:37:80:7b:ef:ae:1a:14:45:30:4f:
         b9:a2:84:90:73:a5:91:91:9c:3b:9c:08:98:44:3b:1a:35:02:
         00:61:fe:29:0c:81:0e:a2:bf:a1:99:34:15:5c:a9:12:d0:cb:
         69:72:86:ab:ef:44:49:41:8c:3a:8d:a6:db:8d:3d:9b:ea:5a:
         d4:cf:17:50:fd:01:5b:9e:f1:47:31:39:36:7e:5e:bc:45:ee:
         ef:46:30:2d:a5:1d:17:7e:be:1f:a3:40:1c:d9:bb:2f:8d:73:
         e3:41:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 02:01:12 2025 by rpki-client