
$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
File:                     8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft (raw, json)
Hash identifier:          SYcDyo7KCZKMQUEzJjjBFfdmNdvMoJfBXKCR7cM93MM=
Subject key identifier:   65:9D:8A:1D:CB:E0:96:65:25:32:81:D7:BD:28:94:53:8A:3F:65:33
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       08CF943F8E5D8E7C864BEDA10ACE9CB42F8327CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
Manifest number:          027F
Signing time:             Tue 04 Nov 2025 13:51:05 +0000
Manifest this update:     Tue 04 Nov 2025 13:46:05 +0000
Manifest next update:     Wed 05 Nov 2025 14:44:05 +0000
Files and hashes:         1: 8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl (hash: lJBr4Sw3oO7uuxUIyZ4hzAULyRRtqkadiy98CbIZ9B4=)
                          2: 323830343a336338303a3a2f33322d313238203d3e20323636323136.roa (hash: Joy2sepoO+FIC2vMr6AO34cX5OproAo288/h6AiK80Q=)
                          3: 3230302e37312e37322e302f32322d3332203d3e20323636323136.roa (hash: YvegZmyo9sJ4pcNnNHBjTBF2t5WeDgSktWpePZYDq0g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 14:44:05 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cf:94:3f:8e:5d:8e:7c:86:4b:ed:a1:0a:ce:9c:b4:2f:83:27:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Nov  4 13:46:05 2025 GMT
            Not After : Nov  5 14:44:05 2025 GMT
        Subject: CN=659D8A1DCBE09665253281D7BD2894538A3F6533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:3f:e0:79:c8:55:29:e9:da:99:e8:60:49:
                    a6:18:0f:75:7c:59:b0:83:7c:1f:18:7b:0c:83:b3:
                    fc:e5:aa:b3:3a:7b:e6:9d:e9:79:fd:09:13:84:8e:
                    01:50:8d:25:af:e0:3f:5a:9e:96:36:f3:a1:ff:40:
                    d1:46:42:44:69:43:f5:9a:ac:0c:1d:3e:e0:99:28:
                    0d:30:87:5f:c5:76:40:dd:23:e2:f4:28:a4:df:a3:
                    a4:53:e3:a1:7f:59:b1:78:cb:73:62:85:b4:a8:a3:
                    60:2f:18:69:00:50:f5:59:38:dd:29:fd:33:a2:cc:
                    ce:47:f9:b8:c3:f3:64:e8:d7:cb:25:1b:45:1e:92:
                    34:0b:cd:ad:df:74:2b:03:8f:31:78:9b:6a:2c:1d:
                    39:e1:e7:e5:9e:c6:b6:ce:cc:d2:a6:08:1b:1f:63:
                    24:95:90:57:2b:7e:59:6d:d7:1b:e4:61:a4:53:7f:
                    90:f6:55:8c:ac:48:dc:36:0e:9b:55:f4:7f:73:55:
                    05:8e:1e:ad:41:7b:b4:64:37:56:21:39:85:eb:92:
                    ae:4c:ac:cd:96:71:8d:7a:db:48:6d:7d:ec:12:f2:
                    1a:c1:2c:7a:c1:79:48:eb:93:be:e6:5c:e1:ce:bd:
                    f2:93:1c:38:43:cb:3b:6d:52:38:ee:2e:32:61:fa:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9D:8A:1D:CB:E0:96:65:25:32:81:D7:BD:28:94:53:8A:3F:65:33
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         03:91:66:2f:60:de:f6:0b:f3:9b:e3:5c:23:8b:58:3a:cd:8f:
         43:38:a7:7d:c6:75:1b:32:bf:d9:f0:43:0d:a9:f6:5b:f4:be:
         eb:af:63:b7:f7:ea:08:4a:05:af:ef:4d:62:44:a0:fa:68:6f:
         dd:b4:a0:ab:f7:e4:59:dd:cb:a9:80:e7:81:14:5c:82:cc:9c:
         bf:dd:9d:5b:d4:38:9c:5a:54:cc:55:2c:0f:2e:3c:25:ac:22:
         b8:1a:2c:8f:b1:ef:55:6d:55:38:ef:38:63:1c:53:24:da:0c:
         54:e3:88:5d:60:30:fb:70:60:c8:d7:b6:de:56:60:d0:c0:98:
         37:a9:ec:52:6d:2e:77:63:e8:94:67:d4:79:74:47:85:7f:97:
         a1:89:e9:8d:c4:d3:a3:85:e9:dc:2b:84:9f:e3:74:32:df:6c:
         d0:70:2b:ba:78:0e:ef:57:74:fa:2e:68:11:7b:84:6d:43:08:
         b9:c0:81:e5:54:fd:1c:e9:5f:f9:eb:90:2f:70:e5:ff:34:e2:
         28:5e:e6:98:c6:a1:fc:49:80:35:61:cc:78:b7:c8:e0:9e:e5:
         1b:24:9f:24:bb:b2:9d:a3:ac:b7:7b:1b:52:b1:30:c1:a7:15:
         9c:a7:ed:86:45:dc:fc:e1:15:23:f5:d0:50:ff:71:b7:6e:33:
         0f:bb:99:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCM+UP45djnyGS+2hCs6ctC+DJ8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERFMUVCRjRFRTMzNDQ1RTM5OEJGNTVDN0JGQkIwNTRF
ODU0NkZGRDAeFw0yNTExMDQxMzQ2MDVaFw0yNTExMDUxNDQ0MDVaMDMxMTAvBgNV
BAMTKDY1OUQ4QTFEQ0JFMDk2NjUyNTMyODFEN0JEMjg5NDUzOEEzRjY1MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtD/gechVKenamehgSaYYD3V8
WbCDfB8YewyDs/zlqrM6e+ad6Xn9CROEjgFQjSWv4D9anpY286H/QNFGQkRpQ/Wa
rAwdPuCZKA0wh1/FdkDdI+L0KKTfo6RT46F/WbF4y3NihbSoo2AvGGkAUPVZON0p
/TOizM5H+bjD82To18slG0UekjQLza3fdCsDjzF4m2osHTnh5+WexrbOzNKmCBsf
YySVkFcrfllt1xvkYaRTf5D2VYysSNw2DptV9H9zVQWOHq1Be7RkN1YhOYXrkq5M
rM2WcY1620htfewS8hrBLHrBeUjrk77mXOHOvfKTHDhDyzttUjjuLjJh+gwLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZZ2KHcvglmUlMoHXvSiUU4o/ZTMwHwYDVR0j
BBgwFoAUjeHr9O4zRF45i/Vce/uwVOhUb/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMC84REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTFFQkY0RUUzMzQ0NUUz
OThCRjU1QzdCRkJCMDU0RTg1NDZGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2clYvMC84
REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA5FmL2De9gvzm+NcI4tYOs2PQzinfcZ1GzK/2fBDDan2W/S+669jt/fqCEoF
r+9NYkSg+mhv3bSgq/fkWd3LqYDngRRcgsycv92dW9Q4nFpUzFUsDy48JawiuBos
j7HvVW1VOO84YxxTJNoMVOOIXWAw+3BgyNe23lZg0MCYN6nsUm0ud2PolGfUeXRH
hX+XoYnpjcTTo4Xp3CuEn+N0Mt9s0HArungO71d0+i5oEXuEbUMIucCB5VT9HOlf
+euQL3Dl/zTiKF7mmMah/EmANWHMeLfI4J7lGySfJLuynaOst3sbUrEwwacVnKft
hkXc/OEVI/XQUP9xt24zD7uZKQ==
-----END CERTIFICATE-----
Generated at Tue Nov  4 16:02:55 2025 by rpki-client