
$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
File:                     72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft (raw, json)
Hash identifier:          8v76t+p9OAvcirdcfSJhuqO7D3wxwBlFs2zcJwK+BXQ=
Subject key identifier:   1A:16:5B:43:14:AC:35:DB:BD:7A:B8:8A:22:9E:CB:16:CE:93:60:09
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       109679A4D2F4FD0CA770508788486D9C755C75F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
Manifest number:          025E
Signing time:             Mon 03 Nov 2025 19:56:37 +0000
Manifest this update:     Mon 03 Nov 2025 19:51:37 +0000
Manifest next update:     Tue 04 Nov 2025 20:06:37 +0000
Files and hashes:         1: 72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl (hash: DAA9LOr9CVgH06m95PozSN4H1Q+ltbDsiaHZroO5w14=)
                          2: 323830343a373364343a3a2f33322d3332203d3e20323730393430.roa (hash: AQi3f1J1etCYnBqeCDOeKdNMCx9iYCCxXYkVIWYrTWw=)
                          3: 3133382e3235352e35342e302f32332d3234203d3e20323730393430.roa (hash: LkaL+jWEvNmci3pfvjn9NQk7mxSxS/nnYjJDxnhWXxA=)
                          4: 3133382e3235352e35322e302f32332d3233203d3e20323730393430.roa (hash: B/Qc3WvE33pfnzhM3H+wpBfTjH9i9qz7++ZdwgRwTf0=)
                          5: 3133382e3235352e35322e302f32342d3234203d3e20323730393430.roa (hash: Aygu0P+udnUgjOEEsXlTG58a5J0mrrsMMSmGpWWZMNM=)
                          6: 3133382e3235352e35332e302f32342d3234203d3e20323730393430.roa (hash: i4FraJIyyVtA6n/Vwpj9LQa7MmwhmipbllWXgI4Y2xc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
                          rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:06:37 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:96:79:a4:d2:f4:fd:0c:a7:70:50:87:88:48:6d:9c:75:5c:75:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Nov  3 19:51:37 2025 GMT
            Not After : Nov  4 20:06:37 2025 GMT
        Subject: CN=1A165B4314AC35DBBD7AB88A229ECB16CE936009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:b5:13:07:ba:d2:af:46:54:8c:eb:81:64:
                    55:8c:a0:17:43:b3:02:a1:8f:0b:90:fd:ad:b1:d3:
                    e0:6b:e1:48:cb:7f:be:c8:d0:42:f9:7e:f5:68:cd:
                    89:3b:33:bc:99:aa:7d:a3:06:5a:44:39:fe:6c:77:
                    07:56:9e:f1:20:b4:98:a0:81:a1:b3:86:ee:b1:31:
                    8f:49:6e:b4:46:ae:eb:1e:08:2f:02:25:1b:ef:89:
                    72:a8:84:67:63:a3:23:fb:6c:5a:4d:f0:75:71:9f:
                    92:31:e4:a6:7e:f9:49:a2:5e:0b:a5:39:d0:07:96:
                    38:76:0b:98:c5:17:4d:16:1f:de:c3:f0:62:a4:06:
                    63:8a:5b:32:28:28:e1:32:64:05:47:aa:c2:b5:8d:
                    03:46:4c:70:c2:34:a9:66:f8:da:fb:b5:c4:e6:74:
                    ca:93:3e:bb:2e:b5:a6:44:b9:c3:d3:13:97:42:b3:
                    7a:20:21:2d:2b:9f:2e:66:15:64:3d:c4:e3:85:38:
                    f6:c7:ca:3d:a2:f4:dc:dd:4c:de:4c:1c:fc:5e:c3:
                    c0:35:80:8c:bd:25:77:bd:ef:42:25:a3:78:d6:27:
                    65:2f:66:f1:b1:4d:e8:25:d7:2c:ab:55:ec:e5:1d:
                    bb:96:00:0b:72:1e:f3:e2:25:ef:11:e2:8b:cb:3d:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:16:5B:43:14:AC:35:DB:BD:7A:B8:8A:22:9E:CB:16:CE:93:60:09
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         49:ff:24:a9:d5:d5:27:6f:7b:d8:bd:91:4d:fd:b5:f7:ba:d8:
         20:9d:81:87:27:8d:53:85:9c:ad:76:e6:58:7d:4d:81:be:8b:
         f6:13:95:61:72:bd:71:a3:32:d7:de:c4:f5:5d:96:a2:63:26:
         55:e0:23:6a:01:f9:7a:a8:14:36:4e:7d:7a:f9:32:90:21:76:
         4a:cc:20:67:bb:c0:d8:95:ca:67:3f:f7:7f:f8:25:87:74:0c:
         6a:4a:19:5f:20:c1:ac:30:7c:dd:9f:b3:67:29:83:07:f9:9e:
         c2:c5:99:57:c2:74:47:d6:e7:48:67:73:e8:ab:bf:ba:b4:39:
         9a:f4:90:1f:cd:15:08:0a:ab:64:b7:ad:94:25:23:28:96:62:
         2c:2d:25:2f:c8:52:3a:f5:ee:0d:c3:c2:46:f4:a3:0d:53:a1:
         d5:92:dd:a2:46:92:4c:0c:d7:35:da:e4:7e:96:31:e2:2f:c9:
         ea:e9:65:7b:09:88:66:8c:49:1a:dd:d9:30:8e:a6:ca:77:bf:
         d3:9b:56:77:7e:ac:13:16:5e:f3:56:8c:f3:49:cb:07:12:ad:
         1b:b6:cd:a2:b6:2c:ae:ee:29:0a:46:3a:7c:84:d6:2f:08:02:
         19:4c:06:c3:4f:2b:31:5b:91:e7:23:e3:d7:92:3e:7a:72:51:
         6f:aa:0a:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEJZ5pNL0/QyncFCHiEhtnHVcdfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJGQ0RBMDdEN0Q1REJBNzdGQ0E0NjlENDBGMjFEODE1
N0YwNkFDMDAeFw0yNTExMDMxOTUxMzdaFw0yNTExMDQyMDA2MzdaMDMxMTAvBgNV
BAMTKDFBMTY1QjQzMTRBQzM1REJCRDdBQjg4QTIyOUVDQjE2Q0U5MzYwMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgbUTB7rSr0ZUjOuBZFWMoBdD
swKhjwuQ/a2x0+Br4UjLf77I0EL5fvVozYk7M7yZqn2jBlpEOf5sdwdWnvEgtJig
gaGzhu6xMY9JbrRGruseCC8CJRvviXKohGdjoyP7bFpN8HVxn5Ix5KZ++UmiXgul
OdAHljh2C5jFF00WH97D8GKkBmOKWzIoKOEyZAVHqsK1jQNGTHDCNKlm+Nr7tcTm
dMqTPrsutaZEucPTE5dCs3ogIS0rny5mFWQ9xOOFOPbHyj2i9NzdTN5MHPxew8A1
gIy9JXe970Ilo3jWJ2UvZvGxTegl1yyrVezlHbuWAAtyHvPiJe8R4ovLPWBRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGhZbQxSsNdu9eriKIp7LFs6TYAkwHwYDVR0j
BBgwFoAUcvzaB9fV26d/ykadQPIdgVfwasAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHU3Z0JyeGVTRVBXZTQxajFBMmtSQUdpWG1qQ0Y0Zzljd3ltQVFVUmR6
c2ovMC83MkZDREEwN0Q3RDVEQkE3N0ZDQTQ2OUQ0MEYyMUQ4MTU3RjA2QUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRkNEQTA3RDdENURCQTc3
RkNBNDY5RDQwRjIxRDgxNTdGMDZBQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHU3Z0JyeGVTRVBXZTQxajFBMmtSQUdpWG1qQ0Y0Zzljd3ltQVFVUmR6c2ovMC83
MkZDREEwN0Q3RDVEQkE3N0ZDQTQ2OUQ0MEYyMUQ4MTU3RjA2QUMwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASf8kqdXVJ2972L2RTf2197rYIJ2BhyeNU4WcrXbmWH1Ngb6L9hOVYXK9caMy
197E9V2WomMmVeAjagH5eqgUNk59evkykCF2SswgZ7vA2JXKZz/3f/glh3QMakoZ
XyDBrDB83Z+zZymDB/mewsWZV8J0R9bnSGdz6Ku/urQ5mvSQH80VCAqrZLetlCUj
KJZiLC0lL8hSOvXuDcPCRvSjDVOh1ZLdokaSTAzXNdrkfpYx4i/J6ullewmIZoxJ
Gt3ZMI6myne/05tWd36sExZe81aM80nLBxKtG7bNorYsru4pCkY6fITWLwgCGUwG
w08rMVuR5yPj15I+enJRb6oKYQ==
-----END CERTIFICATE-----
Generated at Tue Nov  4 00:29:48 2025 by rpki-client