
$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
File:                     D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft (raw, json)
Hash identifier:          ABkBZdfxkNn9MkSxf47zzibfFCziuNyO88N6Y8ntw70=
Subject key identifier:   B7:83:2F:9B:DD:05:A4:90:AA:46:5C:3D:EA:1E:E3:09:DD:17:50:54
Authority key identifier: D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F
Certificate issuer:       /CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
Certificate serial:       2DE3D741CAFE127F297C5F3DD5F49525D649AA5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
Manifest number:          2B
Signing time:             Mon 03 Nov 2025 13:00:02 +0000
Manifest this update:     Mon 03 Nov 2025 12:55:02 +0000
Manifest next update:     Tue 04 Nov 2025 14:18:02 +0000
Files and hashes:         1: 3133382e3231392e3134382e302f32332d3233203d3e20323632383137.roa (hash: xpN+k+M2akVM40/LORTBoEGNBCFbHHlYibKgjbxJGfc=)
                          2: 3138362e3235302e3132302e302f32322d3232203d3e20323632383137.roa (hash: lfToZHqtduyDijj6fMvZQf6Jwusig2dOqhweWdgqU1U=)
                          3: D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl (hash: 45uehKCMSVyn7n256Kb9xNNn7K58LAH+uWf5fqWvu9Q=)
                          4: 3133382e3231392e3135302e302f32332d3233203d3e20323632383137.roa (hash: jc37Vl8L54zDn2JxYnD0lr2Ib5lXH9euJv8jSBTFYp4=)
                          5: 3133382e3231392e3135302e302f32342d3234203d3e20323632383137.roa (hash: 2/4RaOctfw8LfuDQ9giT0H/GD5HqoS84rzOu0u54Wyw=)
                          6: 3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa (hash: rVTai2u1AnhIB7DPlnyEUx5yX3PpO5T/wpzsnv/iENM=)
                          7: 323830343a323765303a3a2f33322d3332203d3e20323632383137.roa (hash: tct9s5riiSYqgKKqhDAwGftR8l7YqvMv3/rMOYDBlfQ=)
                          8: 3138362e3235302e3132322e302f32332d3233203d3e20323632383137.roa (hash: CmNnh//74UUJujOoLx5IYC4ITk2McnHxRoRSikLqXIQ=)
                          9: 3138362e3235302e3132302e302f32332d3233203d3e20323632383137.roa (hash: P95//gyXTMitcMnYzkX8vt18Qkv7w3uB0KGKYgsjkxc=)
                          10: 3133382e3231392e3134382e3134362f33322d3332203d3e20323634343039.roa (hash: eNqaTx0DhcspHabG+6NF4vVh3/BZjnYGrQsXD6S4NFs=)
                          11: 3133382e3231392e3134392e302f32342d3234203d3e20323632383137.roa (hash: 32oOPHsXT0FuB0muz/g4zusOH5Zvk4UD7nD4nxKJAOQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:18:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e3:d7:41:ca:fe:12:7f:29:7c:5f:3d:d5:f4:95:25:d6:49:aa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65657C29D82DD94BF5CCD512A0A176A5F35259F
        Validity
            Not Before: Nov  3 12:55:02 2025 GMT
            Not After : Nov  4 14:18:02 2025 GMT
        Subject: CN=B7832F9BDD05A490AA465C3DEA1EE309DD175054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:a1:cd:e1:03:7a:09:1d:37:f2:2a:fa:a8:
                    6f:c6:06:af:d7:27:b4:0d:66:25:96:77:28:5a:f0:
                    33:59:af:09:5b:b8:d8:e9:d9:d6:7a:2a:0f:aa:b8:
                    b8:fb:2e:e3:57:af:2b:fc:20:01:ca:0e:43:c1:86:
                    b5:b7:5c:9b:78:eb:48:28:49:8e:c5:6c:95:8b:ea:
                    37:f1:66:33:5f:84:4d:96:d2:5e:c2:f6:c3:4e:aa:
                    ab:92:9a:9c:68:ce:50:55:de:d9:84:46:fe:ea:72:
                    9b:d3:78:80:59:73:ca:ed:3c:20:3a:bb:22:22:1b:
                    3e:c7:2f:b7:54:c5:e2:2a:8b:fe:b4:98:ef:cd:cd:
                    84:26:f7:03:15:23:2a:94:e8:39:7b:63:fa:80:98:
                    95:4e:7a:ad:44:e8:f2:8e:03:ed:0a:5c:01:5a:dd:
                    25:68:7a:89:ff:aa:c5:8e:b6:4c:e3:39:30:77:e3:
                    c4:70:b3:e3:68:67:65:ac:cb:00:6d:0f:c1:53:35:
                    e6:47:4a:dd:1b:25:3b:58:12:45:5e:f9:12:b5:ce:
                    c5:a6:22:d5:71:15:2f:22:3c:20:f8:0e:64:f7:ea:
                    6e:06:83:44:f2:74:ef:a9:2c:30:7a:e3:95:3c:a6:
                    0f:5d:ae:3f:09:6f:f6:05:99:e2:60:56:63:c6:33:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:2F:9B:DD:05:A4:90:AA:46:5C:3D:EA:1E:E3:09:DD:17:50:54
            X509v3 Authority Key Identifier:
                keyid:D6:56:57:C2:9D:82:DD:94:BF:5C:CD:51:2A:0A:17:6A:5F:35:25:9F
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65657C29D82DD94BF5CCD512A0A176A5F35259F.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/D65657C29D82DD94BF5CCD512A0A176A5F35259F.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         36:8f:3e:07:dd:c9:3a:1f:91:c5:9d:35:59:3a:66:d0:a8:d8:
         1c:b8:9c:b8:3e:69:f0:4c:01:16:8b:dd:d0:10:99:81:7c:ce:
         fc:70:b2:63:1c:39:8e:0e:51:90:15:2d:e3:9d:15:7c:b1:44:
         a5:f7:09:cf:6b:90:c9:05:88:37:a5:f5:37:2d:79:d1:42:9b:
         1b:1f:80:b5:8f:2b:b2:aa:35:cf:52:f5:a9:26:1a:d2:31:a2:
         31:10:48:33:a6:c5:99:5f:d0:53:ab:cb:1a:de:92:64:a6:7b:
         91:02:d7:4a:9e:13:c7:1b:49:33:25:07:12:a1:b1:b2:67:f9:
         52:a4:07:ba:a7:d4:33:94:31:da:52:68:87:39:0d:01:02:d6:
         c3:ff:02:6d:db:96:d4:77:e3:7d:d0:81:7d:6b:53:3a:e9:6a:
         95:2e:47:ed:b8:e3:c3:7d:d1:ac:b4:91:4e:93:dc:72:fc:bb:
         b8:9f:7d:36:c0:c9:21:35:7b:a7:db:15:a9:0e:f3:a3:fc:08:
         6d:30:51:a4:43:78:f7:6c:03:ea:23:4b:1a:82:f9:1d:12:41:
         e6:7b:05:b8:09:9e:94:f4:8a:26:f7:ce:17:a4:3b:14:ef:af:
         6a:04:a4:e4:fb:b2:5c:09:e0:0a:12:2b:68:a5:5d:e0:1b:5d:
         a5:c3:e9:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULePXQcr+En8pfF891fSVJdZJqlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY1NjU3QzI5RDgyREQ5NEJGNUNDRDUxMkEwQTE3NkE1
RjM1MjU5RjAeFw0yNTExMDMxMjU1MDJaFw0yNTExMDQxNDE4MDJaMDMxMTAvBgNV
BAMTKEI3ODMyRjlCREQwNUE0OTBBQTQ2NUMzREVBMUVFMzA5REQxNzUwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvqHN4QN6CR038ir6qG/GBq/X
J7QNZiWWdyha8DNZrwlbuNjp2dZ6Kg+quLj7LuNXryv8IAHKDkPBhrW3XJt460go
SY7FbJWL6jfxZjNfhE2W0l7C9sNOqquSmpxozlBV3tmERv7qcpvTeIBZc8rtPCA6
uyIiGz7HL7dUxeIqi/60mO/NzYQm9wMVIyqU6Dl7Y/qAmJVOeq1E6PKOA+0KXAFa
3SVoeon/qsWOtkzjOTB348Rws+NoZ2WsywBtD8FTNeZHSt0bJTtYEkVe+RK1zsWm
ItVxFS8iPCD4DmT36m4Gg0TydO+pLDB645U8pg9drj8Jb/YFmeJgVmPGMxRZAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUt4Mvm90FpJCqRlw96h7jCd0XUFQwHwYDVR0j
BBgwFoAU1lZXwp2C3ZS/XM1RKgoXal81JZ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUxqdWlSbmtoTTVCMXRCU3JZY0Z5aG1XMkY5c1RNV29WdGRwQldZWVlz
NHkvMC9ENjU2NTdDMjlEODJERDk0QkY1Q0NENTEyQTBBMTc2QTVGMzUyNTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2NTY1N0MyOUQ4MkREOTRC
RjVDQ0Q1MTJBMEExNzZBNUYzNTI1OUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OUxqdWlSbmtoTTVCMXRCU3JZY0Z5aG1XMkY5c1RNV29WdGRwQldZWVlzNHkvMC9E
NjU2NTdDMjlEODJERDk0QkY1Q0NENTEyQTBBMTc2QTVGMzUyNTlGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANo8+B93JOh+RxZ01WTpm0KjYHLicuD5p8EwBFovd0BCZgXzO/HCyYxw5jg5R
kBUt450VfLFEpfcJz2uQyQWIN6X1Ny150UKbGx+AtY8rsqo1z1L1qSYa0jGiMRBI
M6bFmV/QU6vLGt6SZKZ7kQLXSp4TxxtJMyUHEqGxsmf5UqQHuqfUM5Qx2lJohzkN
AQLWw/8CbduW1HfjfdCBfWtTOulqlS5H7bjjw33RrLSRTpPccvy7uJ99NsDJITV7
p9sVqQ7zo/wIbTBRpEN492wD6iNLGoL5HRJB5nsFuAmelPSKJvfOF6Q7FO+vagSk
5PuyXAngChIraKVd4BtdpcPpZA==
-----END CERTIFICATE-----
Generated at Tue Nov  4 00:17:18 2025 by rpki-client