
$ rpki-client -vvf rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
File:                     5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft (raw, json)
Hash identifier:          eljmz4lXahKvkljgQtyeJBDWA8GJwrFvHmYL3ApLXh4=
Subject key identifier:   67:F3:11:FD:AC:FF:AE:A1:C0:9C:D5:D6:32:2A:50:4C:E3:7B:8D:77
Authority key identifier: 5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B
Certificate issuer:       /CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
Certificate serial:       4EF5B8104D2B3EE955DD2B2F1EF93E1E4DF97A8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
Manifest number:          02A0
Signing time:             Mon 03 Nov 2025 19:08:35 +0000
Manifest this update:     Mon 03 Nov 2025 19:03:35 +0000
Manifest next update:     Tue 04 Nov 2025 20:52:35 +0000
Files and hashes:         1: 5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl (hash: zPzqxNNKKypCLZ20K+hhEZSfngfN/ULta4b+67Y18M0=)
                          2: 323830343a386666343a3a2f33322d3332203d3e20323733353234.roa (hash: Q/zh1Dbe0v/Id4jNOBy0FEio6tPBZ2jDdZ5A3fA+Fpw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl
                          rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:52:35 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f5:b8:10:4d:2b:3e:e9:55:dd:2b:2f:1e:f9:3e:1e:4d:f9:7a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A26C85C73E6B8570445B0D41258C0AE86AFF28B
        Validity
            Not Before: Nov  3 19:03:35 2025 GMT
            Not After : Nov  4 20:52:35 2025 GMT
        Subject: CN=67F311FDACFFAEA1C09CD5D6322A504CE37B8D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:c4:bf:4d:55:7e:69:8c:f3:dc:b1:93:a5:
                    58:0c:5e:e5:fd:32:22:28:bf:9e:2d:57:32:49:9a:
                    34:c5:06:d7:61:89:e0:b6:71:ea:a4:3b:73:86:9e:
                    44:c4:80:72:0c:43:44:ec:34:81:ff:93:2f:8c:23:
                    31:bd:5b:48:b1:7a:0f:1e:54:16:ca:c3:38:15:39:
                    ee:58:ea:cc:d8:d4:b3:0f:81:cd:aa:3c:2d:5a:f6:
                    14:8d:5a:c8:9c:69:b0:f2:70:7d:a2:4a:88:24:7d:
                    78:43:7d:52:16:b7:e7:2b:46:8d:0f:e6:b5:99:32:
                    aa:8e:21:e2:09:0d:b4:11:c9:81:91:fb:0c:c4:d7:
                    0a:0e:5d:d1:80:c1:d0:c2:b7:66:4c:d3:da:33:7f:
                    af:b4:3a:f8:60:76:a9:c9:32:e7:00:c5:59:66:87:
                    15:6b:1b:24:61:b4:76:22:bf:19:bb:fe:36:55:1b:
                    94:ee:1d:16:ae:f0:8c:aa:36:f9:7b:22:85:b6:02:
                    82:43:f2:d7:27:0f:ba:58:94:ee:6b:c9:1c:a3:44:
                    36:03:6a:b7:f2:88:2e:f0:ae:41:9e:3f:ec:c2:1b:
                    25:72:02:2e:f9:ed:20:38:1d:86:22:74:72:d6:80:
                    ad:c0:1b:6b:75:a5:38:90:00:ab:2d:f9:3b:34:ea:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:11:FD:AC:FF:AE:A1:C0:9C:D5:D6:32:2A:50:4C:E3:7B:8D:77
            X509v3 Authority Key Identifier:
                keyid:5A:26:C8:5C:73:E6:B8:57:04:45:B0:D4:12:58:C0:AE:86:AF:F2:8B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MbnSYu4piBENykZXH8SY6D8Ci2ko36tU1qvaVL9ka8n/0/5A26C85C73E6B8570445B0D41258C0AE86AFF28B.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         34:22:ad:9f:df:14:31:aa:18:51:25:90:c7:cf:0a:c9:c0:db:
         f2:7c:4c:25:41:d6:1a:4e:2a:01:bb:b6:55:7b:76:3d:20:e4:
         c3:0f:b8:35:3f:bc:2b:aa:32:42:72:5c:21:c1:82:2c:5b:e6:
         ea:3c:7c:30:51:73:b5:87:b0:d2:37:1a:c4:cb:76:61:ab:ed:
         84:52:a6:95:6a:d3:db:39:cf:bd:46:ec:7b:0c:49:87:cd:91:
         06:80:9d:b5:a2:69:c6:7e:96:c9:7e:58:cd:aa:0c:24:6d:ad:
         94:b0:de:8f:38:fc:55:d1:66:6b:a2:f4:bc:26:ec:6b:8a:a4:
         91:ec:d7:e1:3b:5a:f4:6e:5c:53:2d:73:2b:d0:1e:4e:4c:c7:
         9d:1e:aa:73:a9:37:13:3e:6c:39:29:cc:cf:69:50:f2:fe:54:
         c9:dd:67:44:67:7d:24:37:67:fa:eb:a7:24:c4:20:76:cf:78:
         00:fc:c8:0f:8e:e0:31:e7:04:0e:ce:bf:de:89:26:9b:14:e0:
         43:25:ea:02:03:f1:83:c9:64:6d:d9:c1:8f:11:f3:95:67:e9:
         22:e7:37:d9:0f:1a:cf:9a:d4:68:85:7a:b2:03:15:7c:90:d4:
         90:c8:1e:fd:93:75:c9:20:ff:38:d5:12:34:02:b4:14:e2:e4:
         28:d1:5e:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUTvW4EE0rPulV3SsvHvk+Hk35eo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEyNkM4NUM3M0U2Qjg1NzA0NDVCMEQ0MTI1OEMwQUU4
NkFGRjI4QjAeFw0yNTExMDMxOTAzMzVaFw0yNTExMDQyMDUyMzVaMDMxMTAvBgNV
BAMTKDY3RjMxMUZEQUNGRkFFQTFDMDlDRDVENjMyMkE1MDRDRTM3QjhENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtFcS/TVV+aYzz3LGTpVgMXuX9
MiIov54tVzJJmjTFBtdhieC2ceqkO3OGnkTEgHIMQ0TsNIH/ky+MIzG9W0ixeg8e
VBbKwzgVOe5Y6szY1LMPgc2qPC1a9hSNWsicabDycH2iSogkfXhDfVIWt+crRo0P
5rWZMqqOIeIJDbQRyYGR+wzE1woOXdGAwdDCt2ZM09ozf6+0OvhgdqnJMucAxVlm
hxVrGyRhtHYivxm7/jZVG5TuHRau8IyqNvl7IoW2AoJD8tcnD7pYlO5ryRyjRDYD
arfyiC7wrkGeP+zCGyVyAi757SA4HYYidHLWgK3AG2t1pTiQAKst+Ts06qFFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZ/MR/az/rqHAnNXWMipQTON7jXcwHwYDVR0j
BBgwFoAUWibIXHPmuFcERbDUEljAroav8oswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1iblNZdTRwaUJFTnlrWlhIOFNZNkQ4Q2kya28zNnRVMXF2YVZMOWth
OG4vMC81QTI2Qzg1QzczRTZCODU3MDQ0NUIwRDQxMjU4QzBBRTg2QUZGMjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMjZDODVDNzNFNkI4NTcw
NDQ1QjBENDEyNThDMEFFODZBRkYyOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OU1iblNZdTRwaUJFTnlrWlhIOFNZNkQ4Q2kya28zNnRVMXF2YVZMOWthOG4vMC81
QTI2Qzg1QzczRTZCODU3MDQ0NUIwRDQxMjU4QzBBRTg2QUZGMjhCLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANCKtn98UMaoYUSWQx88KycDb8nxMJUHWGk4qAbu2VXt2PSDkww+4NT+8K6oy
QnJcIcGCLFvm6jx8MFFztYew0jcaxMt2YavthFKmlWrT2znPvUbsewxJh82RBoCd
taJpxn6WyX5YzaoMJG2tlLDejzj8VdFma6L0vCbsa4qkkezX4Tta9G5cUy1zK9Ae
TkzHnR6qc6k3Ez5sOSnMz2lQ8v5Uyd1nRGd9JDdn+uunJMQgds94APzID47gMecE
Ds6/3okmmxTgQyXqAgPxg8lkbdnBjxHzlWfpIuc32Q8az5rUaIV6sgMVfJDUkMge
/ZN1ySD/ONUSNAK0FOLkKNFeDA==
-----END CERTIFICATE-----
Generated at Tue Nov  4 10:26:39 2025 by rpki-client