
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
File:                     4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft (raw, json)
Hash identifier:          boqkZvooJ9T9vgC1bxPtBdm1L7MVy+i3+BRXUtNswgk=
Subject key identifier:   03:F8:DA:16:A7:5E:41:29:FF:8E:16:B4:54:85:C7:FA:B4:D6:C7:1F
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       21BE611D8687FC0199521AA228DC83210251F15F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
Manifest number:          37
Signing time:             Tue 04 Nov 2025 07:40:02 +0000
Manifest this update:     Tue 04 Nov 2025 07:35:02 +0000
Manifest next update:     Wed 05 Nov 2025 08:37:02 +0000
Files and hashes:         1: 3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (hash: JeA8tNnq52g+siWz2Xjv02XBG+9YjyQg5PiUYmPSfPw=)
                          2: 3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa (hash: oEJyG8sugH7dKUAgRoHCVhg0rLV5m2ccXsKzSSaObFU=)
                          3: 323830343a373138303a3a2f33332d3333203d3e20323730373933.roa (hash: l8CvQgNarwCo3pOTLpCJefQIDt7rpWTgI4spaOKDENU=)
                          4: 3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (hash: QfbwE60yK9ryZkWagwba1W7K9bOkT2rutzBhfujb8C8=)
                          5: 3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (hash: SHJlGwh0aS8eq6SPGivCat3XMCYZDeEyzDUDKRyhdGo=)
                          6: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl (hash: xbrIAHggJjRh6+K3XJX4Wt/tebcjG85w25BEZgOiFCw=)
                          7: 3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (hash: q+GsFf43C3RjMx041Ip8T2ZCEk5vUsQJET3gmFBsCWs=)
                          8: 3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (hash: KTmZ1lBoJw6zx1UFcwMpoNCD3GmgB2DENnWUqm4ZmQE=)
                          9: 323830343a373138303a3a2f33322d3332203d3e20323730373933.roa (hash: /Si3WIWWzJD6vNhz8lmN3DQ0Era253mkaP+0P1mG510=)
                          10: 323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (hash: lFrjvrMxzblDYDfWmfc9dFhSCZaIlMkFSc8IfPLXuBU=)
                          11: 323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (hash: aU4U86iGV84DuEw4neEIYH1JT+mCBQZq3vEvnQq8R3A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 08:37:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:be:61:1d:86:87:fc:01:99:52:1a:a2:28:dc:83:21:02:51:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Nov  4 07:35:02 2025 GMT
            Not After : Nov  5 08:37:02 2025 GMT
        Subject: CN=03F8DA16A75E4129FF8E16B45485C7FAB4D6C71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:71:92:5f:ae:11:fc:7e:b2:ef:f2:91:13:
                    94:db:89:62:0d:28:7a:08:2d:e2:58:0e:cc:c9:c2:
                    04:59:8c:d9:7d:d2:06:d8:de:38:ad:a3:08:d6:4a:
                    22:34:e9:d9:93:bc:7c:f7:05:e1:49:93:e8:1b:93:
                    70:52:9e:47:9d:61:8b:ed:ec:d7:9c:56:fb:c8:07:
                    f0:00:95:67:9c:8c:f6:1e:e8:23:e6:78:ea:52:e7:
                    cb:be:1e:80:29:1d:f7:bd:42:a2:f2:e5:a6:6d:69:
                    0d:50:52:bc:9e:1a:57:8a:ff:75:3b:12:2a:52:57:
                    b4:ef:c2:c3:e2:2f:c0:47:52:50:7d:b4:8b:ce:6d:
                    bc:d8:38:11:3f:aa:1b:8c:91:cb:b6:48:85:ff:bb:
                    d0:6a:87:1e:9d:60:a2:6d:b1:88:85:ed:86:0c:c4:
                    d3:3e:79:d6:bf:05:4f:b4:16:d3:35:02:59:93:cb:
                    49:98:a0:e9:13:ee:20:cc:93:d8:31:c9:4f:17:6d:
                    6e:ab:c0:d2:31:06:b0:77:2a:a9:8c:6b:21:38:e5:
                    5d:6f:cf:48:d1:65:94:40:19:25:2c:91:ff:67:e5:
                    23:35:dd:9a:24:47:f6:41:c8:59:64:27:ce:77:98:
                    53:00:ae:8b:28:56:f9:96:cf:b4:1c:04:0a:d9:f6:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F8:DA:16:A7:5E:41:29:FF:8E:16:B4:54:85:C7:FA:B4:D6:C7:1F
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0b:86:43:b9:2e:b1:0d:ea:91:fa:51:04:2b:14:13:54:6f:07:
         86:18:f5:c9:3f:0c:6a:79:0f:1d:62:c7:e0:5b:fb:33:24:12:
         15:e5:e1:ea:e2:f1:a0:c7:e6:ab:81:f4:bd:31:77:4c:d0:de:
         25:cd:c8:9f:69:e0:9d:8d:b6:1d:07:81:f1:4b:a9:3f:1c:c6:
         b3:80:b0:66:87:b2:2b:ef:7f:ea:ca:7e:e7:94:7a:b6:d9:02:
         28:06:77:ac:38:2e:03:30:b4:a9:f1:06:07:20:e6:98:32:4f:
         77:da:91:4c:80:23:22:50:18:5f:20:ec:b7:b3:7c:58:91:a4:
         00:0c:61:00:a8:aa:ee:f8:48:e7:47:8d:c5:50:cb:87:f6:fc:
         eb:b3:41:34:46:ec:66:d3:84:27:6c:a7:51:b9:5a:9c:6c:7e:
         80:f6:22:c1:e9:d8:c8:b9:72:fa:54:3e:ca:a6:c3:ee:23:2f:
         49:9f:3d:0c:ef:04:0e:a2:76:d9:7c:1c:ed:fd:1c:00:e9:05:
         cd:26:08:16:ab:73:42:8e:8f:8e:00:af:4c:47:1e:be:ff:cf:
         ee:09:56:86:2d:06:f5:df:a1:62:07:83:0c:d8:dd:35:e0:5f:
         45:98:c4:41:ce:47:3a:94:51:31:7f:4b:3b:bf:4f:c5:db:13:
         88:eb:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:05:41 2025 by rpki-client