
$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
File:                     73D43FEADED592156D29C67CCC13A030541CD25A.mft (raw, json)
Hash identifier:          fhqaG+4HryYaaBrKdqCR2wfWGtwPVOB00dCdAp5Djvc=
Subject key identifier:   2B:CB:FA:BE:5E:2C:29:16:EF:09:90:2A:87:F9:43:19:2A:A6:82:B1
Authority key identifier: 73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
Certificate issuer:       /CN=73D43FEADED592156D29C67CCC13A030541CD25A
Certificate serial:       226A5B776A0C47A21423E58E435AE72CE80A3241
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
Manifest number:          F4
Signing time:             Mon 03 Nov 2025 15:03:09 +0000
Manifest this update:     Mon 03 Nov 2025 14:58:09 +0000
Manifest next update:     Tue 04 Nov 2025 15:28:09 +0000
Files and hashes:         1: 3138372e36322e37322e302f32322d3234203d3e203532353634.roa (hash: jikdQ29cn0nPG35AKmYx84HCkVwCjzRQyWSQ0gjrPH0=)
                          2: 3137372e39312e3233362e302f32322d3234203d3e203532353634.roa (hash: swm2J5uROSFAXEvTonVKASOTeaR8WgMZC5ItpoA7oPQ=)
                          3: 3137372e38352e3135362e302f32322d3234203d3e203532353634.roa (hash: JwPHUe/eVdO6bAYhYAIUNqAZxpWG8GDsedsKIz7hB0Q=)
                          4: 73D43FEADED592156D29C67CCC13A030541CD25A.crl (hash: S/PVBePgd/mWIirrTRzntPvs7E7G2LMRl4pniCtnfu0=)
                          5: 3133382e3231392e3134342e302f32322d3234203d3e203532353634.roa (hash: OELlR2mkeHJMSjCDa14qi1nKMpWhg+xJGIybHOq+gPQ=)
                          6: 3133312e3136312e33362e302f32322d3234203d3e203532353634.roa (hash: uqHm6KJdK1pvKvy0CuTIXotwXXgMhIUxRd6ej5Ho2L0=)
                          7: 323830343a316562383a3a2f33322d3536203d3e203532353634.roa (hash: s9qbeek2fSTEjSVmUQU7vWuWcPksV6u6dEUnuyWi9Xo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
                          rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:28:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6a:5b:77:6a:0c:47:a2:14:23:e5:8e:43:5a:e7:2c:e8:0a:32:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D43FEADED592156D29C67CCC13A030541CD25A
        Validity
            Not Before: Nov  3 14:58:09 2025 GMT
            Not After : Nov  4 15:28:09 2025 GMT
        Subject: CN=2BCBFABE5E2C2916EF09902A87F943192AA682B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:77:c7:01:ac:0b:60:65:07:bc:96:00:45:
                    8f:68:0a:29:d0:af:71:21:4a:fe:74:e1:c0:d9:a2:
                    ae:93:fe:3c:61:33:cc:55:4b:7c:01:ce:04:55:d2:
                    77:5d:21:a3:5e:a5:3e:31:84:64:24:0e:5c:6a:db:
                    85:cc:30:11:cf:fd:fb:4a:a3:f1:9b:9a:b3:a7:4b:
                    ad:23:ae:a4:c1:6f:88:4b:c9:1d:17:bc:25:57:11:
                    db:93:d5:a7:e6:ca:04:c8:42:16:b0:2b:96:c6:a0:
                    40:31:36:66:19:81:c1:df:a7:7d:27:8d:66:63:a6:
                    55:a5:a3:11:d4:2e:41:09:1a:a8:42:5e:9f:d8:4e:
                    0f:af:1b:5d:86:2c:70:a9:17:00:c8:92:fd:aa:61:
                    04:4b:e7:56:9b:83:cf:1f:f9:87:85:46:6f:e6:6f:
                    45:f8:ce:9b:a7:9f:b8:d6:de:e7:ab:72:b5:71:01:
                    29:11:c7:f5:62:c3:49:a7:01:02:ac:a3:a5:7c:ee:
                    23:32:66:3c:71:84:53:30:25:0e:6d:c5:4b:ef:6b:
                    cb:72:28:13:0a:98:9d:33:14:da:1b:e5:d5:fa:8c:
                    b6:dc:fd:7e:f1:7d:77:8b:90:9e:d6:2f:95:6a:d7:
                    28:34:19:b6:6c:37:ed:78:40:8e:52:dc:35:8f:df:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CB:FA:BE:5E:2C:29:16:EF:09:90:2A:87:F9:43:19:2A:A6:82:B1
            X509v3 Authority Key Identifier:
                keyid:73:D4:3F:EA:DE:D5:92:15:6D:29:C6:7C:CC:13:A0:30:54:1C:D2:5A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73D43FEADED592156D29C67CCC13A030541CD25A.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/73D43FEADED592156D29C67CCC13A030541CD25A.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         be:55:04:81:bd:1a:ae:6a:56:43:57:45:f7:33:94:af:27:f4:
         de:e3:b3:17:7e:c2:8f:02:ac:65:98:a3:2c:d6:0e:75:f2:0c:
         eb:7b:07:d3:f3:ee:0f:ae:ad:98:b1:10:cf:5b:22:0d:e9:5d:
         78:b1:b7:f7:14:f7:93:d3:bb:9e:8b:2a:fb:15:7e:4d:c6:ac:
         d5:7b:c1:c4:0c:23:d2:b3:9a:f8:66:d4:76:27:c5:9d:0f:bb:
         db:79:a8:64:ab:de:30:9c:36:50:a5:99:80:a2:2d:e8:64:82:
         d6:85:4c:a8:31:b6:71:cb:c3:8c:cb:b4:09:0f:da:ea:d0:86:
         93:65:2a:f5:a0:c8:56:06:3e:ed:73:02:c5:2d:17:41:9a:74:
         05:ab:6d:65:a8:5d:21:69:8d:ab:6a:f8:32:69:02:bd:a3:08:
         06:63:f4:ae:46:8e:81:da:57:7d:0f:c5:9e:e8:80:7d:4b:08:
         4b:08:b6:cc:73:db:c4:c5:fc:49:13:f0:59:ee:8d:a0:c7:c5:
         f2:6b:65:66:35:46:06:2c:4e:12:23:0e:09:75:83:05:eb:f2:
         9c:1d:85:d3:7a:84:8a:4f:0b:85:65:fd:d5:69:b8:49:64:de:
         e8:a7:03:2c:c2:3a:ba:6b:61:8d:22:65:ce:a8:78:32:4b:96:
         9e:5d:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:48:05 2025 by rpki-client