
$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
File:                     1A10A2ED52FC4857ABCA56A1489602C109D46814.mft (raw, json)
Hash identifier:          frFwcJcccYqvee2WCgkIy6VMAmd1sDbdKlD7Fp9fZiw=
Subject key identifier:   97:19:BE:3A:B6:10:B7:28:BA:73:8C:57:0B:E0:6A:9C:C7:2C:06:03
Authority key identifier: 1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14
Certificate issuer:       /CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
Certificate serial:       5D3C774B03A678C3F7A5A94B741C8D3325D8D40F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
Manifest number:          01CF
Signing time:             Mon 03 Nov 2025 04:39:50 +0000
Manifest this update:     Mon 03 Nov 2025 04:34:50 +0000
Manifest next update:     Tue 04 Nov 2025 17:27:50 +0000
Files and hashes:         1: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: dwBSc//sXi45dTapRIXLgvpyMOBIXnuNMUkFPTLT1O4=)
                          2: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: xBu/tPjzc3U7Xtp/+5ZxwRcbLfpIPhzFjn97C0jLbfE=)
                          3: 1A10A2ED52FC4857ABCA56A1489602C109D46814.crl (hash: HSsh2YbRvfbyVm1sACosz8zh6bmoKLTXxYKOZ/UW7nI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl
                          rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:27:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3c:77:4b:03:a6:78:c3:f7:a5:a9:4b:74:1c:8d:33:25:d8:d4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
        Validity
            Not Before: Nov  3 04:34:50 2025 GMT
            Not After : Nov  4 17:27:50 2025 GMT
        Subject: CN=9719BE3AB610B728BA738C570BE06A9CC72C0603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:fd:ef:23:6b:c4:5a:e0:16:ab:d0:46:d8:
                    1a:ef:f3:a5:32:f1:a5:ac:ba:20:fd:a5:b0:60:9f:
                    6e:41:a2:59:3a:f8:7a:fd:74:ba:23:e5:cb:9d:d9:
                    38:8c:26:46:bd:e1:b0:44:bf:fe:7c:3e:e6:80:8e:
                    47:f8:71:19:c3:43:c1:99:48:73:b6:01:9a:6f:a5:
                    7b:54:02:ec:b5:22:cb:e2:50:fb:f2:66:6c:28:25:
                    2b:b2:d4:c2:d1:4e:cf:d2:25:ad:86:80:eb:4f:f6:
                    a9:94:e7:c6:c3:3b:6e:19:86:04:3f:71:90:aa:76:
                    95:8e:4e:fa:a8:d9:b5:71:b2:a4:16:5c:3d:c4:83:
                    7b:a6:9f:39:f7:66:7a:5b:99:96:95:0b:60:25:1f:
                    be:15:d6:e4:95:52:72:5c:20:0c:79:65:3d:19:08:
                    16:2d:0a:e8:c6:4b:69:97:9a:bb:7a:20:20:86:48:
                    c0:7a:79:78:8a:d6:2c:70:be:8d:50:a1:a4:2e:b2:
                    35:41:bd:8c:3b:a9:1b:61:76:0b:7d:c3:2c:4e:46:
                    95:70:40:37:bf:03:0d:4a:7c:c1:de:9e:71:ab:a5:
                    8d:16:ae:f1:ce:b4:21:e1:93:e3:c7:a7:38:77:df:
                    95:58:38:09:1b:ef:14:0c:0a:32:5c:29:99:e5:2e:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:19:BE:3A:B6:10:B7:28:BA:73:8C:57:0B:E0:6A:9C:C7:2C:06:03
            X509v3 Authority Key Identifier:
                keyid:1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:b8:7a:04:a5:76:fa:e0:14:fc:5c:17:04:b8:c1:e3:19:
         ef:68:ed:d3:5d:95:6b:50:03:91:bc:db:63:ce:7d:47:46:be:
         70:0f:3e:34:51:98:2c:05:6c:d3:6e:a6:92:f8:83:63:9e:e4:
         6b:e6:ea:83:03:d3:52:06:40:22:87:78:d0:30:27:e4:67:cc:
         8f:a7:da:35:eb:d4:25:ad:c3:09:63:b3:1b:78:b5:3a:d9:ec:
         10:6b:16:df:8a:4d:d3:ea:c6:53:6d:9a:74:c0:0e:5a:82:a0:
         39:9f:ab:4c:9c:e8:d3:a9:7e:17:7b:dd:d3:3d:3e:55:b3:97:
         c3:da:16:c1:e8:07:87:7a:2f:b3:f3:69:70:6b:74:91:96:f2:
         3d:52:2d:36:22:2b:d1:32:71:11:b1:96:30:2f:4d:ad:ce:09:
         fa:14:85:50:c7:b0:a9:42:03:7a:bc:52:ab:e5:b6:5c:1b:7f:
         f0:0b:65:8d:94:a5:3b:3c:2b:bd:9d:89:10:1a:b7:6d:20:26:
         5b:34:4e:fd:ff:ae:bc:27:39:ea:9b:a9:a8:5b:40:56:1e:95:
         0f:d5:df:2d:9e:bb:ee:18:7f:21:9f:45:41:de:e2:66:79:07:
         a8:ef:5e:55:0e:6d:bb:05:f8:98:9c:d9:13:6b:82:90:e4:3d:
         e1:47:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:29:32 2025 by rpki-client