
$ rpki-client -vvf rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
File:                     85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft (raw, json)
Hash identifier:          SOR9fDy6Ni/4CInwolTMNASRg7d49aEJ411q4/Qfgf8=
Subject key identifier:   4E:DA:AB:84:17:92:E6:07:13:A0:0A:59:46:3A:4D:63:9D:AC:91:84
Authority key identifier: 85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80
Certificate issuer:       /CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
Certificate serial:       0FF5B278B0289950F99C003CD1B0F2EC145F4CA3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
Manifest number:          6F
Signing time:             Mon 03 Nov 2025 19:05:50 +0000
Manifest this update:     Mon 03 Nov 2025 19:00:50 +0000
Manifest next update:     Tue 04 Nov 2025 20:09:50 +0000
Files and hashes:         1: 3138392e3131332e3139302e302f32342d3234203d3e20323730333131.roa (hash: PfBe69iu29jWZz2+9qaHmtzi9QqGT1j6b6bJF47cghc=)
                          2: 3138392e3131332e3139312e302f32342d3234203d3e20323730333131.roa (hash: HWvHKUKBbIi2U8mRS7k7gBkY11IKW8zsgXIwVrKBf0k=)
                          3: 3138392e3131332e3138382e302f32342d3234203d3e20323730333131.roa (hash: T5iSsyEa3CJ5ubJjAJ0Wh5EeghX/bBpzxG4BvxvQMnY=)
                          4: 323830343a366132303a3a2f33322d3332203d3e20323730333131.roa (hash: nJRw2a5PSv2Upws4q6C3IDuHd+WXSYEUTkABck7q9vA=)
                          5: 323830343a366132303a3a2f33352d3335203d3e20323730333131.roa (hash: kATj2QWkHPDvEzcQ6ybysXbSpkiDyHgqSAZt18xiT5s=)
                          6: 323830343a366132303a323030303a3a2f33352d3335203d3e20323730333131.roa (hash: crndK/TccfHrPXN22xqZ6uksrZ3hBAKDitK4kEkuC04=)
                          7: 85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl (hash: HuRBCD4uuZKrw5TFSkdABUquQgIICnEtfIZ2PxMPYS8=)
                          8: 3138392e3131332e3138392e302f32342d3234203d3e20323730333131.roa (hash: 8OCy0PQFpeRimd/3R/B5HNkDVJJ2JMsWz0MCw2sfDO0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl
                          rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:09:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f5:b2:78:b0:28:99:50:f9:9c:00:3c:d1:b0:f2:ec:14:5f:4c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85068FEAC49281A5AC659FD8ACD5E5618494FE80
        Validity
            Not Before: Nov  3 19:00:50 2025 GMT
            Not After : Nov  4 20:09:50 2025 GMT
        Subject: CN=4EDAAB841792E60713A00A59463A4D639DAC9184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:ad:f4:d3:c5:0a:e4:9c:11:bd:99:87:9d:
                    de:0c:f9:ec:03:46:cb:c6:d8:25:7f:b6:b0:35:87:
                    55:e5:7f:9e:fc:e3:f0:f3:5a:ea:12:73:c2:ea:2e:
                    47:a4:47:17:35:e3:17:b0:72:e1:4e:bf:b1:34:6e:
                    f3:ce:89:db:98:f9:84:91:a0:0d:49:21:9b:86:2f:
                    08:ad:6a:30:ab:47:02:a0:80:67:d3:39:e2:3e:96:
                    00:8f:7c:39:6a:4c:6c:be:9f:95:97:9d:50:b5:3d:
                    69:5d:89:53:51:e0:5f:29:ec:f9:73:1a:d7:f3:40:
                    5a:df:ab:56:29:f7:72:78:48:fe:fd:44:17:b6:57:
                    2e:84:36:7c:b7:15:82:27:c6:28:da:d9:79:6b:40:
                    6d:48:5d:08:34:37:bc:39:bd:b3:51:ba:c6:f5:b7:
                    98:65:68:db:21:86:46:ab:6f:8e:2d:e9:3f:24:c5:
                    ef:54:91:9f:3e:28:77:f3:68:20:00:36:1f:45:53:
                    dc:14:86:2f:e0:fc:fb:a2:21:e0:dc:14:19:8a:30:
                    f5:94:ce:9a:99:08:e6:73:e0:b3:b1:d3:5b:06:0b:
                    32:a2:4f:d6:09:60:ca:03:e2:d3:c7:cd:0e:40:c2:
                    b6:22:bb:f7:ac:1b:fe:9f:14:42:a1:d3:3e:48:33:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:AB:84:17:92:E6:07:13:A0:0A:59:46:3A:4D:63:9D:AC:91:84
            X509v3 Authority Key Identifier:
                keyid:85:06:8F:EA:C4:92:81:A5:AC:65:9F:D8:AC:D5:E5:61:84:94:FE:80
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85068FEAC49281A5AC659FD8ACD5E5618494FE80.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/85068FEAC49281A5AC659FD8ACD5E5618494FE80.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:87:c7:c4:ca:9f:de:09:65:33:f8:9b:b6:65:98:ca:14:
         aa:f4:9b:f8:2f:25:8f:a7:ed:6c:84:84:d6:ee:bf:18:ed:b6:
         eb:d2:1c:1d:4e:11:0e:c2:b1:24:8a:75:37:ef:07:72:66:99:
         90:52:2e:10:b5:f2:ff:af:8e:c9:72:de:c5:76:50:04:8a:5f:
         9f:1b:63:ad:11:6b:8b:09:cf:2d:03:bc:dc:e4:0a:a0:ef:0b:
         93:53:1e:86:54:f9:53:ea:60:c0:18:cf:c7:3c:d0:e6:71:bc:
         cf:e7:40:87:6b:e8:2e:57:3c:80:c6:a3:d5:17:66:60:85:78:
         55:56:90:af:d2:9c:7f:07:ce:3c:d2:12:c9:27:be:07:5b:a4:
         aa:96:48:c7:80:b3:4f:8e:c6:b7:04:ef:e8:8e:11:df:63:d9:
         a4:9a:0d:2f:e2:70:d1:2e:c7:93:ce:bf:eb:e7:2f:0d:57:d8:
         43:b0:81:fa:c3:cd:90:91:51:44:e9:c7:f5:52:ef:4a:c5:48:
         70:38:a7:1a:f9:8d:88:cb:83:bb:93:68:8e:8f:e1:ef:70:78:
         22:f3:cc:28:5f:93:d4:56:39:19:b7:db:bf:ad:ed:1d:ec:d7:
         92:1d:a3:7a:4d:f1:0a:5a:31:a0:24:f5:5d:c1:2f:69:ae:4f:
         e3:b1:33:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUD/WyeLAomVD5nAA80bDy7BRfTKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUwNjhGRUFDNDkyODFBNUFDNjU5RkQ4QUNENUU1NjE4
NDk0RkU4MDAeFw0yNTExMDMxOTAwNTBaFw0yNTExMDQyMDA5NTBaMDMxMTAvBgNV
BAMTKDRFREFBQjg0MTc5MkU2MDcxM0EwMEE1OTQ2M0E0RDYzOURBQzkxODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLa3008UK5JwRvZmHnd4M+ewD
RsvG2CV/trA1h1Xlf5784/DzWuoSc8LqLkekRxc14xewcuFOv7E0bvPOiduY+YSR
oA1JIZuGLwitajCrRwKggGfTOeI+lgCPfDlqTGy+n5WXnVC1PWldiVNR4F8p7Plz
GtfzQFrfq1Yp93J4SP79RBe2Vy6ENny3FYInxija2XlrQG1IXQg0N7w5vbNRusb1
t5hlaNshhkarb44t6T8kxe9UkZ8+KHfzaCAANh9FU9wUhi/g/PuiIeDcFBmKMPWU
zpqZCOZz4LOx01sGCzKiT9YJYMoD4tPHzQ5AwrYiu/esG/6fFEKh0z5IM1L9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUTtqrhBeS5gcToApZRjpNY52skYQwHwYDVR0j
BBgwFoAUhQaP6sSSgaWsZZ/YrNXlYYSU/oAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUQ3VnRLRmNtZlJEcktocXBaN1R6TlhyMllveVJtMzlmMkZkVkNwazVv
c0UvMC84NTA2OEZFQUM0OTI4MUE1QUM2NTlGRDhBQ0Q1RTU2MTg0OTRGRTgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MDY4RkVBQzQ5MjgxQTVB
QzY1OUZEOEFDRDVFNTYxODQ5NEZFODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RUQ3VnRLRmNtZlJEcktocXBaN1R6TlhyMllveVJtMzlmMkZkVkNwazVvc0UvMC84
NTA2OEZFQUM0OTI4MUE1QUM2NTlGRDhBQ0Q1RTU2MTg0OTRGRTgwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADpqHx8TKn94JZTP4m7ZlmMoUqvSb+C8lj6ftbISE1u6/GO2269IcHU4RDsKx
JIp1N+8HcmaZkFIuELXy/6+OyXLexXZQBIpfnxtjrRFriwnPLQO83OQKoO8Lk1Me
hlT5U+pgwBjPxzzQ5nG8z+dAh2voLlc8gMaj1RdmYIV4VVaQr9KcfwfOPNISySe+
B1ukqpZIx4CzT47GtwTv6I4R32PZpJoNL+Jw0S7Hk86/6+cvDVfYQ7CB+sPNkJFR
ROnH9VLvSsVIcDinGvmNiMuDu5Nojo/h73B4IvPMKF+T1FY5Gbfbv63tHezXkh2j
ek3xCloxoCT1XcEvaa5P47EzOw==
-----END CERTIFICATE-----
Generated at Tue Nov  4 05:02:35 2025 by rpki-client