
$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
File:                     0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft (raw, json)
Hash identifier:          PzhIgPJJINas4I0gMrbA8Q5t9q5ApvCBo8tFpV1r0hY=
Subject key identifier:   D8:58:62:19:F9:12:DD:87:97:0C:EB:D6:86:8F:97:F2:39:00:A7:BB
Authority key identifier: 0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84
Certificate issuer:       /CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
Certificate serial:       5424823A3D64DCEE77452887A2D96DD88F0A915E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
Manifest number:          9E
Signing time:             Mon 03 Nov 2025 06:39:49 +0000
Manifest this update:     Mon 03 Nov 2025 06:34:49 +0000
Manifest next update:     Tue 04 Nov 2025 09:32:49 +0000
Files and hashes:         1: 3137372e32302e302e302f32302d3230203d3e203533323339.roa (hash: QtPbHa7lu+UNe8tm5IA7l4yNbjifzGOqopbbej7nZwU=)
                          2: 3137372e32302e322e302f32342d3234203d3e203533323339.roa (hash: yds1Hv78tviu6MtuTNjN0gpj9mA15TaO3dnm9Appr54=)
                          3: 3137372e32302e302e302f31372d3137203d3e203533323339.roa (hash: 9X03hXvB6d3CODspvsodJF+h2YCJZizzB0FUJrYKL+M=)
                          4: 3137372e32302e302e302f32342d3234203d3e203533323339.roa (hash: GXETWScQ3zzJXZIKPD65cti/UDuyYOgRi2PSy5uj1ZU=)
                          5: 3137372e32302e31382e302f32342d3234203d3e203533323339.roa (hash: iuRZRw1MBef/FngFcKsuBTdS9UYtbRzdFkElenTPEn8=)
                          6: 3137372e32302e32312e302f32342d3234203d3e203533323339.roa (hash: nLqPzVZENGix+oMlTiwUSURDBaV4YfR1CFujq+yqCzw=)
                          7: 3137372e32302e302e302f31372d3234203d3e203533323339.roa (hash: Gpsl/G24ftWkuanQfA50DDI06fUcSMukG2uf7nE4GCs=)
                          8: 0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl (hash: xQ2S5/TjKGQJWBJp9WleabuWpldjy/yCqkDqunhqXds=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:32:49 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:24:82:3a:3d:64:dc:ee:77:45:28:87:a2:d9:6d:d8:8f:0a:91:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384
        Validity
            Not Before: Nov  3 06:34:49 2025 GMT
            Not After : Nov  4 09:32:49 2025 GMT
        Subject: CN=D8586219F912DD87970CEBD6868F97F23900A7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:ab:0f:ee:59:d2:2f:b1:22:1c:35:53:86:
                    d2:17:2f:8f:72:37:d1:f1:8d:7e:ba:01:af:b9:04:
                    f2:1a:cd:72:4c:40:7f:50:87:b5:bd:1c:e2:3b:2b:
                    27:41:45:56:7a:b0:39:2e:40:70:e0:c5:86:0e:1f:
                    67:7d:ff:8f:ed:cc:a8:07:64:04:3a:0b:aa:0f:1a:
                    41:0b:dd:a3:0d:57:10:0d:74:64:b8:51:50:d3:cb:
                    40:59:0d:60:4e:1a:07:64:8f:93:2c:2d:a0:69:91:
                    bb:0d:df:1c:42:6a:3b:9e:27:2a:52:02:74:f5:31:
                    93:7f:1c:0d:31:62:bb:34:1c:7d:f2:ba:b8:be:b7:
                    36:ab:fa:e2:95:e1:18:58:af:6e:0a:85:16:14:4b:
                    95:10:0d:0b:fe:a2:2b:66:73:97:d7:af:33:8c:75:
                    92:3f:8d:37:0b:e9:97:a0:05:53:11:e0:f6:41:36:
                    53:1f:74:5d:45:50:c8:87:f6:5c:d5:af:1b:c3:14:
                    d3:36:79:4b:97:ea:73:f4:23:e1:66:72:d6:ae:2b:
                    2a:ab:92:54:1f:2c:d6:da:52:9a:f6:17:d9:88:7b:
                    88:a0:0e:89:6c:3b:24:28:a3:be:03:35:9d:31:ec:
                    01:65:3f:25:48:7e:cd:03:0e:b1:68:c3:89:3f:82:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:62:19:F9:12:DD:87:97:0C:EB:D6:86:8F:97:F2:39:00:A7:BB
            X509v3 Authority Key Identifier:
                keyid:0B:D6:FA:DA:5B:9D:4A:CC:75:21:C6:41:3D:70:0E:E9:DC:D4:E3:84
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/0BD6FADA5B9D4ACC7521C6413D700EE9DCD4E384.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         27:1f:0a:96:37:77:41:ab:bf:6b:07:5b:0c:01:fe:53:19:30:
         38:45:19:ba:1d:a7:df:71:c8:3c:61:ae:5a:63:f9:d5:c7:db:
         ed:b0:c3:f4:73:7e:5a:36:f6:30:ea:28:51:9b:fb:83:19:bf:
         2b:5d:02:e9:fc:10:bb:4d:6e:f8:56:c1:fc:ef:76:ec:3c:22:
         11:03:a6:e8:f3:31:e2:32:c7:c4:fd:ae:bd:7f:c1:6c:55:e6:
         5e:6d:1d:85:9a:98:0a:29:fa:c1:6b:04:99:d5:2d:cb:2e:4d:
         77:78:ba:50:ab:54:3c:d5:1e:07:51:95:81:98:0a:42:05:0a:
         f4:a8:2b:f3:6d:9b:b7:d4:ba:4c:27:08:19:85:44:1b:9a:51:
         02:0d:29:b0:40:43:07:17:91:42:f2:d8:f3:27:5d:58:d8:89:
         c9:d1:49:39:f1:42:c7:81:6e:1c:e9:1e:46:c9:64:8c:f9:6f:
         81:47:07:22:8c:ef:55:b9:98:0d:70:58:26:36:1b:f2:2d:ef:
         67:3c:fc:82:89:46:3d:65:4e:62:cd:60:0a:25:a6:44:1c:dd:
         c4:2c:13:0e:13:cf:77:4e:1f:69:4e:e2:0e:57:05:c0:6a:e4:
         91:c1:6c:2c:11:7f:c4:65:95:40:06:4e:83:ce:92:bb:38:3a:
         85:29:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 00:26:03 2025 by rpki-client