
$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
File:                     3CF129D24760CA58DEE1B42CDACAE4407710A219.mft (raw, json)
Hash identifier:          hkcSbgxO0T+wRM5GGrMqke5d1XMCzUABeMrtduZDp2Y=
Subject key identifier:   8F:B0:26:8E:15:D5:BC:21:AB:80:73:D6:78:15:6E:E7:83:F3:DA:A1
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       1B6990A383C285CFEA3BAC984E256892ED971927
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
Manifest number:          02EC
Signing time:             Mon 03 Nov 2025 10:57:31 +0000
Manifest this update:     Mon 03 Nov 2025 10:52:31 +0000
Manifest next update:     Tue 04 Nov 2025 14:38:31 +0000
Files and hashes:         1: 3139302e392e37382e302f32342d3234203d3e20323731363432.roa (hash: 3CSXvgD8gZZJY3OihNgW2wuvdgpLd+7AI9EKOovQkxU=)
                          2: 3CF129D24760CA58DEE1B42CDACAE4407710A219.crl (hash: ykTDDHnqpXJI+nuxhjm8JR51L3me++60J4F4CnEMgbU=)
                          3: 3139302e392e37362e302f32322d3232203d3e20323731363432.roa (hash: vkdrLfrEgIF4V9ADn9mDWAlBjZbSAmaarjhEV5821lo=)
                          4: 3139302e392e37362e302f32342d3234203d3e20323731363432.roa (hash: qS7YOdWdMSn62fYjd4tTd9FWC5HbQvc5gaTCfZGqURY=)
                          5: 3139302e392e37392e302f32342d3234203d3e20323731363432.roa (hash: efOB6BUnFRkXMc/5Xb/3RhyF8NSmzmGLP+0nD5VgYIA=)
                          6: 3139302e392e37372e302f32342d3234203d3e20323731363432.roa (hash: qMk30ymCN/0mdqfHbnOIw7ruJwrflPlCaLrbhr/XDBE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:38:31 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:69:90:a3:83:c2:85:cf:ea:3b:ac:98:4e:25:68:92:ed:97:19:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Nov  3 10:52:31 2025 GMT
            Not After : Nov  4 14:38:31 2025 GMT
        Subject: CN=8FB0268E15D5BC21AB8073D678156EE783F3DAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:41:ec:91:4f:c2:f0:99:1a:da:63:df:e7:
                    83:df:ca:f3:e6:8e:1c:cf:f7:ff:23:d7:b4:7a:b4:
                    3b:d5:77:fb:44:1a:b9:90:08:dd:fa:27:3f:23:e2:
                    4f:2f:59:03:9d:93:c7:4b:c4:81:47:6d:8a:ea:36:
                    83:cd:e0:73:7c:9e:b7:b1:4c:54:4a:18:42:61:85:
                    47:9c:39:39:af:19:1a:cc:f7:10:8c:4c:a0:c1:34:
                    35:87:61:eb:90:c9:5e:20:03:57:85:9b:5a:6f:e3:
                    e7:b6:05:2c:51:88:4c:cd:bb:ea:b4:b4:62:1e:ef:
                    cb:6b:d6:b8:f4:32:f1:3a:42:6d:66:19:a3:cb:54:
                    97:1f:27:06:16:fa:97:c2:28:45:d5:d4:c7:20:3f:
                    60:43:42:31:ab:8e:47:72:dc:3b:97:64:b6:91:7f:
                    bb:e6:95:61:6c:88:43:09:c7:49:d6:05:34:b0:79:
                    40:4f:0b:66:a4:89:45:b0:69:0d:a4:f8:43:30:69:
                    84:4b:9e:b2:6b:9f:37:fa:20:3d:44:29:6a:5e:b9:
                    5f:eb:a7:8f:11:87:18:9e:f2:86:9a:54:40:8d:4b:
                    b7:3a:b4:eb:78:11:fc:93:f3:a6:fa:43:a7:8b:69:
                    ad:09:04:71:43:11:3d:4a:77:8a:30:e8:8d:e4:a1:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B0:26:8E:15:D5:BC:21:AB:80:73:D6:78:15:6E:E7:83:F3:DA:A1
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0e:06:59:01:46:d0:dd:24:9b:f9:1f:07:5d:c5:20:36:54:c9:
         0f:c6:f8:2c:79:26:c6:1d:05:4e:eb:1d:dc:4c:75:65:e6:7e:
         e4:a3:e5:c3:88:16:37:44:69:a5:72:19:bc:5c:18:5c:ca:83:
         fd:51:70:85:07:8f:7d:b0:23:b3:9c:b4:2e:bc:b9:b1:8c:c4:
         51:ea:d0:81:a2:8f:77:cc:a6:2a:bf:5c:27:0c:38:97:e8:04:
         d7:ea:5f:42:58:15:3f:a3:17:a1:3a:19:e6:13:a7:f4:7a:14:
         bf:c4:f7:24:c9:28:75:4b:99:7c:32:45:f5:82:4f:e7:47:a4:
         ff:79:ba:43:c3:93:6c:17:be:75:05:9d:d5:24:0a:7e:73:cc:
         23:35:56:a1:fa:16:c6:88:b9:0b:49:1e:78:ee:57:32:0c:3d:
         de:20:52:b9:94:f7:d4:f2:0a:b1:0b:5f:e2:c6:d0:39:2d:e5:
         8c:76:73:76:eb:5c:58:84:5c:88:5f:72:66:96:b6:fa:d4:8b:
         ce:e9:dc:2b:67:96:5d:99:32:92:af:df:ee:f0:9f:de:90:63:
         21:39:34:5d:9c:db:b5:b5:cd:be:22:9b:cd:1d:bc:1b:eb:85:
         52:2a:67:24:02:d0:d4:89:67:b0:bc:5d:ea:5b:b2:58:15:30:
         f8:e9:a5:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUG2mQo4PChc/qO6yYTiVoku2XGScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NGMTI5RDI0NzYwQ0E1OERFRTFCNDJDREFDQUU0NDA3
NzEwQTIxOTAeFw0yNTExMDMxMDUyMzFaFw0yNTExMDQxNDM4MzFaMDMxMTAvBgNV
BAMTKDhGQjAyNjhFMTVENUJDMjFBQjgwNzNENjc4MTU2RUU3ODNGM0RBQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuUHskU/C8Jka2mPf54PfyvPm
jhzP9/8j17R6tDvVd/tEGrmQCN36Jz8j4k8vWQOdk8dLxIFHbYrqNoPN4HN8nrex
TFRKGEJhhUecOTmvGRrM9xCMTKDBNDWHYeuQyV4gA1eFm1pv4+e2BSxRiEzNu+q0
tGIe78tr1rj0MvE6Qm1mGaPLVJcfJwYW+pfCKEXV1McgP2BDQjGrjkdy3DuXZLaR
f7vmlWFsiEMJx0nWBTSweUBPC2akiUWwaQ2k+EMwaYRLnrJrnzf6ID1EKWpeuV/r
p48Rhxie8oaaVECNS7c6tOt4EfyT86b6Q6eLaa0JBHFDET1Kd4ow6I3koZMtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUj7AmjhXVvCGrgHPWeBVu54Pz2qEwHwYDVR0j
BBgwFoAUPPEp0kdgylje4bQs2srkQHcQohkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVL
YVEvMS8zQ0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRjEyOUQyNDc2MENBNThE
RUUxQjQyQ0RBQ0FFNDQwNzcxMEEyMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVLYVEvMS8z
Q0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADgZZAUbQ3SSb+R8HXcUgNlTJD8b4LHkmxh0FTusd3Ex1ZeZ+5KPlw4gWN0Rp
pXIZvFwYXMqD/VFwhQePfbAjs5y0Lry5sYzEUerQgaKPd8ymKr9cJww4l+gE1+pf
QlgVP6MXoToZ5hOn9HoUv8T3JMkodUuZfDJF9YJP50ek/3m6Q8OTbBe+dQWd1SQK
fnPMIzVWofoWxoi5C0keeO5XMgw93iBSuZT31PIKsQtf4sbQOS3ljHZzdutcWIRc
iF9yZpa2+tSLzuncK2eWXZkykq/f7vCf3pBjITk0XZzbtbXNviKbzR28G+uFUipn
JALQ1IlnsLxd6luyWBUw+Omljg==
-----END CERTIFICATE-----
Generated at Tue Nov  4 00:29:04 2025 by rpki-client