
$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
File:                     470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft (raw, json)
Hash identifier:          WVGsZzAGMEFGsLBScq5SPTxe8X2Y0xE2XZUSrP7zZYc=
Subject key identifier:   A2:4F:EA:10:71:1A:00:E7:6A:66:D7:D8:2F:D0:0A:98:1F:F9:FD:13
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       1902E218854078F921C63941CAE41C339D1E740A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
Manifest number:          03DC
Signing time:             Tue 04 Nov 2025 00:08:40 +0000
Manifest this update:     Tue 04 Nov 2025 00:03:40 +0000
Manifest next update:     Wed 05 Nov 2025 15:12:40 +0000
Files and hashes:         1: 3230302e3233362e302e302f31392d3234203d3e203130383831.roa (hash: OyN30w34v+XEYJuBDNPpHRW8FgoEgFZORPe14ApOCOM=)
                          2: 3230302e31372e39362e302f32302d3234203d3e203130383831.roa (hash: Dd0MNbIQ9MHzANoy93/V9XUFZhqzUx1sUtab3MJ5vQQ=)
                          3: 470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl (hash: JoUd2TcHPJql25Mg2Lv8Mz+K5kDph95LwIkuKcG19vo=)
                          4: 3230302e31392e36342e302f32302d3234203d3e203130383831.roa (hash: /gc+Hp8hFYY6cpjhxSaE5ZKs/x/81jP9mgHggoODu6Y=)
                          5: 3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (hash: u4bLjuVXDa9Rq9UR54870oC8J8+TetV0EboyJh9CCTg=)
                          6: 3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (hash: EqD3FLMgDqM/N5k54C5xgd9XjW29tzS0P2lCbP0478M=)
                          7: 323830313a38323a3a2f33322d3438203d3e203130383831.roa (hash: R5X7TgUXCHd4SY4o06VYZ2ngQGnnUyNflXm6oDMtsxw=)
                          8: 3230302e3133342e302e302f31362d3234203d3e203130383831.roa (hash: SjGEF7jl/SrzMPfuWamc6DOzm/lQD5V2YArTJ1qeZ1E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:31:19 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:02:e2:18:85:40:78:f9:21:c6:39:41:ca:e4:1c:33:9d:1e:74:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Nov  4 00:03:40 2025 GMT
            Not After : Nov  5 15:12:40 2025 GMT
        Subject: CN=A24FEA10711A00E76A66D7D82FD00A981FF9FD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:cb:92:0a:c5:43:ba:af:95:d1:e7:94:10:
                    c3:e3:0f:3a:a1:90:d6:f3:e1:f7:e6:3c:e5:bd:2a:
                    b8:6b:94:3e:42:3c:d7:56:de:27:0c:65:b0:af:4b:
                    3f:8b:4c:8e:6d:08:d8:47:f3:55:7d:07:93:9d:37:
                    c6:88:d4:67:c9:b7:90:dd:46:fd:c0:d8:b8:7e:44:
                    f1:ed:bc:f5:bf:fa:61:c4:5a:6c:91:e9:bc:81:49:
                    f6:c0:28:2d:b9:fa:72:67:0c:b5:bb:5f:9d:54:6a:
                    ba:5a:15:54:2a:62:d8:bd:3b:a9:7a:84:db:f6:3a:
                    96:e3:fd:c5:97:b1:9c:e3:35:fa:6a:e3:61:a2:91:
                    d5:cb:ba:cb:3e:44:46:93:96:96:fa:4a:13:f5:bd:
                    1c:62:19:5d:d2:74:2f:e1:9a:9e:d6:ff:de:f6:83:
                    1c:16:ee:d8:5c:dc:47:e9:a6:55:7f:fb:57:b9:1c:
                    1b:96:0d:69:a7:c6:a8:30:2d:eb:b6:39:fe:04:ef:
                    53:72:62:e2:bd:91:ad:40:7b:79:44:1e:40:04:a4:
                    65:f6:91:86:11:64:89:bd:07:47:2e:e5:cb:06:43:
                    22:75:bd:91:26:92:7b:9b:46:fa:ea:93:af:ab:07:
                    bd:34:6a:db:c3:7d:4a:5b:56:7a:b9:77:d8:5d:de:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:EA:10:71:1A:00:E7:6A:66:D7:D8:2F:D0:0A:98:1F:F9:FD:13
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         89:27:f2:43:a3:1d:63:d5:41:b5:a3:d6:0f:6c:83:35:c6:25:
         b5:0a:68:4a:9f:b3:72:89:11:09:9c:b6:e4:9a:39:32:40:b6:
         d0:69:e1:d3:82:b5:7e:5f:f8:fe:4d:27:8b:86:53:26:e1:a2:
         69:03:cb:bf:7e:da:bc:4a:cb:fd:ed:c7:47:73:f5:5c:58:75:
         ed:98:f7:0a:06:37:6f:2a:d1:4d:2d:c9:83:7f:21:60:76:43:
         ad:98:4a:9a:a8:fe:74:b8:4c:3f:f6:33:df:ad:2c:95:f3:7e:
         e8:47:9b:17:8c:ae:c4:4e:31:6d:c7:75:a2:4c:17:ea:31:76:
         ba:d1:75:7f:34:71:6c:80:61:72:8f:e5:d8:51:5d:2e:df:54:
         1f:27:37:21:d3:8d:8a:b4:ca:4f:98:0c:f0:7a:16:e2:a3:5c:
         14:9b:53:4f:28:d0:43:ef:22:35:0c:c5:37:02:be:25:ca:37:
         c0:8b:21:69:55:0d:45:3d:f2:75:6c:4d:28:94:c3:9a:01:66:
         fd:c0:2f:e7:a4:6b:02:18:16:9e:5e:77:16:a3:46:13:57:92:
         f4:b6:06:19:72:de:fd:15:92:94:f8:c7:ca:30:dc:f6:e2:a0:
         4a:66:b0:d7:e7:4b:64:6f:50:ee:93:13:0c:40:71:20:8e:2d:
         08:ce:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 05:21:48 2025 by rpki-client