Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
File:                     86DDB7C72F5357A9758F963A9236F982FD87D824.mft (raw, json)
Hash identifier:          r5SPt0TF33Of0cW28gjoodgejStGQgl1nEie5X8UpjI=
Subject key identifier:   8E:85:72:CF:B8:F6:3B:D9:57:02:A4:3C:08:DE:34:60:38:FE:7F:B5
Authority key identifier: 86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24
Certificate issuer:       /CN=86DDB7C72F5357A9758F963A9236F982FD87D824
Certificate serial:       14BCCB944510928A0769E1128F9BC4EFB13B83A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
Manifest number:          3A
Signing time:             Tue 13 Oct 2026 11:03:46 +0000
Manifest this update:     Tue 13 Oct 2026 10:58:46 +0000
Manifest next update:     Wed 14 Oct 2026 11:44:46 +0000
Files and hashes:         1: 323830343a333032633a3a2f33332d3333203d3e20323634393334.roa (hash: gknB4IcCEN3PHJVNEEKoJwxWQFD7EkBRT+DziSZwwgg=)
                          2: 3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa (hash: rLSiyen8X5LwqdENJl+YTZsknbNyc3UYTts3h7GwUdY=)
                          3: 3136382e3233322e36332e302f32342d3234203d3e20323634393334.roa (hash: ruJf/FrM9NQbdKwPigkavqUNYWGbf5l0Gm4UeWfkovY=)
                          4: 323830343a333032633a3a2f33322d3332203d3e20323634393334.roa (hash: 86Z8zqAzQecNTo3R/PMp+INb6FScXJcs+ss+H0xBsnQ=)
                          5: 323830343a333032633a3a2f33342d3334203d3e20323634393334.roa (hash: sZG/Sh5Y5AfwL7JO+BEyBIZyKQm9Q+uv2Fp+9PY6B7M=)
                          6: 3136382e3233322e36322e302f32342d3234203d3e20323634393334.roa (hash: kMifq+l7//Y+FFl4/MmBJIzG7YY9PJK6Aswe5/05M70=)
                          7: 3136382e3233322e36302e302f32322d3232203d3e20323634393334.roa (hash: scQEV85w8biHPL/bqDeEyEvWsE9Fn8rCRgzYK86WD9I=)
                          8: 3136382e3233322e36302e302f32342d3234203d3e20323634393334.roa (hash: /6gWoa47QrD9uBrDuzfCSAEdUlpF8T+qPGIJEHwsL/M=)
                          9: 86DDB7C72F5357A9758F963A9236F982FD87D824.crl (hash: MgE7KL/mslWNtcZEDIsCrDwQOPjr40ebJn1G9tHXBqc=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:cb:94:45:10:92:8a:07:69:e1:12:8f:9b:c4:ef:b1:3b:83:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86DDB7C72F5357A9758F963A9236F982FD87D824
        Validity
            Not Before: Oct 13 10:58:46 2026 GMT
            Not After : Oct 14 11:44:46 2026 GMT
        Subject: CN=8E8572CFB8F63BD95702A43C08DE346038FE7FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:eb:f7:fc:84:75:78:c5:4a:85:3a:7b:cc:
                    67:42:a0:49:7b:d4:d2:3f:ab:8b:65:bc:c8:46:00:
                    f3:2d:27:9f:87:01:93:51:2a:9e:68:34:0d:d0:f7:
                    5f:58:e5:78:69:6b:46:d7:80:4d:92:a9:91:47:7f:
                    c5:e3:ca:91:93:d9:1f:0c:ad:66:17:0d:02:c9:0f:
                    f5:0f:e4:a8:1f:da:a6:45:97:40:da:45:2a:3b:b1:
                    ce:f3:bd:bd:1e:79:90:4d:d2:bc:43:31:da:e8:3d:
                    73:62:4d:90:57:de:60:06:38:15:03:b4:f1:1d:94:
                    a6:ef:15:52:39:86:91:b9:23:b7:1d:be:4c:d9:c6:
                    39:4e:20:45:f6:93:c1:7e:e4:fe:6c:6b:3b:c0:5f:
                    19:7b:86:36:60:72:3c:20:37:bf:d7:81:bc:d9:38:
                    c9:ee:68:ed:12:2d:d1:7e:fb:23:53:21:6b:63:4c:
                    48:f7:ac:87:3a:d4:48:02:4a:c3:16:8b:ab:11:eb:
                    c7:15:4d:e2:29:94:f9:7d:a9:b1:f4:26:7f:82:4e:
                    f3:83:d7:70:45:f4:c0:9d:91:70:dd:a6:27:65:93:
                    ea:91:1b:31:87:c1:3d:38:22:e1:38:a4:72:e7:f0:
                    ed:02:ed:a7:0c:da:45:08:d0:f8:7b:15:5f:21:e8:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:72:CF:B8:F6:3B:D9:57:02:A4:3C:08:DE:34:60:38:FE:7F:B5
            X509v3 Authority Key Identifier:
                keyid:86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:67:97:aa:2c:85:82:ae:c3:82:26:b4:00:62:e8:8f:4b:29:
         af:35:62:3e:0e:b1:25:2d:1c:8c:1d:8c:9b:2f:a3:80:69:00:
         5a:32:b7:f7:00:91:e8:69:13:0f:5f:98:54:84:cf:09:57:7a:
         17:0a:2f:09:47:90:73:ba:e9:7c:5d:45:ef:99:b9:5e:28:0f:
         52:6d:8b:c0:bc:5e:b3:80:35:b6:96:f5:46:a1:a0:21:5b:f7:
         67:00:25:d8:1a:c4:7c:ed:0f:08:47:fd:5f:19:84:59:5e:5b:
         71:fd:12:b6:9d:48:6d:f9:fe:5c:ba:51:8c:e4:44:34:37:6c:
         e5:ba:ed:8a:a1:20:c8:49:1f:55:d5:c6:73:8d:c2:ef:8a:a1:
         a8:3d:c2:cc:e7:a1:69:be:38:54:e6:3b:fd:fc:f8:c7:6d:5b:
         e6:28:d6:99:51:52:7b:2c:da:4b:5a:1f:2d:d4:49:04:1e:99:
         42:57:8e:ae:f7:05:a8:29:0a:29:46:7c:be:bc:88:bb:76:15:
         a8:2e:fc:26:9a:bc:b6:a1:04:a8:b3:90:52:ca:a4:22:76:45:
         24:1d:f2:21:50:57:2a:10:14:a6:81:3f:14:60:65:b2:82:a7:
         89:7a:3e:1b:56:35:7b:86:55:1e:d1:91:66:fd:3d:99:78:2d:
         5c:03:94:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUFLzLlEUQkooHaeESj5vE77E7g6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZEREI3QzcyRjUzNTdBOTc1OEY5NjNBOTIzNkY5ODJG
RDg3RDgyNDAeFw0yNjEwMTMxMDU4NDZaFw0yNjEwMTQxMTQ0NDZaMDMxMTAvBgNV
BAMTKDhFODU3MkNGQjhGNjNCRDk1NzAyQTQzQzA4REUzNDYwMzhGRTdGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUROv3/IR1eMVKhTp7zGdCoEl7
1NI/q4tlvMhGAPMtJ5+HAZNRKp5oNA3Q919Y5Xhpa0bXgE2SqZFHf8XjypGT2R8M
rWYXDQLJD/UP5Kgf2qZFl0DaRSo7sc7zvb0eeZBN0rxDMdroPXNiTZBX3mAGOBUD
tPEdlKbvFVI5hpG5I7cdvkzZxjlOIEX2k8F+5P5sazvAXxl7hjZgcjwgN7/XgbzZ
OMnuaO0SLdF++yNTIWtjTEj3rIc61EgCSsMWi6sR68cVTeIplPl9qbH0Jn+CTvOD
13BF9MCdkXDdpidlk+qRGzGHwT04IuE4pHLn8O0C7acM2kUI0Ph7FV8h6Ol9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUjoVyz7j2O9lXAqQ8CN40YDj+f7UwHwYDVR0j
BBgwFoAUht23xy9TV6l1j5Y6kjb5gv2H2CQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhYcW1vMUdhUW9ueUc3ODZoNWpYd2c4WUJHTHN4M0RoY1F5dGNYTGRm
eFkvMC84NkREQjdDNzJGNTM1N0E5NzU4Rjk2M0E5MjM2Rjk4MkZEODdEODI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2RERCN0M3MkY1MzU3QTk3
NThGOTYzQTkyMzZGOTgyRkQ4N0Q4MjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEhYcW1vMUdhUW9ueUc3ODZoNWpYd2c4WUJHTHN4M0RoY1F5dGNYTGRmeFkvMC84
NkREQjdDNzJGNTM1N0E5NzU4Rjk2M0E5MjM2Rjk4MkZEODdEODI0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYGeXqiyFgq7Dgia0AGLoj0sprzViPg6xJS0cjB2Mmy+jgGkAWjK39wCR6GkT
D1+YVITPCVd6FwovCUeQc7rpfF1F75m5XigPUm2LwLxes4A1tpb1RqGgIVv3ZwAl
2BrEfO0PCEf9XxmEWV5bcf0Stp1Ibfn+XLpRjORENDds5brtiqEgyEkfVdXGc43C
74qhqD3CzOehab44VOY7/fz4x21b5ijWmVFSeyzaS1ofLdRJBB6ZQleOrvcFqCkK
KUZ8vryIu3YVqC78Jpq8tqEEqLOQUsqkInZFJB3yIVBXKhAUpoE/FGBlsoKniXo+
G1Y1e4ZVHtGRZv09mXgtXAOUbw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:23 2026 by rpki-client