Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
File:                     0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft (raw, json)
Hash identifier:          f731hT2fgc2Xf9eD74+OCYA/UDiQsTsBAW+0fIU4T3U=
Subject key identifier:   A6:F7:30:2D:D8:A8:AC:14:8F:32:EE:93:1E:1F:2C:8C:43:02:18:D1
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       42B07C14B35F8A6F03406615F3E73CFD261C00FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
Manifest number:          0516
Signing time:             Fri 30 Oct 2026 18:54:12 +0000
Manifest this update:     Fri 30 Oct 2026 18:49:12 +0000
Manifest next update:     Sat 31 Oct 2026 21:42:12 +0000
Files and hashes:         1: 3137302e37382e32382e302f32322d3232203d3e203532353837.roa (hash: QkCov4dW4mV16qROCveAsn2j0+OUgF2BegrvBH0L1FA=)
                          2: 3137372e38372e3230302e302f32342d3234203d3e203532353837.roa (hash: ZQZpY2LbZaBcYfY8ys0/7Uva1ra1wWylY7CpITdUGns=)
                          3: 3137302e37382e33302e302f32342d3234203d3e203532353837.roa (hash: olOO04m9t8Ps14gj5jFWZUhYwsnbRb0dqvEmjEo3Ajw=)
                          4: 0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl (hash: +7A5IdpBtVACojFxrOUNDy9cFJNlWgLeHm2JijF7Qck=)
                          5: 3137372e38372e3230302e302f32322d3232203d3e203532353837.roa (hash: 4AAOmnocLf0VjYCiLcDzi3NuDyNnc+CAAeeV1qH41yM=)
                          6: 3137302e37382e32382e302f32342d3234203d3e203532353837.roa (hash: fmyiRBx3ikOjVKsXkQ8cpvxr8wjsvyIXdzNlU8vv5+g=)
                          7: 323830343a386563303a3a2f33322d3332203d3e203532353837.roa (hash: pTZEVhVDPQYGCQbBV41GVXkSfG5aFQnLiOopgunTjyQ=)
                          8: 3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (hash: u/D4mAVwU+R8k3khTu6uCC9x4VBXmuxX0LXR57a01/0=)
                          9: 3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (hash: Zp/yT+kZHYiJku2AdlWwpWxZVM16k2AVqwfTLoZGf4o=)
                          10: 3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (hash: AR7/kpBii+RLHSHh0aogJx0jZ5vxXNe2H3VQpREKWWM=)
                          11: 3137302e37382e33312e302f32342d3234203d3e203532353837.roa (hash: MWDMjiMUn4Kf6iPat91nt2NRzFgP5AyHabE7IhS62W8=)
                          12: 3137302e37382e32392e302f32342d3234203d3e203532353837.roa (hash: eY27yVXw0//SjO9LlvDHd2NdOyFHl4rzSbljo/t77Es=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 21:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:7c:14:b3:5f:8a:6f:03:40:66:15:f3:e7:3c:fd:26:1c:00:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Oct 30 18:49:12 2026 GMT
            Not After : Oct 31 21:42:12 2026 GMT
        Subject: CN=A6F7302DD8A8AC148F32EE931E1F2C8C430218D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:e1:76:72:4f:68:fc:4a:b7:eb:96:87:57:
                    57:e1:15:74:40:50:21:92:9c:69:f7:b3:5b:2d:e8:
                    fc:20:13:c9:81:87:02:f6:4c:bb:c1:4c:64:35:b0:
                    c5:12:06:b8:67:48:5e:34:dd:10:05:48:e2:7c:7e:
                    10:e5:81:28:47:c1:4a:99:97:87:f7:f6:91:24:70:
                    61:13:1a:6d:89:bd:ab:d8:5d:41:7d:6e:c7:71:df:
                    d2:52:25:b6:9e:ed:45:1c:0a:03:8d:af:0d:f5:fa:
                    9e:ed:5a:c7:fd:11:5e:e9:29:04:13:2f:8a:77:e0:
                    4b:17:48:8f:4f:0b:a5:94:4a:54:19:18:d5:82:34:
                    31:3d:cd:0f:61:41:1b:88:f2:b4:8a:db:4e:0d:52:
                    62:76:7d:4a:39:78:fe:6c:ea:0e:09:2c:c4:55:f9:
                    3d:22:08:71:bb:d0:dd:a8:0f:a7:ed:e9:10:97:b7:
                    88:32:52:2f:aa:13:bf:39:a0:b4:ee:b5:04:39:e7:
                    f6:41:5c:5e:a2:79:85:ec:7c:e3:d8:06:be:ca:1e:
                    9c:45:72:03:1f:91:9b:5f:89:06:42:af:1a:bf:9c:
                    92:e9:72:c3:93:43:16:38:35:0f:f9:d9:b1:65:bd:
                    89:bb:02:0c:1f:ca:67:be:d7:7a:d4:76:b1:96:5f:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F7:30:2D:D8:A8:AC:14:8F:32:EE:93:1E:1F:2C:8C:43:02:18:D1
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:3d:1f:d5:89:5c:1d:a2:11:6e:37:94:12:ef:a7:8d:4a:
         ef:06:41:51:80:43:5e:c9:4b:db:73:fb:e4:07:7c:ae:33:48:
         78:b6:0a:33:b7:26:ca:45:f0:e1:ad:fd:39:71:b4:e2:c7:9c:
         b9:bf:29:43:77:1e:39:8d:65:f5:d1:ab:27:bc:22:b6:72:7b:
         11:b2:44:1a:5b:d9:fb:87:ed:20:73:38:15:99:b2:d4:c6:48:
         67:62:29:7a:fd:06:3d:9e:25:4d:ec:73:94:a3:ff:67:94:ab:
         1e:fe:7a:c9:2f:2a:51:c0:88:dc:d8:da:ec:12:85:2a:46:51:
         54:9d:5e:f3:9d:3a:bd:f7:82:72:3a:54:e5:aa:aa:d3:48:a3:
         05:90:06:57:3c:88:e7:1e:b6:13:c9:69:41:d7:37:ff:01:e4:
         da:a4:1f:92:18:e0:d6:d6:7c:63:ed:b7:92:60:90:d0:0f:57:
         81:78:fd:62:b5:f3:bd:fd:45:cc:42:5a:18:b7:c0:88:68:ff:
         4b:b7:4d:4f:37:5c:26:f9:cb:2a:e3:41:78:e0:b4:e7:40:59:
         8e:dc:c4:7b:fb:2b:ff:41:00:18:c6:1d:40:99:16:2d:86:21:
         46:b7:7b:af:40:6b:9d:fb:b3:61:05:91:db:5e:1f:2c:f3:f4:
         aa:df:80:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQrB8FLNfim8DQGYV8+c8/SYcAPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGM0RBREJGNkY0MUREQkZCMjIxMDdENjgyQkFCNDg1
OUVCRUY5NjAeFw0yNjEwMzAxODQ5MTJaFw0yNjEwMzEyMTQyMTJaMDMxMTAvBgNV
BAMTKEE2RjczMDJERDhBOEFDMTQ4RjMyRUU5MzFFMUYyQzhDNDMwMjE4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChS+F2ck9o/Eq365aHV1fhFXRA
UCGSnGn3s1st6PwgE8mBhwL2TLvBTGQ1sMUSBrhnSF403RAFSOJ8fhDlgShHwUqZ
l4f39pEkcGETGm2JvavYXUF9bsdx39JSJbae7UUcCgONrw31+p7tWsf9EV7pKQQT
L4p34EsXSI9PC6WUSlQZGNWCNDE9zQ9hQRuI8rSK204NUmJ2fUo5eP5s6g4JLMRV
+T0iCHG70N2oD6ft6RCXt4gyUi+qE785oLTutQQ55/ZBXF6ieYXsfOPYBr7KHpxF
cgMfkZtfiQZCrxq/nJLpcsOTQxY4NQ/52bFlvYm7Agwfyme+13rUdrGWX1lvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpvcwLdiorBSPMu6THh8sjEMCGNEwHwYDVR0j
BBgwFoAUDPPa2/b0Hdv7IhB9aCurSFnr75YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT
a00vMS8wQ0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjNEQURCRjZGNDFEREJG
QjIyMTA3RDY4MkJBQjQ4NTlFQkVGOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dTa00vMS8w
Q0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEOo9H9WJXB2iEW43lBLvp41K7wZBUYBDXslL23P75Ad8rjNIeLYKM7cmykXw
4a39OXG04secub8pQ3ceOY1l9dGrJ7witnJ7EbJEGlvZ+4ftIHM4FZmy1MZIZ2Ip
ev0GPZ4lTexzlKP/Z5SrHv56yS8qUcCI3Nja7BKFKkZRVJ1e8506vfeCcjpU5aqq
00ijBZAGVzyI5x62E8lpQdc3/wHk2qQfkhjg1tZ8Y+23kmCQ0A9XgXj9YrXzvf1F
zEJaGLfAiGj/S7dNTzdcJvnLKuNBeOC050BZjtzEe/sr/0EAGMYdQJkWLYYhRrd7
r0BrnfuzYQWR214fLPP0qt+AHg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:20:29 2026 by rpki-client