Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
File:                     12FE16FACD299316FCEF73CFEA782844D7C2E698.mft (raw, json)
Hash identifier:          2lT+Cn2EMp5hCHCFtVfqug4Bv6zQZCwmUgpFWmpYelQ=
Subject key identifier:   34:A7:83:60:D1:E5:2A:C1:D3:97:59:B7:3C:2C:4D:30:99:67:FF:E8
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       7A92595F699CB4090E5083DFB7960A7111CBFF0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
Manifest number:          0521
Signing time:             Sun 01 Nov 2026 13:10:00 +0000
Manifest this update:     Sun 01 Nov 2026 13:05:00 +0000
Manifest next update:     Mon 02 Nov 2026 17:03:00 +0000
Files and hashes:         1: 323830343a323465343a343030303a3a2f33362d3336203d3e20323634323437.roa (hash: blNBGy0RsdTX/gu72kuDk88UO+pnCEpVnW1Hhaon8HM=)
                          2: 323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa (hash: 1p5JVB+QtH6/9cYrFpcwuZaMnETxC0yOKPYMWQrJGbw=)
                          3: 12FE16FACD299316FCEF73CFEA782844D7C2E698.crl (hash: 5IarwZwaryLu3kw8V52d7zAMIwazy31F22Wjtcj9Dus=)
                          4: 323830343a323465343a633030303a3a2f33362d3336203d3e20323634323437.roa (hash: ZfrkKMu6nv6PDgeqpehCmLCT2qVRp2AbIWFoL6TwBcs=)
                          5: 3133382e3131382e33322e302f32342d3234203d3e20323634323437.roa (hash: WhPSQbvEMWr6uRZBv7o5KJXc2pRYfsgrxjsejbBysoU=)
                          6: 323830343a323465343a353030303a3a2f33362d3336203d3e20323634323437.roa (hash: 1EZECeplu3aYu3X0/V3N1aItFz4410nlkILOAUBDOkI=)
                          7: 323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa (hash: 8TxD15B0A0bAMdfw5gVOfdaODyvf4Fnc+gYO6r0rbDE=)
                          8: 323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (hash: EF15jBZSyTHZQvsdvblHtdmAWc8RHgvtx1gXjTVp0/c=)
                          9: 323830343a323465343a653030303a3a2f33362d3336203d3e20323634323437.roa (hash: KROZZb//qCgFVcJRx9Lvfah5TfuRPSCJwAjDu983XlI=)
                          10: 323830343a323465343a643030303a3a2f33362d3336203d3e20323634323437.roa (hash: OFLqKyC2wvV+jSOBFIiQqu49IwVi2Hb3kSB/JJKt4pE=)
                          11: 3133382e3131382e33352e302f32342d3234203d3e20323634323437.roa (hash: uTqUXJ9FeR/61RpkRpJ6i7Fg6n721YvYQcWy6B25eVA=)
                          12: 323830343a323465343a393030303a3a2f33362d3336203d3e20323634323437.roa (hash: Tr2QWijcWrBTjgjErmRXkORWg3dwAs82/z76c89s5Cc=)
                          13: 323830343a323465343a313030303a3a2f33362d3336203d3e20323634323437.roa (hash: CZGyPyUhc+MdlJtPbekN3S5vnYgaF9wF/5Ced8FS+OM=)
                          14: 323830343a323465343a623030303a3a2f33362d3336203d3e20323634323437.roa (hash: T+HrTdOg2Tgi11yk2lcZ+2RLLEWLlzIIBRNaRn/RoXA=)
                          15: 323830343a323465343a323030303a3a2f33362d3336203d3e20323634323437.roa (hash: GcVjspCIgjroYnv1FcIm7qRELxYajUsozeUcql8DHpQ=)
                          16: 323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa (hash: 7A6yE+znJHh0UA0NTtI4JNvDMnOaARFaaNFiFxzpJHY=)
                          17: 323830343a323465343a613030303a3a2f33362d3336203d3e20323634323437.roa (hash: +ifaiDAhYkqUdYCH4fsfbJhFSAZb5T8/zs9U+uWmZTc=)
                          18: 3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (hash: bKrKBDZ9q0FEy0l5xYvhjhv507ag3BKr653/gg2SvHM=)
                          19: 3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (hash: mt49kDAbEBAWnJJvTlDXNml7qaTzm1n1EWiuYU06l4Q=)
                          20: 323830343a323465343a383030303a3a2f33362d3336203d3e20323634323437.roa (hash: a+XnfYZLVS5bXMtPFu28MEL92XTJlU2i3Qx0/TA9niQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 17:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:92:59:5f:69:9c:b4:09:0e:50:83:df:b7:96:0a:71:11:cb:ff:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Nov  1 13:05:00 2026 GMT
            Not After : Nov  2 17:03:00 2026 GMT
        Subject: CN=34A78360D1E52AC1D39759B73C2C4D309967FFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9d:50:15:aa:69:db:31:4d:48:0b:35:bd:08:
                    86:8a:f8:ad:e3:75:67:05:aa:37:8d:bc:5e:4f:c4:
                    e7:4a:a7:ab:65:6c:98:38:c4:13:5e:a1:0f:23:3b:
                    dc:01:75:11:79:01:fc:94:a6:2d:6a:65:a8:63:1f:
                    a4:45:12:eb:28:74:1e:24:e8:cf:5b:3b:85:b0:9d:
                    70:20:77:a9:5c:0e:25:58:10:d6:3d:98:72:c4:4e:
                    87:f9:35:d1:fb:09:1e:12:62:2f:6c:7e:ce:02:1a:
                    38:1b:ee:30:1b:00:e9:bd:96:2f:5c:f3:c7:d7:8c:
                    3f:aa:74:2e:09:97:87:04:ea:fc:a1:f4:d7:d9:a8:
                    2d:f6:d5:ee:b7:ef:2f:94:b6:c0:e2:1c:85:ad:16:
                    9a:35:44:b5:63:cf:f8:c6:62:13:ef:e2:df:dd:f5:
                    8f:bb:4b:ba:22:86:19:e2:0f:79:ff:e3:f5:b2:aa:
                    9f:67:c2:5d:c7:82:ba:22:51:c6:89:1b:ad:59:57:
                    ca:47:5e:6e:d0:a0:26:85:36:19:9f:f8:d9:40:28:
                    95:f8:e2:68:65:55:60:17:36:97:95:b3:35:cd:0b:
                    c4:da:8d:94:a5:5c:88:e0:9d:42:fc:16:2f:07:41:
                    2d:6e:a0:4d:7e:31:0d:ee:09:e7:9e:a2:1c:23:84:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A7:83:60:D1:E5:2A:C1:D3:97:59:B7:3C:2C:4D:30:99:67:FF:E8
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:12:ea:88:cf:b3:55:1d:6c:53:49:43:51:af:dc:0e:35:c6:
         8d:9f:d0:5d:c8:32:19:4c:98:98:4a:3d:da:48:27:fc:0e:36:
         34:fd:4b:96:f6:ff:5e:2f:c6:90:92:6c:51:7c:9c:c2:7b:95:
         77:21:04:57:33:81:10:06:6f:16:6c:bc:0e:80:54:04:20:e7:
         68:94:92:e9:ed:46:2a:a3:75:d9:b3:82:31:74:8a:c5:75:a5:
         7f:2b:60:94:43:19:05:64:5d:cb:9b:71:b2:ab:b4:72:4c:fd:
         2b:73:c1:80:20:3e:e6:fb:0f:5b:15:07:44:ee:ba:1a:16:8b:
         f9:0c:8d:bc:16:9e:a2:59:dc:17:f8:90:de:6c:3b:4c:ba:2e:
         1f:22:2c:e3:fb:cd:dd:36:13:62:f2:da:4c:b5:97:f2:d4:de:
         13:9b:fc:41:38:54:97:b2:d0:cf:8b:38:b0:dd:fa:5c:f0:f4:
         2b:38:3f:27:ff:82:3f:11:84:85:c5:94:a1:8f:52:c2:f5:06:
         e5:b7:79:3c:bf:70:51:9f:99:4e:87:8a:d1:d6:93:b4:53:1d:
         5b:de:c0:6a:71:17:50:f7:21:93:9a:fa:68:b3:7c:a9:74:d7:
         44:45:cc:56:68:a2:02:fc:64:dd:03:b3:28:4e:34:d4:1b:96:
         d6:bf:85:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUepJZX2mctAkOUIPft5YKcRHL/wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNjExMDExMzA1MDBaFw0yNjExMDIxNzAzMDBaMDMxMTAvBgNV
BAMTKDM0QTc4MzYwRDFFNTJBQzFEMzk3NTlCNzNDMkM0RDMwOTk2N0ZGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwnVAVqmnbMU1ICzW9CIaK+K3j
dWcFqjeNvF5PxOdKp6tlbJg4xBNeoQ8jO9wBdRF5AfyUpi1qZahjH6RFEusodB4k
6M9bO4WwnXAgd6lcDiVYENY9mHLETof5NdH7CR4SYi9sfs4CGjgb7jAbAOm9li9c
88fXjD+qdC4Jl4cE6vyh9NfZqC321e637y+UtsDiHIWtFpo1RLVjz/jGYhPv4t/d
9Y+7S7oihhniD3n/4/Wyqp9nwl3HgroiUcaJG61ZV8pHXm7QoCaFNhmf+NlAKJX4
4mhlVWAXNpeVszXNC8TajZSlXIjgnUL8Fi8HQS1uoE1+MQ3uCeeeohwjhJvxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNKeDYNHlKsHTl1m3PCxNMJln/+gwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0dHMvMS8x
MkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJBLqiM+zVR1sU0lDUa/cDjXGjZ/QXcgyGUyYmEo92kgn/A42NP1Llvb/Xi/G
kJJsUXycwnuVdyEEVzOBEAZvFmy8DoBUBCDnaJSS6e1GKqN12bOCMXSKxXWlfytg
lEMZBWRdy5txsqu0ckz9K3PBgCA+5vsPWxUHRO66GhaL+QyNvBaeolncF/iQ3mw7
TLouHyIs4/vN3TYTYvLaTLWX8tTeE5v8QThUl7LQz4s4sN36XPD0Kzg/J/+CPxGE
hcWUoY9SwvUG5bd5PL9wUZ+ZToeK0daTtFMdW97AanEXUPchk5r6aLN8qXTXREXM
VmiiAvxk3QOzKE401BuW1r+FCg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:30:59 2026 by rpki-client