Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
File:                     9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft (raw, json)
Hash identifier:          oeEE0x7sQL1ZU+TTBCWqT2Ol1pMenHKxUzYwNfoB1Yo=
Subject key identifier:   27:39:C5:85:EA:29:F5:65:B6:FA:8E:DB:BA:2D:7C:A5:88:8D:80:63
Authority key identifier: 97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A
Certificate issuer:       /CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
Certificate serial:       540ABAA8DEBDDD72AAF5E71BED6FF7EBC268A157
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
Manifest number:          010D
Signing time:             Sun 01 Nov 2026 05:37:53 +0000
Manifest this update:     Sun 01 Nov 2026 05:32:53 +0000
Manifest next update:     Mon 02 Nov 2026 08:52:53 +0000
Files and hashes:         1: 3139302e332e3136342e302f32342d3234203d3e20323731363033.roa (hash: MZ5Cb2xH/oPO8h5lZp781npNIOCHILFnih0Cr2sqrG4=)
                          2: 9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl (hash: fjlad9gj3613+KE4FN25Lpen70XGzTcNgfqXEbBuDKo=)
                          3: 3139302e332e3136372e302f32342d3234203d3e20323731363033.roa (hash: DxjOuGhsdY842wi12DiXthP3lEym1DvGlbmH9uLIvn4=)
                          4: 3139302e332e3136352e302f32342d3234203d3e20323731363033.roa (hash: IVcoliR+yAPoeS8RnDVVLAqUnl7Hm6UT2jyw3PG0l6o=)
                          5: 3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (hash: BZt/5hksVQz2a5+732phEHgo0f7KUBQq5Rfq0ZWp9Tw=)
                          6: 3139302e332e3136342e302f32322d3232203d3e20323731363033.roa (hash: AtHHbCF94P4QmSVdqypBMeef3spGeticJoG0adoWQdM=)
                          7: 323830343a376531633a383030303a3a2f33332d3333203d3e20323731363033.roa (hash: 42NZ3YmX55OIqcfsOzjMcP3IHKi18oHxdPa0lU5k8Xk=)
                          8: 323830343a376531633a3a2f33322d3332203d3e20323731363033.roa (hash: EGpF9nKOp4lTx75UG94xIk0e7Nq+lNAeuM1odtIwQr0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0a:ba:a8:de:bd:dd:72:aa:f5:e7:1b:ed:6f:f7:eb:c2:68:a1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
        Validity
            Not Before: Nov  1 05:32:53 2026 GMT
            Not After : Nov  2 08:52:53 2026 GMT
        Subject: CN=2739C585EA29F565B6FA8EDBBA2D7CA5888D8063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:75:e2:6a:5c:8e:47:e8:d2:1f:78:00:97:
                    c8:e0:61:b4:9c:9c:d6:9d:df:4e:b4:7d:cd:13:b7:
                    5a:89:82:e2:9e:82:d1:58:dd:f0:9e:5f:6f:03:9f:
                    32:9b:4b:f6:dd:53:11:09:20:6e:79:d9:fc:d3:f8:
                    36:48:ac:ac:70:fa:0d:55:fc:b5:3a:d7:4c:9b:73:
                    43:8f:03:97:4d:c3:41:cc:10:1f:1b:a5:17:30:3a:
                    56:a9:12:af:b2:07:aa:07:93:6c:39:fb:4c:2f:5b:
                    34:72:70:86:ce:2b:68:cd:77:5a:f4:e3:13:49:88:
                    30:3d:71:34:11:db:4b:bc:be:82:c8:af:58:7c:da:
                    aa:01:a4:58:11:09:a8:7b:e9:a2:eb:58:79:82:b4:
                    6c:21:e2:aa:a3:5c:70:cd:ce:a6:fb:d9:f3:99:d6:
                    db:37:e3:91:3f:ca:e8:4b:02:d6:12:ef:1c:ae:ae:
                    18:2b:0d:6d:5b:9e:8d:3a:d9:3d:12:a1:49:45:20:
                    17:74:f8:00:61:1b:1b:24:56:cb:41:a0:be:d6:70:
                    06:15:15:36:d1:75:a7:3c:fc:ef:04:92:6e:e2:09:
                    1e:1c:bc:1b:98:3f:0e:13:c8:03:d8:c6:8d:ac:07:
                    5e:4a:36:24:8e:a5:02:43:84:70:e9:a2:fd:b2:39:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:39:C5:85:EA:29:F5:65:B6:FA:8E:DB:BA:2D:7C:A5:88:8D:80:63
            X509v3 Authority Key Identifier:
                keyid:97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:86:5c:95:52:ad:36:06:97:fc:6d:6b:b2:81:46:21:68:4e:
         c5:bd:c9:7d:e8:d7:22:c5:db:a3:56:94:7f:8b:f9:e5:eb:74:
         d4:3d:0b:bb:78:7a:e9:18:c6:d4:bf:dd:1b:06:0c:dc:73:30:
         45:4c:cf:a4:88:da:f6:46:84:b4:e4:f7:76:30:dc:25:1e:83:
         83:6c:69:bc:a4:c2:6f:11:8d:13:2c:64:75:06:7b:ee:92:30:
         30:31:ab:09:f5:a2:38:57:de:6c:ff:55:90:56:5e:ce:7e:5d:
         7b:0a:70:60:1b:65:a6:53:f3:ab:41:05:a4:5f:2a:b7:d0:52:
         90:09:7c:55:82:10:12:9c:d0:12:43:2c:8c:f1:96:c8:47:94:
         0b:43:d0:c0:54:3e:d9:8b:38:55:fb:43:22:1f:26:5c:85:71:
         48:12:7f:d3:5e:3b:7f:08:bc:1b:47:a4:dd:bd:07:30:0d:35:
         81:04:a0:61:10:ec:14:ac:f6:e4:48:a0:07:e0:dd:41:49:8d:
         06:d4:fe:d6:7e:f3:e5:52:9a:0f:49:8e:28:15:8f:98:ea:5b:
         05:af:45:df:89:51:be:e0:da:db:cf:22:55:24:45:c4:7b:4c:
         b3:25:13:a9:f3:20:d4:a9:75:81:53:ce:bd:f2:24:5d:26:e7:
         7c:8a:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:25:46 2026 by rpki-client