Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
File:                     21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft (raw, json)
Hash identifier:          61/62hasWFvDVgYUpDAnVTGdU0e/oCDDf9NSJRuSNUM=
Subject key identifier:   5D:30:9A:37:E6:1B:9C:2B:D9:22:68:36:0B:56:F9:E7:21:28:01:A7
Authority key identifier: 21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D
Certificate issuer:       /CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
Certificate serial:       48E48CD95921E46BF3BEC7F38F0B8C598E568839
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
Manifest number:          01A2
Signing time:             Tue 13 Oct 2026 21:29:18 +0000
Manifest this update:     Tue 13 Oct 2026 21:24:18 +0000
Manifest next update:     Wed 14 Oct 2026 22:03:18 +0000
Files and hashes:         1: 323830343a313164633a653030303a3a2f33362d3336203d3e20323633343434.roa (hash: sdWDdEzXTllJ+b9NYdd0B6N/n2HV3FuMKb/yJx7dh8k=)
                          2: 3133382e33362e3136352e302f32342d3234203d3e20323633343434.roa (hash: UTzGGjVGwAzOOUF7F0ZvNmPm5rv5LvLa1K3tF9sa8g4=)
                          3: 323830343a313164633a313030303a3a2f33362d3336203d3e20323633343434.roa (hash: suPG8phv1aipkCuomN7AqsFmKDsxBHz5B9OI5ARoxbs=)
                          4: 3137372e39312e3136302e302f32342d3234203d3e20323633343434.roa (hash: RPQiwjEiNk04crMdyklhynW7Kkvm8RcMSYG56aPTPak=)
                          5: 323830343a313164633a373030303a3a2f33362d3336203d3e20323633343434.roa (hash: 47Z0KyQWnyCtL85JGflj0athlyVi9b+0wwTvlVdyMWM=)
                          6: 323830343a313164633a323030303a3a2f33362d3336203d3e20323633343434.roa (hash: LnCE0ZH7z0cCZYbyMoxDvJ02VOvufWgOf15Rb9euPho=)
                          7: 3133382e33362e3136372e302f32342d3234203d3e20323633343434.roa (hash: ybV8rIgGqlfIiXuP1NGMeREicYgC7Fo3IOMSTLfoHdw=)
                          8: 3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (hash: TgqVKEsBk1TX9J4+B1IoZRyz8I4TeO5XyWnnkjNwCOg=)
                          9: 3137372e39312e3136322e302f32332d3233203d3e20323633343434.roa (hash: qfhSga2IMpoaAnUO25wNSoxFtOa32oTy1r7EZiIHqUA=)
                          10: 3137372e39312e3136302e302f32332d3233203d3e20323633343434.roa (hash: lUN+QHTKJKyHBU3vjixy9YwVPc/E7x0KU1Uy3nCCZ9k=)
                          11: 3137372e39312e3136332e302f32342d3234203d3e20323633343434.roa (hash: msFKHzwScuCHwmamqqD174YlStw+N5v/pD+SSZUAIwo=)
                          12: 323830343a313164633a383030303a3a2f33362d3336203d3e20323633343434.roa (hash: 87cH/zfVlYwo/lhL99VL56iNS+3f0irZ7ULeW4B23KA=)
                          13: 3137372e39312e3136312e302f32342d3234203d3e20323633343434.roa (hash: rnCbkkHFpMG9heNfimM7hW8JckDxFanpSUYn1/OCTq4=)
                          14: 323830343a313164633a3a2f33362d3336203d3e20323633343434.roa (hash: Sy02wUMoN7a4gcN3MRE0U56qNaH7kBtcCeAx/Iq30Bo=)
                          15: 21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl (hash: f8T7vGgT2kKlg0S0wcGkvjmLpnML3Y+f3KpVwFlV4bI=)
                          16: 3137372e39312e3136302e302f32322d3232203d3e20323633343434.roa (hash: tl7SZK5bevdutiPKQYPSOUXTV2ZHKVgW6OeLMxCKXzA=)
                          17: 3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (hash: yyVGnNjDV5vrV0Ku2GQqlCfb+baJwW8UpEveCaobaMs=)
                          18: 323830343a313164633a613030303a3a2f33362d3336203d3e20323633343434.roa (hash: Xjm0Vl3oFhLjawrmQOM9tt8PdRs4kTPr7qp4IGKCEUI=)
                          19: 3137372e39312e3136302e302f32322d3232203d3e203238363534.roa (hash: zMPeVthko61KQfxRGSq9tfihXUQFHZtoCmsg/6o/mlE=)
                          20: 3137372e39312e3136322e302f32342d3234203d3e20323633343434.roa (hash: 8AGZo5c6QxM495LEDMYWHMa04vhnyj+L2PBY1psr7lo=)
                          21: 323830343a313164633a343030303a3a2f33362d3336203d3e20323633343434.roa (hash: Mrih67bnZN0DRXvygc6oR4OLcCW5VOJQv+RF6QYWwG8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e4:8c:d9:59:21:e4:6b:f3:be:c7:f3:8f:0b:8c:59:8e:56:88:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21120B72E6C63A9BAA0CF45155DE5AD27018480D
        Validity
            Not Before: Oct 13 21:24:18 2026 GMT
            Not After : Oct 14 22:03:18 2026 GMT
        Subject: CN=5D309A37E61B9C2BD92268360B56F9E7212801A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:09:6a:a5:28:e5:73:2e:7f:c2:47:54:d6:
                    49:33:71:94:33:d1:31:20:8b:cf:8d:db:c9:7c:56:
                    34:f3:de:25:94:ba:54:8d:2b:5f:36:a1:46:42:e1:
                    17:24:59:ec:29:76:d9:a2:11:ae:40:ce:cc:11:75:
                    f6:70:7f:01:00:56:4e:a6:17:60:ef:33:8d:f5:0b:
                    77:40:f8:ff:26:16:8a:34:fd:b9:62:1a:6d:d4:6f:
                    c6:74:24:08:cf:cd:0b:b3:64:d5:89:35:71:9e:70:
                    52:94:42:6b:66:04:bf:66:45:7d:42:df:df:0f:8b:
                    c3:3b:88:b7:df:53:8d:89:4d:7c:25:b7:e2:80:d9:
                    f1:a7:92:4f:23:04:63:09:32:5f:ff:dc:7d:93:82:
                    47:1c:a3:ee:d3:f4:3b:6f:90:c1:2c:19:20:47:bb:
                    e4:47:d9:c5:8d:88:87:5d:73:18:22:06:07:f3:aa:
                    e5:6e:7a:61:c6:1e:b9:1b:0f:0c:eb:4c:5d:a6:f6:
                    68:29:39:e0:4c:4b:24:c9:84:40:96:ba:16:11:bd:
                    b8:01:35:44:38:80:e5:9e:7c:9c:6b:9a:f4:35:6c:
                    8b:d6:f2:86:1e:42:2b:20:0e:2f:74:50:11:15:20:
                    47:08:3b:4a:cd:bf:da:80:5a:af:df:91:b1:82:ba:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:9A:37:E6:1B:9C:2B:D9:22:68:36:0B:56:F9:E7:21:28:01:A7
            X509v3 Authority Key Identifier:
                keyid:21:12:0B:72:E6:C6:3A:9B:AA:0C:F4:51:55:DE:5A:D2:70:18:48:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21120B72E6C63A9BAA0CF45155DE5AD27018480D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/21120B72E6C63A9BAA0CF45155DE5AD27018480D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3b:bc:0e:31:3a:2e:bd:31:51:cf:9d:10:9a:50:9f:9c:fc:
         92:6f:3f:73:47:29:99:86:78:62:ad:6b:89:86:e5:0a:ec:38:
         fd:e6:62:79:12:89:aa:bb:4a:8f:ca:59:7d:64:d3:0a:f6:36:
         13:ea:bd:09:ef:bc:e6:9f:db:a3:ab:85:99:cf:67:4e:71:72:
         de:1e:10:c1:37:e1:43:ce:5a:cb:1b:4c:c8:75:67:9f:54:44:
         e5:79:a8:00:1b:95:63:97:eb:5f:15:3e:2b:39:92:b1:23:27:
         9f:72:3d:b4:a4:7b:f8:06:af:35:bb:ee:98:d7:7d:6a:ae:ca:
         34:58:23:25:ca:80:85:0b:ca:d1:ae:23:95:28:a7:cf:f4:5f:
         b6:d1:6a:00:78:3b:55:79:5e:72:9c:a1:d8:2b:56:68:08:6f:
         c6:0b:4d:3c:79:b2:24:44:e1:9d:c2:0b:bb:8e:3a:81:cd:cd:
         ad:d2:c4:28:af:cf:b2:32:f2:f5:fa:fa:ce:dd:dc:d6:56:cf:
         81:b1:99:7b:43:ee:bd:4b:53:52:05:5d:23:f6:89:a0:72:73:
         f8:28:d3:91:40:fe:cc:df:91:e7:73:8c:fb:f8:ca:fb:b2:22:
         93:d6:a4:b4:11:67:68:60:6c:54:d0:af:65:de:e1:33:ad:96:
         19:f7:07:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSOSM2Vkh5GvzvsfzjwuMWY5WiDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExMjBCNzJFNkM2M0E5QkFBMENGNDUxNTVERTVBRDI3
MDE4NDgwRDAeFw0yNjEwMTMyMTI0MThaFw0yNjEwMTQyMjAzMThaMDMxMTAvBgNV
BAMTKDVEMzA5QTM3RTYxQjlDMkJEOTIyNjgzNjBCNTZGOUU3MjEyODAxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBwlqpSjlcy5/wkdU1kkzcZQz
0TEgi8+N28l8VjTz3iWUulSNK182oUZC4RckWewpdtmiEa5AzswRdfZwfwEAVk6m
F2DvM431C3dA+P8mFoo0/bliGm3Ub8Z0JAjPzQuzZNWJNXGecFKUQmtmBL9mRX1C
398Pi8M7iLffU42JTXwlt+KA2fGnkk8jBGMJMl//3H2Tgkcco+7T9DtvkMEsGSBH
u+RH2cWNiIddcxgiBgfzquVuemHGHrkbDwzrTF2m9mgpOeBMSyTJhECWuhYRvbgB
NUQ4gOWefJxrmvQ1bIvW8oYeQisgDi90UBEVIEcIO0rNv9qAWq/fkbGCugKRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUXTCaN+YbnCvZImg2C1b55yEoAacwHwYDVR0j
BBgwFoAUIRILcubGOpuqDPRRVd5a0nAYSA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC8yMTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTIwQjcyRTZDNjNBOUJB
QTBDRjQ1MTU1REU1QUQyNzAxODQ4MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtOdUMvMC8y
MTEyMEI3MkU2QzYzQTlCQUEwQ0Y0NTE1NURFNUFEMjcwMTg0ODBELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfzu8DjE6Lr0xUc+dEJpQn5z8km8/c0cpmYZ4Yq1riYblCuw4/eZieRKJqrtK
j8pZfWTTCvY2E+q9Ce+85p/bo6uFmc9nTnFy3h4QwTfhQ85ayxtMyHVnn1RE5Xmo
ABuVY5frXxU+KzmSsSMnn3I9tKR7+AavNbvumNd9aq7KNFgjJcqAhQvK0a4jlSin
z/RfttFqAHg7VXlecpyh2CtWaAhvxgtNPHmyJEThncILu446gc3NrdLEKK/PsjLy
9fr6zt3c1lbPgbGZe0PuvUtTUgVdI/aJoHJz+CjTkUD+zN+R53OM+/jK+7Iik9ak
tBFnaGBsVNCvZd7hM62WGfcHOA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:00:44 2026 by rpki-client