This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
File:                     00A0649BEB784D778983813CFFD9D01F42F24C95.mft (raw, json)
Hash identifier:          q1j7o3rjGQuFvPLwML5EUB0FnUyDxbiHD2zCZrVutHI=
Subject key identifier:   6F:F9:40:96:AD:29:74:39:91:FC:41:83:5B:C3:84:64:1D:59:C1:21
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       65514F9318344DBFAB6AC6DA02BBE29EB89A87E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
Manifest number:          03C0
Signing time:             Sun 25 Jan 2026 12:54:35 +0000
Manifest this update:     Sun 25 Jan 2026 12:49:35 +0000
Manifest next update:     Mon 26 Jan 2026 16:38:35 +0000
Files and hashes:         1: 3136382e3232382e3135322e302f32322d3234203d3e20323634393339.roa (hash: CyL2LPK4hF2bzz3l7O+OWYZwNgR4Vg3MWpKXD5+9ydc=)
                          2: 3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (hash: f4Qa2FNEfhkFAwUVdSuYgjlLS4ftW2/rWnrs8JYLslw=)
                          3: 3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (hash: 9iwzjQCjV+FV7bNXwtjbyRYasZB4IxBhIx8fl0LDIQc=)
                          4: 323830343a333034303a3a2f33322d3438203d3e20323634393339.roa (hash: gzgB+hN3/XwnZ217gd/lKm+/0v3haf0w4F8jpPy/ba4=)
                          5: 3136382e3232382e3135322e302f32342d3234203d3e20323634393339.roa (hash: My6aFJY2U5nmSSRx8QPY9d83jRB9vex2vHwdp+V2wsw=)
                          6: 00A0649BEB784D778983813CFFD9D01F42F24C95.crl (hash: 8avvZWvSy7Og4bcycymcKmPTJgkbxVuy/VFm44wZc3c=)
                          7: 3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (hash: tf9RcDWy+bjBTghyqkDsVVFKF4rglFNBOOVRHIp9Cv8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:51:4f:93:18:34:4d:bf:ab:6a:c6:da:02:bb:e2:9e:b8:9a:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Jan 25 12:49:35 2026 GMT
            Not After : Jan 26 16:38:35 2026 GMT
        Subject: CN=6FF94096AD29743991FC41835BC384641D59C121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:aa:75:90:29:b9:bb:0d:88:45:83:2c:f4:
                    9a:01:29:7c:e6:f7:b5:e5:2c:b0:71:74:27:43:53:
                    89:43:00:21:5b:3c:c9:96:04:7c:b9:1a:3c:b6:53:
                    0f:f2:64:25:44:4c:18:a9:db:d6:de:a9:ca:76:f8:
                    2b:9b:01:b9:08:a4:22:a8:11:4c:ad:0c:2a:0d:11:
                    44:79:f7:b6:1f:56:b4:6b:bc:ba:d0:c1:3b:14:23:
                    ad:1e:92:6e:73:22:68:4d:65:4f:7a:ea:9e:d9:93:
                    e7:3c:c8:1a:56:88:9f:8a:e8:e8:4f:f2:83:3e:45:
                    42:98:3d:23:f7:52:48:70:20:9f:70:42:a3:01:66:
                    d9:04:89:a4:a9:7f:04:25:71:71:b1:39:d9:ae:23:
                    0f:d0:f8:72:e8:5f:76:fa:cd:fb:c1:f1:93:6c:06:
                    4c:29:2c:85:df:87:e8:32:39:b5:50:8c:6f:25:68:
                    e3:1f:85:58:b9:60:da:a0:48:30:b8:02:b3:b8:dc:
                    8e:b3:0d:d1:9b:e7:71:a3:65:8e:09:18:ba:5d:af:
                    35:f9:90:85:d4:9c:37:30:53:80:8e:d6:3a:8b:57:
                    7a:3b:9e:0d:11:6e:cb:03:11:75:05:7f:23:38:dd:
                    1a:21:c2:ab:6c:3b:54:a1:7d:b5:9a:7a:24:71:b1:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F9:40:96:AD:29:74:39:91:FC:41:83:5B:C3:84:64:1D:59:C1:21
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:13:06:64:36:91:75:7f:a0:d4:54:40:80:dc:91:92:1a:27:
         53:0c:17:d6:43:f2:02:dd:28:e7:52:3a:b2:63:ea:e0:f2:00:
         b2:5b:4c:ff:b9:3e:61:f9:12:ea:13:3a:e6:5f:92:39:42:57:
         3f:71:00:a3:49:a1:5b:32:4a:c0:78:47:a2:44:46:bb:e5:0c:
         b3:ad:68:36:bd:56:28:6c:33:fd:a1:31:49:a1:4f:ab:41:09:
         a4:10:3c:2c:5d:35:ce:55:0d:e1:22:02:ca:de:91:a3:30:74:
         8b:f1:1c:f1:59:db:5f:88:25:af:22:58:2d:df:5d:f5:4d:a1:
         8e:bf:08:b3:71:19:c3:c8:62:72:75:bc:f9:04:ca:bd:e0:c1:
         b7:f6:d3:bf:aa:f5:aa:67:e2:3e:e2:ad:6e:c1:fa:b4:e6:0a:
         4f:d9:19:aa:7b:87:b3:cf:25:57:b1:e3:b7:8d:18:f9:3d:ed:
         ee:82:71:af:b8:36:18:ee:74:d4:7a:b2:59:69:45:c6:fe:cf:
         f8:cd:57:96:a9:99:bf:bd:69:2e:7a:42:e3:cd:90:c2:b3:79:
         d2:52:a6:97:f6:e4:7c:9c:f1:14:3d:08:0b:f3:17:4e:d1:58:
         59:c4:1e:36:c3:38:be:8b:50:89:c6:b5:d0:5f:26:5a:19:81:
         d3:87:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:17:39 2026 by rpki-client