This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
File:                     2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft (raw, json)
Hash identifier:          VfcaNIQxS7qnEq36yRTLIaA21xUp7sIkmFD+SCv9JJU=
Subject key identifier:   58:C7:3A:8D:8B:45:8B:83:F1:21:C7:1F:74:63:32:43:13:56:D1:8D
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       31E13504C55A3C4B691F6F0364A838F748842998
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
Manifest number:          0371
Signing time:             Sun 25 Jan 2026 04:12:55 +0000
Manifest this update:     Sun 25 Jan 2026 04:07:55 +0000
Manifest next update:     Mon 26 Jan 2026 05:07:55 +0000
Files and hashes:         1: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: 3sxZs3Y6zVNNgLScctDhTTFNDQdOZLcuEzMOUREzMRw=)
                          2: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: tCfqS8UfvI979KF3Vff43TGrFJXiZp8XAjbb1Wo4ZPs=)
                          3: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl (hash: Mas7cMUNhiF9VttxIznw8/F9OPL1kezv7hROSNKcU6M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 05:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:35:04:c5:5a:3c:4b:69:1f:6f:03:64:a8:38:f7:48:84:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Jan 25 04:07:55 2026 GMT
            Not After : Jan 26 05:07:55 2026 GMT
        Subject: CN=58C73A8D8B458B83F121C71F746332431356D18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:47:d1:cb:52:6e:52:33:43:00:39:ed:b4:
                    ec:32:c0:9b:da:66:f3:49:9e:e5:4d:a1:89:86:32:
                    9b:03:11:1a:fb:0a:48:ee:3a:89:61:20:2a:28:b9:
                    5a:21:74:56:b0:5a:a0:63:0b:df:24:41:4e:54:ad:
                    34:e0:d5:fb:66:0a:1b:e4:20:71:52:40:75:70:db:
                    b1:a0:85:f0:cd:2d:2d:f1:c1:db:c3:0c:e9:14:a8:
                    a4:8a:b6:42:3f:34:b5:9f:ab:9a:92:33:7a:cd:3f:
                    7b:69:9a:33:c1:01:05:a2:f3:c4:c0:da:92:2b:df:
                    5d:20:36:73:d2:45:3e:b1:03:32:71:ca:9d:6b:3a:
                    33:cb:bf:6d:a9:4f:44:5f:67:18:50:11:8c:80:86:
                    42:91:6e:8c:4a:d0:a4:5d:fc:ea:ab:f5:97:c9:06:
                    a0:ce:0e:88:96:a3:23:ae:a7:56:ec:1f:4e:ca:52:
                    86:e4:02:97:49:02:ec:c3:d1:c7:e5:0a:4f:60:74:
                    14:ad:59:bb:7f:ff:0b:17:a1:1d:06:ea:dd:eb:9e:
                    7f:02:59:1e:a1:65:12:7b:01:7f:0b:2f:8e:8a:db:
                    91:ca:dc:08:f9:b7:26:80:7a:1d:64:b8:ca:ef:8d:
                    b4:aa:e6:85:c1:5d:e9:8b:bd:a4:d3:10:fa:65:b8:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C7:3A:8D:8B:45:8B:83:F1:21:C7:1F:74:63:32:43:13:56:D1:8D
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:70:28:fe:de:f9:99:77:f4:44:58:45:72:1e:9b:b7:7f:fa:
         49:c4:11:ba:f7:d8:4f:5a:76:a5:9b:72:08:2a:18:07:8f:67:
         5f:63:a6:44:94:77:1a:e0:62:43:3d:6b:f5:05:92:ec:09:2d:
         ed:ba:07:a8:6c:ca:3f:9c:c7:5e:03:77:75:c6:c4:d1:a9:37:
         bd:c4:9a:d0:d5:60:bd:94:9d:f5:66:05:36:a9:09:7c:a0:b3:
         8c:69:e1:0e:50:af:ce:d4:49:79:9a:31:21:8c:c1:56:43:12:
         c7:e4:25:ff:8b:b0:cc:ed:2c:bd:76:d9:01:0e:66:dc:39:be:
         64:2f:7c:bb:3d:c3:c9:8a:9c:c9:33:d6:83:b7:2b:e5:66:8f:
         ad:ab:e7:9b:93:2c:ea:0c:63:0b:80:e3:6d:43:d9:72:6a:e8:
         52:b8:bc:75:14:a1:a6:cc:55:34:c1:81:f0:bb:f8:0d:87:81:
         82:42:a0:05:6f:69:62:87:58:2d:10:8b:a4:d1:db:a4:b7:3e:
         8b:4d:16:4d:fd:06:23:a9:41:b7:a0:bd:bb:9b:51:44:9a:ba:
         dd:99:c4:8e:38:dd:6a:c0:f8:95:04:f8:f9:30:6f:58:ed:11:
         a3:99:15:54:e8:15:11:28:6d:fb:d3:66:2d:e7:22:54:8d:6c:
         1a:9f:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----