This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
File:                     AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft (raw, json)
Hash identifier:          nDnKRxmYyXx/Wo9CevLDDIw5NG65CPy7qhWMNDC4OJ0=
Subject key identifier:   AD:78:54:62:15:CF:9C:32:F2:E3:7B:89:50:36:DC:F5:BF:94:FF:31
Authority key identifier: AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0
Certificate issuer:       /CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
Certificate serial:       17469A54989A479D14B7F4529D18C0805230F0D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
Manifest number:          0354
Signing time:             Sun 25 Jan 2026 13:50:12 +0000
Manifest this update:     Sun 25 Jan 2026 13:45:12 +0000
Manifest next update:     Mon 26 Jan 2026 14:57:12 +0000
Files and hashes:         1: 323830343a386332343a3a2f33322d3438203d3e20323733373832.roa (hash: WtjmMp7Bep6h8xh9FRZHJddXwbfmCSBmONGWHCoQIGY=)
                          2: AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl (hash: 8vD+dAGTGD56E1gWW6SK1SXJZJAtHKOShf2+JWgo1/c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl
                          rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:46:9a:54:98:9a:47:9d:14:b7:f4:52:9d:18:c0:80:52:30:f0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD3E03F0337609F9F56ECDE68343DB12CC14C9A0
        Validity
            Not Before: Jan 25 13:45:12 2026 GMT
            Not After : Jan 26 14:57:12 2026 GMT
        Subject: CN=AD78546215CF9C32F2E37B895036DCF5BF94FF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:e5:74:b0:a9:d2:d0:76:cb:c3:aa:a6:51:
                    1c:d5:c5:02:f7:8f:42:cd:c7:22:6e:ae:59:dc:46:
                    d7:9e:e6:50:4c:49:a8:47:2d:0d:95:81:12:c8:de:
                    9a:b2:0d:0f:88:38:b0:06:62:e7:15:5e:2b:05:20:
                    2e:ab:58:2b:50:34:dc:31:87:55:70:89:bd:cd:c8:
                    b4:98:3a:ae:a0:ae:38:f0:52:c3:af:c8:26:34:0c:
                    7d:50:c9:11:16:14:0e:a3:de:db:d0:ba:c2:aa:94:
                    bb:d2:b1:c9:c9:65:4f:3a:23:74:70:ad:f6:bf:20:
                    f1:af:d8:b2:fc:55:55:98:bd:a8:59:21:0d:ca:2e:
                    7d:80:78:27:2a:c2:4b:42:61:f7:a3:05:e5:ca:7a:
                    15:10:84:2d:4b:4a:d8:e3:06:50:7d:44:a8:62:14:
                    3b:88:0f:93:fe:b0:6e:01:b7:2c:64:a0:1f:40:54:
                    45:02:0f:a1:9e:02:47:62:88:04:c0:21:1e:14:09:
                    94:c3:f6:bb:c3:b4:b0:a3:35:ac:78:4c:0c:9f:6f:
                    9e:f8:08:aa:47:1f:51:31:7a:2b:0d:c3:95:42:14:
                    c8:6b:30:41:0b:7b:dc:75:40:ab:36:4b:13:d2:98:
                    16:01:35:23:c3:4d:e6:7b:b5:d0:a9:c3:2b:fa:e1:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:54:62:15:CF:9C:32:F2:E3:7B:89:50:36:DC:F5:BF:94:FF:31
            X509v3 Authority Key Identifier:
                keyid:AD:3E:03:F0:33:76:09:F9:F5:6E:CD:E6:83:43:DB:12:CC:14:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sWMo72DSd3mnGyX2t1svXo3eRkLqiqY2AD8wpJ5C8L3/0/AD3E03F0337609F9F56ECDE68343DB12CC14C9A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:ca:75:35:11:63:b5:be:d0:1c:cd:d4:77:62:3d:67:86:
         8c:cf:70:22:81:a1:39:0f:63:3a:d7:b4:bd:1c:73:d4:73:12:
         b1:54:21:d8:53:a4:2c:a1:13:7c:71:30:02:92:c0:8f:85:8b:
         91:b4:0c:9d:fd:45:50:a1:74:92:92:b7:0e:e7:23:ff:f2:5c:
         28:b3:11:b2:fa:6a:98:49:0f:ef:17:08:d1:6e:09:0e:35:f9:
         a2:95:b8:0d:49:c8:ac:d1:2e:61:c6:cd:28:26:76:19:e1:fd:
         d6:84:5c:8e:ef:bf:52:11:18:1e:98:a7:db:20:77:f3:93:79:
         aa:00:22:b5:03:53:e9:e6:67:ac:32:53:31:8f:e9:49:ab:60:
         88:c8:1f:43:de:45:e9:d5:21:46:3f:46:7c:dc:84:d3:81:ce:
         cc:ff:21:53:a7:4d:7b:cf:72:b6:cc:b2:05:b7:e1:c7:64:04:
         a4:ce:4a:ea:b4:cd:ad:a6:9f:24:21:b1:9d:1b:00:a4:82:c4:
         24:83:7d:28:95:0a:95:d5:37:2b:8e:b8:f3:b7:24:b7:c9:ca:
         ce:23:13:36:41:4e:b0:f0:77:1e:ff:9e:eb:43:c9:db:bb:b4:
         2a:fe:1d:a5:02:2f:46:b8:1a:e0:06:5f:bd:65:27:fa:78:cd:
         45:a5:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:44:47 2026 by rpki-client