This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
File:                     D7845391014F7F9470788EC727561382C9EE8439.mft (raw, json)
Hash identifier:          oQv/ORLt8FtsZ9nQru0W5m97khfRspX+XkxEjxM3IFk=
Subject key identifier:   AF:30:9A:F2:4A:A9:BD:A3:7A:93:21:19:D0:26:38:70:1A:95:C7:6A
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Certificate issuer:       /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial:       46BCDB35E02BD334079952E00F640E2AD0009B48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
Manifest number:          0189
Signing time:             Sun 25 Jan 2026 04:45:26 +0000
Manifest this update:     Sun 25 Jan 2026 04:40:26 +0000
Manifest next update:     Mon 26 Jan 2026 07:44:26 +0000
Files and hashes:         1: 323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (hash: 8n/gR1B4AuDCXhEHDUWgjoby/gaXMi9/4AVATgAz3gk=)
                          2: D7845391014F7F9470788EC727561382C9EE8439.crl (hash: fdRgyR6YeMGNSyAvntMpo8dm3ZD4IhE3RF4wAfQv5zM=)
                          3: 323830343a383336343a3a2f33322d3332203d3e20323732313935.roa (hash: 42LLRFFMJiXabR2+3k+FhvpaXjboVdR+XkYaJpJY+H4=)
                          4: 323830343a383336343a3a2f33342d3334203d3e20323732313935.roa (hash: ZhYBaOqOCg0wxRtUKZs1Xj7qxDeS+1FMGKfTxBkLZEc=)
                          5: 323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa (hash: zI+VPQ9qySXlbz2Y+fLp1CvmwCQe9DPBqmzTnp/iW2w=)
                          6: 323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (hash: buQjtWSH9s2WAEvrRPvL6eVLOTO6AEzV5egKchSkWug=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 07:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bc:db:35:e0:2b:d3:34:07:99:52:e0:0f:64:0e:2a:d0:00:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
        Validity
            Not Before: Jan 25 04:40:26 2026 GMT
            Not After : Jan 26 07:44:26 2026 GMT
        Subject: CN=AF309AF24AA9BDA37A932119D02638701A95C76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:f5:34:ee:44:79:2f:12:ec:53:26:7a:76:
                    33:f6:d4:c7:5f:1b:c4:df:1f:4f:66:19:bf:34:47:
                    6e:7e:b2:ee:73:cc:77:19:f4:47:ae:99:85:ec:7b:
                    40:ff:26:72:19:44:d9:83:ae:ec:12:10:51:b3:ee:
                    68:9f:a2:f2:d8:8d:67:01:8c:37:f6:2d:20:85:2c:
                    61:51:4b:33:1b:39:a7:e1:2b:5a:9a:1c:af:28:d9:
                    ac:e1:76:c5:24:93:35:a6:39:83:70:df:7e:3f:15:
                    99:ad:21:13:d5:41:4a:a2:85:86:73:57:9e:8c:11:
                    8e:35:3b:04:a9:a6:3a:8e:65:c0:41:99:98:10:43:
                    c8:48:40:15:3c:07:2f:ef:41:9f:a5:67:64:55:dd:
                    68:e6:9b:43:30:85:ca:5c:44:e5:b0:b1:79:c9:ac:
                    49:0d:13:30:fd:d5:7d:09:18:94:c6:4e:2d:1e:35:
                    1b:93:45:49:7e:2f:c6:c1:b7:f9:63:60:d3:a2:13:
                    44:f3:26:cc:51:1a:2d:5c:cc:43:bd:7b:8b:26:78:
                    8e:13:99:08:e2:7c:a4:31:67:56:31:5d:3e:d8:88:
                    11:be:8b:4a:5c:a9:a0:8c:15:ff:2b:1e:74:dc:56:
                    fa:5f:13:0f:16:c0:f6:28:03:a9:2c:9e:39:04:5c:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:9A:F2:4A:A9:BD:A3:7A:93:21:19:D0:26:38:70:1A:95:C7:6A
            X509v3 Authority Key Identifier:
                keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cc:6c:9a:97:44:df:96:6e:72:52:a8:3e:38:26:11:a5:72:
         de:56:27:25:2d:32:b6:f7:4c:a9:a1:ce:2d:57:82:d4:4d:a0:
         61:9d:b4:1e:f4:e7:a3:85:b3:19:5e:0d:be:02:23:a2:3d:c4:
         d1:93:2e:35:42:03:a3:69:b7:27:45:61:1d:99:04:a6:e6:c8:
         10:f1:99:0a:a7:a5:a7:2d:bc:21:07:f2:a8:ba:09:de:6e:84:
         6f:f7:16:76:23:36:63:02:60:bf:98:7a:2b:3d:ee:80:00:5a:
         49:8a:f9:31:9d:aa:c4:b5:e4:71:4c:c4:40:2b:b8:f0:63:43:
         df:c0:31:5e:07:a0:c4:0c:c0:c4:05:95:67:53:51:34:91:e8:
         ab:11:a7:94:a9:4b:ec:2c:49:8c:fb:b7:61:41:d3:8c:7a:b8:
         4f:45:03:cc:d4:65:91:3d:31:8f:e6:f5:8c:7f:c8:78:a7:15:
         ff:bb:3d:5c:f0:0f:21:1a:3d:5d:a5:b1:ae:b0:c5:de:7e:e8:
         36:d5:51:bb:40:8a:26:f2:5d:ac:ea:53:f8:82:69:d4:d5:b6:
         c1:03:78:12:ca:72:cc:54:a5:43:09:bb:e6:96:a3:05:11:cf:
         3c:8d:46:fc:c4:4d:98:ab:e0:dd:85:a7:63:4a:a7:e3:59:e5:
         9b:58:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:50:00 2026 by rpki-client