This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
File:                     CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json)
Hash identifier:          nQw+vIPbVw4d4r8KKz7/u3xmn1i7fntvEg14nGhMW5w=
Subject key identifier:   D4:36:40:C7:C5:A9:99:80:23:2B:7E:BC:9A:B3:16:1E:EA:6F:ED:F8
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       6E6F90EE6CACC9927E12284F497FA041F2A9C0E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
Manifest number:          0387
Signing time:             Sun 25 Jan 2026 04:05:11 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:11 +0000
Manifest next update:     Mon 26 Jan 2026 04:37:11 +0000
Files and hashes:         1: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: mPllKRKV3IA19ztcXHV1p58k2tvSt9HOsh1tvmPZK+Y=)
                          2: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: aNY4CVp3lvUGIeehKHntmxej/dcIbSb+4GCBHrvnMk8=)
                          3: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: Cw6UVx5goD35qAucAZeFT0x5rNBdNHL54FfEPkZphAM=)
                          4: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
                          rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6f:90:ee:6c:ac:c9:92:7e:12:28:4f:49:7f:a0:41:f2:a9:c0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Jan 25 04:00:11 2026 GMT
            Not After : Jan 26 04:37:11 2026 GMT
        Subject: CN=D43640C7C5A99980232B7EBC9AB3161EEA6FEDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:f3:cf:fd:e3:59:ad:a2:a9:93:a6:f5:6b:
                    13:17:bc:a1:c5:ab:0f:48:28:00:e5:3d:19:fa:59:
                    62:ef:1e:c8:f1:37:d2:05:7c:aa:c7:1c:67:30:f3:
                    a2:71:fc:99:56:99:b2:01:18:96:93:22:50:75:c8:
                    2c:df:0e:74:07:09:ee:de:29:f3:60:c1:95:b3:6a:
                    b9:91:fb:68:7b:e4:82:68:7d:b1:8e:73:c7:56:15:
                    a8:dc:b8:bc:13:df:b4:7b:ef:ff:4f:26:a4:2f:c4:
                    51:4d:b3:b9:68:33:f3:5b:77:b3:6e:31:a7:37:ef:
                    55:81:e8:4f:e5:1c:85:bc:de:1e:d3:04:07:d6:ea:
                    44:2e:af:2e:b1:f3:98:2b:10:17:dd:77:8d:e2:b8:
                    3d:45:5a:93:36:d5:23:a2:48:8f:99:82:6d:96:a0:
                    4f:00:2c:ed:13:34:ad:ad:ee:10:a0:96:1c:2f:5a:
                    3a:6e:8b:ed:d6:b9:8d:fc:99:b7:e0:4c:f8:52:92:
                    4a:f1:b9:1e:b3:88:62:34:33:91:bc:0c:ac:33:51:
                    98:b5:19:d5:00:ef:d1:53:83:92:db:6e:66:38:39:
                    47:bd:61:4f:d7:11:64:7d:7c:62:7a:8a:13:da:d6:
                    19:fb:89:bc:de:a0:53:20:fb:c9:05:8d:06:96:9d:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:36:40:C7:C5:A9:99:80:23:2B:7E:BC:9A:B3:16:1E:EA:6F:ED:F8
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:bf:6b:0c:07:4c:76:ab:8d:1d:e7:2a:e2:a4:0b:a9:4a:
         32:69:90:d7:fa:ee:23:c9:16:32:50:71:97:34:98:ed:3e:b2:
         fb:c5:7d:b6:4b:2c:88:94:23:1e:e6:df:fd:ad:63:ea:fe:cc:
         fe:a6:5e:b6:06:dd:ab:ea:05:03:e2:b1:dd:91:fd:1c:63:94:
         29:30:ee:37:76:5b:1c:c7:23:bd:03:29:75:5c:8d:09:7d:83:
         c7:d3:fd:90:f7:48:58:12:e0:8f:00:76:26:a5:e5:39:cd:d0:
         4f:71:bc:c6:53:4e:44:1f:b3:76:c2:2e:98:6a:e4:8e:dd:61:
         43:15:8a:ae:83:fb:f8:42:78:c5:7a:33:e0:71:87:01:08:12:
         f1:8a:b6:22:26:33:bf:20:fe:92:78:d5:cf:36:2e:a9:2d:f6:
         7b:ac:d2:dc:c1:15:49:ad:33:5f:a7:62:b8:aa:94:aa:21:b6:
         81:bb:de:b5:c8:7d:92:37:5b:88:a1:ed:19:26:02:b8:da:37:
         92:68:c1:1b:90:4d:22:71:7c:2b:03:31:5d:8d:47:44:11:0a:
         aa:bd:59:68:03:bb:59:e6:8d:0d:d3:36:69:fd:a4:6e:a8:27:
         ab:b9:1e:91:7c:cf:68:bd:4c:0e:26:b3:a8:ff:8e:b7:b2:f6:
         1b:16:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:24:09 2026 by rpki-client