This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
File:                     2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json)
Hash identifier:          lIpLH0Ya3exCTR3vLrQlNV24XoCGweduSgwwZrCsROk=
Subject key identifier:   4D:4E:ED:41:75:36:C9:D1:DB:3E:43:43:19:E7:7A:F6:6B:39:16:D2
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       0BA7BA48B4BC8C27D574A8BC97490A33B1CABBA7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
Manifest number:          0372
Signing time:             Sun 25 Jan 2026 15:39:29 +0000
Manifest this update:     Sun 25 Jan 2026 15:34:29 +0000
Manifest next update:     Mon 26 Jan 2026 16:45:29 +0000
Files and hashes:         1: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=)
                          2: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: slpPs+ZGNgB3NI606Ai07eZyVQ5w0htr8FI0hVmxBEk=)
                          3: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 16:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a7:ba:48:b4:bc:8c:27:d5:74:a8:bc:97:49:0a:33:b1:ca:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Jan 25 15:34:29 2026 GMT
            Not After : Jan 26 16:45:29 2026 GMT
        Subject: CN=4D4EED417536C9D1DB3E434319E77AF66B3916D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:09:e7:58:11:9f:ea:8e:a8:ca:45:df:0c:
                    2d:07:17:94:23:48:9f:f2:4b:b2:0b:79:20:a9:74:
                    0a:67:d2:ea:7b:42:f1:35:28:2c:bc:80:92:99:76:
                    65:ee:71:37:6a:20:66:37:01:2e:ca:2e:f4:b2:40:
                    45:36:27:3f:a5:68:57:e7:ff:f0:4d:29:c9:30:b3:
                    0b:5e:0c:52:80:62:78:fe:6b:d8:22:82:09:e1:87:
                    3d:e9:3c:31:ff:29:21:cd:2f:0f:06:e1:3b:a2:54:
                    f4:6c:f7:a6:2e:d3:73:a6:96:c4:cd:0a:fd:5d:94:
                    7a:c2:f3:b7:85:08:8e:c2:f1:b0:ab:74:fe:4b:aa:
                    05:55:29:20:a9:a7:0c:6f:93:04:7e:d0:d2:db:24:
                    36:47:0d:2a:96:18:38:16:92:c3:44:25:9c:c1:32:
                    64:ac:72:50:24:f8:dd:ad:71:29:72:58:72:f5:aa:
                    65:76:8b:85:a0:f1:f4:74:f5:06:a3:e1:7b:3f:02:
                    2e:73:46:3d:ae:08:5d:15:53:1a:56:35:2a:72:cc:
                    04:54:d5:fa:dd:41:ac:53:26:a5:65:23:cd:91:87:
                    7c:92:3f:12:25:9b:cb:82:22:0b:1b:48:4d:70:00:
                    22:48:c2:6d:30:7b:c6:a4:17:da:e4:0f:36:8f:41:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:ED:41:75:36:C9:D1:DB:3E:43:43:19:E7:7A:F6:6B:39:16:D2
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:4d:9c:27:00:d2:65:a9:c6:b4:9c:95:fe:b3:8c:bd:58:
         63:3f:6d:c2:25:f2:69:46:2a:8c:62:33:f3:a6:f6:ac:e2:fb:
         f7:76:50:d0:b5:8c:19:a7:a7:83:80:ed:10:24:dc:f0:90:b4:
         cc:bb:fa:94:48:d4:d0:ed:65:8f:23:a2:ef:45:c0:7a:ad:54:
         9c:3c:4f:00:e0:f4:b5:ad:57:d6:01:37:2b:f4:f8:65:14:19:
         15:0d:58:87:7e:79:c9:83:bf:91:78:f1:7e:03:ec:f2:ab:a5:
         b1:fb:7f:48:d3:42:eb:82:68:e9:42:81:d9:60:45:1e:1c:81:
         64:61:a6:23:4d:7c:06:39:c2:58:45:52:07:81:e9:46:94:45:
         62:ab:af:27:c6:2d:bd:c6:58:7d:c9:d0:2e:8c:ee:91:36:7b:
         61:87:16:87:ab:3c:6b:5c:85:05:9b:42:ee:87:a9:19:9e:20:
         ac:f1:22:2f:b8:c3:36:cc:2d:c6:aa:be:d8:71:59:ec:c5:d0:
         b4:e7:30:04:2d:56:63:19:df:06:83:bf:56:e6:a4:1f:60:d9:
         ef:d9:8f:c7:63:09:76:0f:ee:57:78:80:f7:7c:9a:64:3a:d3:
         28:53:26:7b:96:04:10:66:27:2d:5d:00:77:ad:d9:02:04:a7:
         a9:b7:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----