This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
File:                     D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json)
Hash identifier:          1Id1a6fDusxH+HMjDmr8oFKW505V/kkVxOJps5/Qmkc=
Subject key identifier:   7C:02:B8:6A:4C:BB:A4:B4:F7:49:91:F2:4E:A9:34:19:1E:22:1F:3C
Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
Certificate issuer:       /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Certificate serial:       5516D7D0AC1E585E3CDA947BE0DDA1C7A96E336A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
Manifest number:          0362
Signing time:             Sun 25 Jan 2026 13:59:12 +0000
Manifest this update:     Sun 25 Jan 2026 13:54:12 +0000
Manifest next update:     Mon 26 Jan 2026 14:40:12 +0000
Files and hashes:         1: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=)
                          2: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: UcnjPtoynpTOm/XW8GKkUqnZ/Wg4S6hlWUd/UzDKS+o=)
                          3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=)
                          4: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:16:d7:d0:ac:1e:58:5e:3c:da:94:7b:e0:dd:a1:c7:a9:6e:33:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
        Validity
            Not Before: Jan 25 13:54:12 2026 GMT
            Not After : Jan 26 14:40:12 2026 GMT
        Subject: CN=7C02B86A4CBBA4B4F74991F24EA934191E221F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:fa:9f:3c:60:5f:8d:b2:40:1a:44:83:97:
                    62:86:c4:15:53:29:a4:65:e8:de:fc:2f:3d:7a:c2:
                    fa:b0:93:41:16:66:ac:cd:1b:5b:6e:22:c2:0d:fc:
                    f4:09:69:ef:72:86:a3:7c:c9:09:74:06:78:05:76:
                    91:4d:72:84:4b:de:f2:fb:22:b7:04:c9:b7:d3:3a:
                    14:96:47:4f:7e:78:9b:c6:86:66:19:88:33:6a:e7:
                    81:d9:4d:5f:f5:a1:cf:7b:3d:73:b7:0a:9c:1d:86:
                    0f:af:5c:85:a2:e2:a5:a3:bd:3a:1a:ad:e1:8a:34:
                    e8:72:55:d3:38:de:f7:6d:f4:fd:a6:4a:f3:c6:49:
                    25:10:4c:06:5a:e6:33:2c:f3:12:cd:d2:fd:25:53:
                    9d:c8:e1:16:d7:79:48:e7:18:e6:eb:8c:ad:f5:db:
                    1e:68:9d:ba:e3:37:99:97:1c:2a:d7:26:9d:bb:3f:
                    fa:04:17:1d:f6:68:5d:84:fb:f8:5a:1e:c2:87:79:
                    e7:86:29:04:07:43:f9:5a:1c:c6:3d:07:92:87:04:
                    ff:7e:a0:1c:d8:76:c0:8e:87:28:f5:88:f1:9f:ef:
                    31:f5:84:ac:d7:81:5b:f1:09:c5:8c:b0:e1:f7:1a:
                    32:f0:c6:1b:75:f6:dd:34:df:66:c3:7e:1a:a2:e8:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:02:B8:6A:4C:BB:A4:B4:F7:49:91:F2:4E:A9:34:19:1E:22:1F:3C
            X509v3 Authority Key Identifier:
                keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:44:b4:c7:b5:b1:92:53:44:35:18:a8:4f:b5:d6:ec:bc:6e:
         0f:3c:d4:e9:8a:a5:8f:88:8e:2f:b0:55:90:fd:ce:6a:86:00:
         4c:da:82:8b:7b:ff:e0:0e:5c:82:a5:fb:30:ec:d8:99:38:f4:
         68:67:5d:3a:f1:61:e5:5a:ec:37:c2:96:3e:4d:a1:e9:60:03:
         b2:04:d5:67:db:7c:db:7e:30:7f:aa:fc:fc:72:29:9a:ac:3e:
         fa:9b:6e:2a:8e:d1:1e:94:9f:25:74:3f:17:10:9c:3c:43:b1:
         90:45:72:fd:78:67:b5:eb:76:51:a9:c9:23:fa:3b:68:76:5d:
         f1:c1:4a:62:fd:4a:ae:18:74:fc:c6:b1:7b:2a:ac:7e:76:b4:
         91:c3:d9:d4:90:a0:7a:8a:17:a2:52:46:8b:ac:e8:72:87:7a:
         0c:9d:06:53:33:07:96:ca:fe:bb:2e:00:21:97:c1:08:fe:a2:
         d3:07:ae:f8:dc:56:2c:b8:77:49:ce:88:c4:c1:94:06:81:9b:
         a0:45:ee:ba:0b:10:3d:e4:17:f2:5f:28:6a:c4:d5:e0:cf:5e:
         22:d0:5d:d8:2b:08:9e:3e:93:b7:0f:f4:5f:d1:93:05:25:0e:
         e5:5b:6d:a4:af:db:17:60:af:3f:74:f9:2e:eb:b4:33:b0:84:
         13:cb:06:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:23:38 2026 by rpki-client