This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
File:                     CDCA5D752465C82F87C02572646B39237CA981A8.mft (raw, json)
Hash identifier:          sqAegFN19+dR1U8Nu/xaXiT8fegzC4t5LHdGLxz3TH4=
Subject key identifier:   15:8E:09:76:86:DA:23:97:C1:D2:A5:7B:0A:71:97:DD:1D:4E:CA:90
Authority key identifier: CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8
Certificate issuer:       /CN=CDCA5D752465C82F87C02572646B39237CA981A8
Certificate serial:       4B1C6ECBC6B105BAD1919D40E35D236DBA589FB2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
Manifest number:          57
Signing time:             Sun 25 Jan 2026 03:15:54 +0000
Manifest this update:     Sun 25 Jan 2026 03:10:54 +0000
Manifest next update:     Mon 26 Jan 2026 04:32:54 +0000
Files and hashes:         1: 3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa (hash: okwdcryUzcO/1qhh0V46izFAeoY+dqkOxK9ae7wuOqg=)
                          2: 323830343a333561343a3a2f33322d3438203d3e20323636323938.roa (hash: B0BeiQ4Tyb9EsP+OH1dapS7buRu5QFW11gv4iICDJHU=)
                          3: CDCA5D752465C82F87C02572646B39237CA981A8.crl (hash: L4H7R3fxac7iYbZnZOFvivBgrkRywQHbG4ww1soFR/E=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl
                          rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 04:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1c:6e:cb:c6:b1:05:ba:d1:91:9d:40:e3:5d:23:6d:ba:58:9f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCA5D752465C82F87C02572646B39237CA981A8
        Validity
            Not Before: Jan 25 03:10:54 2026 GMT
            Not After : Jan 26 04:32:54 2026 GMT
        Subject: CN=158E097686DA2397C1D2A57B0A7197DD1D4ECA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:90:9c:e9:26:60:9a:03:42:a3:2c:32:be:
                    b8:4e:ae:99:61:ca:21:2d:fb:77:08:88:d6:dc:40:
                    80:89:18:9b:37:f7:de:00:c9:94:9e:21:7a:ac:e2:
                    ff:2c:d6:42:ed:0d:72:f6:06:aa:f8:ee:c0:85:f9:
                    bf:7f:31:5c:a1:fe:c6:82:ff:d5:5d:f8:45:c6:10:
                    40:b9:64:b3:ec:2a:5a:99:41:3d:e4:e4:1b:26:de:
                    c9:bf:ad:f3:d2:4c:c6:96:07:04:2b:0f:a5:81:cc:
                    39:18:10:ab:a5:06:a7:77:e8:a8:5d:99:0f:29:a0:
                    d5:ff:47:ad:f3:99:1c:7a:8d:38:6b:1c:43:66:f5:
                    ed:ba:8c:3e:a9:d7:06:a1:ad:af:de:48:27:74:8f:
                    7e:83:77:39:ee:2b:56:bd:40:21:2a:04:86:23:6f:
                    0f:cf:98:e8:98:f4:0f:89:4f:92:72:eb:66:44:97:
                    ca:ab:94:f7:c2:40:f2:df:78:ae:8a:a6:22:45:ab:
                    bb:51:be:ec:3c:1e:ce:4d:c8:0d:c4:2d:bc:ff:51:
                    f2:33:64:e8:a8:75:d8:d5:ed:9b:40:13:7d:30:41:
                    af:17:e2:f1:fd:43:e2:a1:55:41:57:63:72:41:7e:
                    09:2a:f6:42:dd:01:84:59:44:1b:50:63:11:6d:b2:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:09:76:86:DA:23:97:C1:D2:A5:7B:0A:71:97:DD:1D:4E:CA:90
            X509v3 Authority Key Identifier:
                keyid:CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:ff:76:ea:51:59:a8:71:a4:a5:bf:55:54:60:de:59:c3:
         be:39:b6:6c:ac:cd:f6:e7:59:56:66:bd:fe:26:97:6f:aa:48:
         57:ca:91:33:f8:e4:b3:6d:5c:52:47:f4:17:51:67:bf:33:6d:
         2b:7f:5f:02:a0:48:d6:ce:06:20:78:81:66:1d:47:0d:a2:9d:
         02:3b:54:46:51:e7:09:2b:0d:9c:63:b9:ae:d3:28:18:90:a3:
         9b:b3:e7:47:74:fc:cf:49:83:5c:b6:b1:a6:99:59:59:07:af:
         53:53:61:fb:19:de:d4:00:b6:e7:82:3d:49:23:8b:f3:65:1a:
         86:d3:9e:5e:1e:d6:d3:09:8e:37:6f:0a:a3:3d:a9:12:f8:6d:
         d5:dd:b0:03:e8:75:e3:61:16:39:0c:08:e2:37:d2:c7:ff:f4:
         74:21:0e:69:b3:fc:ca:43:36:c4:73:71:83:bb:8a:79:6b:c7:
         54:03:35:9a:36:b1:62:fe:7e:16:fa:9c:82:c3:1a:fc:a8:20:
         19:2e:46:4b:e8:c9:f9:e4:4d:1c:4a:b5:d3:5e:a2:3a:05:d6:
         ff:33:c2:a2:2d:27:d1:b8:8b:45:ef:dd:cc:ff:8e:aa:3b:fb:
         c8:28:86:7f:3d:5f:f9:dc:60:ad:40:be:7c:16:47:78:0e:87:
         a8:f3:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:17:51 2026 by rpki-client