This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
File:                     D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft (raw, json)
Hash identifier:          kRMBNd1jZ3yX+A8mb09TVCqQHxl9nD4BvzL1E4RE9pc=
Subject key identifier:   65:84:D6:F4:44:C8:C6:0D:0E:0D:7F:F2:16:D3:42:F4:8D:56:6D:1D
Authority key identifier: D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC
Certificate issuer:       /CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC
Certificate serial:       525C857AB291AD245C1C6F9FEA54CD091C651E12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
Manifest number:          CA
Signing time:             Sun 25 Jan 2026 09:18:36 +0000
Manifest this update:     Sun 25 Jan 2026 09:13:36 +0000
Manifest next update:     Mon 26 Jan 2026 12:35:36 +0000
Files and hashes:         1: 323830343a393138383a3a2f33322d3438203d3e20323734363437.roa (hash: Bni/gewlTpvsi/d7y06XdboHoggaWC2Q8LtTu0dJx4Y=)
                          2: D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl (hash: cDau7NXgS93zaHF9e4UGuNYc4pFB0rJKgNnb0WSv8HQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 12:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5c:85:7a:b2:91:ad:24:5c:1c:6f:9f:ea:54:cd:09:1c:65:1e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC
        Validity
            Not Before: Jan 25 09:13:36 2026 GMT
            Not After : Jan 26 12:35:36 2026 GMT
        Subject: CN=6584D6F444C8C60D0E0D7FF216D342F48D566D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:55:a3:23:05:ac:8c:34:44:de:27:8c:91:
                    41:95:42:15:6b:9a:1e:15:1e:04:af:b0:dd:df:ea:
                    8f:e0:b2:23:05:ab:3a:6a:c1:1d:a0:6f:4c:4f:37:
                    eb:9f:cc:64:04:45:eb:ac:df:00:f9:a6:f8:ce:8b:
                    83:b6:b5:09:de:48:cd:a7:80:f5:4f:9b:6b:26:8a:
                    91:54:bd:71:1b:84:1d:0a:29:6b:25:e2:b0:cc:24:
                    17:3b:b9:92:bf:fd:ca:b5:d9:35:0a:ea:47:38:f0:
                    75:94:0c:38:53:a3:10:1b:64:13:ca:32:e8:b4:62:
                    b0:44:9e:6f:9b:0e:69:a5:7a:2e:47:08:20:43:43:
                    9b:07:da:9a:ec:0b:c9:23:cb:c1:d0:76:90:e1:11:
                    12:16:dd:01:c4:20:c5:9e:08:7e:f7:34:93:38:fc:
                    2d:9e:7b:de:6a:5c:a9:14:8a:7b:cd:20:4b:62:b6:
                    10:2f:7a:df:8e:fc:24:f9:2b:1e:69:da:ea:28:2a:
                    b2:2b:4e:97:fc:d7:b1:3d:af:3e:ba:6e:68:15:20:
                    59:22:4f:3e:55:66:d9:72:cc:a4:24:01:d9:83:a3:
                    99:56:5e:08:00:b1:51:41:ed:c3:d9:06:70:9d:ec:
                    56:a5:03:0f:8c:96:18:81:eb:d6:e7:39:bb:7a:1c:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:84:D6:F4:44:C8:C6:0D:0E:0D:7F:F2:16:D3:42:F4:8D:56:6D:1D
            X509v3 Authority Key Identifier:
                keyid:D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:f3:25:07:ab:78:fe:6d:71:17:be:05:73:00:5e:04:8b:
         4f:19:0f:04:7c:c7:3f:21:8d:de:04:17:48:c0:39:35:e8:65:
         59:d2:af:e0:64:3a:1e:f3:f5:04:fb:e7:85:a1:64:ef:7e:e0:
         ee:40:1c:41:32:ab:30:51:2b:3f:82:89:36:ab:00:fa:40:ae:
         2e:1d:33:a6:09:21:cb:80:ba:2f:76:50:f0:4c:04:f7:6f:1e:
         5f:c5:d9:2f:da:00:66:bc:4d:c0:c4:d0:50:c5:00:ed:55:27:
         59:52:ac:48:36:a3:4f:a0:bd:0d:ac:e4:11:0c:7b:59:e5:f6:
         de:80:49:0d:61:bc:d7:c5:9c:67:78:21:09:64:6d:a0:8a:53:
         b4:b3:64:cd:84:2e:5b:db:cf:0c:7c:b6:8f:ee:07:68:52:65:
         92:f4:d8:16:27:16:d2:6c:0b:78:97:c4:cc:17:3d:36:b1:f9:
         3c:39:87:8e:e6:38:2a:7a:33:98:c2:7f:d6:4d:d6:0e:83:fa:
         5a:0c:13:95:3a:4d:85:b9:26:73:67:a6:b6:3c:f1:27:10:40:
         e1:ef:79:21:06:a4:64:07:1a:76:d5:33:d0:1f:d0:b8:55:08:
         74:aa:a1:c4:ad:04:6f:e3:01:65:44:b4:1a:d3:0e:f3:c1:6f:
         db:04:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----