This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
File:                     58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft (raw, json)
Hash identifier:          pdRdM78ke9k3HeehIrI1ueuMcsHUBX8JWccfxYPyj5g=
Subject key identifier:   A1:74:CC:70:75:DB:9D:93:00:71:E5:7C:FA:67:C8:3F:FA:BB:6C:07
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Certificate issuer:       /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial:       5158E11C6D9C5B94ECA72002D87AD461B1776D8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
Manifest number:          035D
Signing time:             Thu 08 Jan 2026 00:00:04 +0000
Manifest this update:     Wed 07 Jan 2026 23:55:04 +0000
Manifest next update:     Fri 09 Jan 2026 01:29:04 +0000
Files and hashes:         1: 3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (hash: szNNtCNnjsORqs6P6lequjtDSRNgzjx1EHAehu47jc0=)
                          2: 3137372e36362e3135342e302f32342d3234203d3e20323632343939.roa (hash: p7CnfzytcgcHXs5zf6jbP7AYnuJHNlfWJANH/i5HJzA=)
                          3: 3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa (hash: Oq1Gl544c3jQF5Ot3+46X+ciHFxFoKXBs5JSWAsjqcg=)
                          4: 3137372e36362e3135332e302f32342d3234203d3e20323632343939.roa (hash: 7aOz+w3xh/vQfWkq3CR+i6MPO1ooiQlR1tcsgc8jFHY=)
                          5: 323830343a3836303a3a2f33322d3332203d3e20323632343939.roa (hash: d6OdgEEtIa5bGHHXjt6Kdu1OjM8gDrTnz7mzpXDsx+o=)
                          6: 3137372e36362e3135322e302f32342d3234203d3e20323632343939.roa (hash: pCX4r+zPvwDy1mFVwWyz1e+IEoH318PNLvcLzFXKOHU=)
                          7: 58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl (hash: oBLr/9xSd9FReeOw0JuzOODx5fYYsN25zX52Beb6GA0=)
                          8: 3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa (hash: SXqNZDQVkOYnhirJ+le7mTwCQqPy4Nbg4Z5FSElxc/I=)
                          9: 3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (hash: sj2JtpNhGu9/ztHVKdkWqSNViNVqzCX3obxZMGRf8I0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
                          rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Jan 2026 01:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:58:e1:1c:6d:9c:5b:94:ec:a7:20:02:d8:7a:d4:61:b1:77:6d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Validity
            Not Before: Jan  7 23:55:04 2026 GMT
            Not After : Jan  9 01:29:04 2026 GMT
        Subject: CN=A174CC7075DB9D930071E57CFA67C83FFABB6C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:1b:db:b8:c8:a2:79:e7:eb:9e:49:bf:24:
                    72:f3:93:18:20:a6:b8:1b:c0:f9:f4:c7:5e:60:17:
                    88:7b:24:20:d2:b5:c2:6a:0e:df:b3:06:63:5e:af:
                    56:38:cf:2a:7d:78:4b:0d:40:01:86:11:cc:6b:a8:
                    60:fd:82:b9:1d:5d:db:75:13:22:b9:12:29:6b:12:
                    9d:84:79:c7:68:79:d7:06:17:28:74:a5:5e:6a:60:
                    80:3e:77:eb:e8:f8:23:e5:78:0f:fc:c4:cd:c5:a6:
                    fe:6c:47:21:20:17:66:c7:ee:84:5e:6d:48:e6:41:
                    89:ce:cc:01:3e:f5:46:ac:36:33:24:41:84:a8:27:
                    92:63:7e:01:2c:83:d9:9e:6a:96:b6:3e:ee:5f:56:
                    d2:81:c2:15:74:96:98:73:c4:17:61:bc:a3:f5:88:
                    a0:47:03:f9:e6:0d:ec:b8:09:f8:bb:3f:63:87:c0:
                    f2:22:4f:06:1f:3c:e2:c6:5d:e5:3f:22:ea:f3:b9:
                    71:fc:68:a2:79:58:5b:93:06:f7:f0:35:12:9e:6f:
                    f1:77:e6:57:44:2a:6a:4e:66:a8:1a:f2:dd:58:69:
                    f2:ef:c9:2d:b7:67:a1:df:d8:fa:ac:9e:e3:68:cc:
                    be:ee:8f:1b:1b:0c:b3:1d:e0:7f:32:41:43:a0:c5:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:CC:70:75:DB:9D:93:00:71:E5:7C:FA:67:C8:3F:FA:BB:6C:07
            X509v3 Authority Key Identifier:
                keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:34:0d:86:71:f8:86:74:12:0d:0b:50:da:21:09:34:d6:99:
         a4:69:48:03:ca:57:d6:1b:1e:b2:4a:4f:22:df:9c:bb:d4:39:
         c3:86:b8:ce:97:02:cf:b9:25:e0:fc:60:e3:63:a0:5c:78:4c:
         ee:a0:2e:04:52:e5:23:db:e8:98:51:2b:45:cd:a4:31:a6:b1:
         7b:2b:aa:1c:b0:64:73:ff:6c:6c:4e:4c:d1:9e:8d:65:2f:9c:
         81:b0:fa:9b:fc:67:24:39:23:1c:2e:87:5f:b2:36:16:b9:e2:
         2c:58:c3:f0:fa:01:81:8e:0b:ed:b5:02:81:09:88:f6:2c:38:
         76:4e:f3:ce:37:34:aa:00:55:92:d6:10:d2:6c:43:8b:7b:7d:
         9e:02:71:71:e7:3d:7d:71:47:0a:9c:b2:86:08:81:26:7f:4c:
         64:62:df:7a:31:dc:c2:c5:66:41:bd:85:57:dd:73:5e:d5:4d:
         c7:ea:b8:55:33:7a:2e:f3:53:d5:3b:77:16:8c:c6:b6:c6:b1:
         5a:81:cd:4a:da:cc:6a:65:a3:a5:47:dc:32:e0:b6:3c:d4:5f:
         70:c5:38:a9:90:be:85:8e:2c:28:19:54:1c:24:45:68:75:d6:
         d8:b9:9e:aa:ce:75:6d:a2:c0:4d:f5:c6:4e:2e:37:b7:9c:f4:
         a8:7e:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:07:52 2026 by rpki-client