This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
File:                     31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft (raw, json)
Hash identifier:          Wh8VqOTgin52PwffUu1GKbSlai3Bx3nvVdLvFne61nA=
Subject key identifier:   4F:EA:8F:D9:3F:2E:D2:08:DE:B0:9D:DA:5B:E2:3F:04:1A:69:8B:A4
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Certificate issuer:       /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial:       2E6F1E804A35DDF5BF17BEC288CB4BECD9662657
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
Manifest number:          035B
Signing time:             Tue 06 Jan 2026 10:23:12 +0000
Manifest this update:     Tue 06 Jan 2026 10:18:12 +0000
Manifest next update:     Wed 07 Jan 2026 11:08:12 +0000
Files and hashes:         1: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (hash: ahehKlt3W03bvotZ/SKfxhWvDlNr0XGgSJ6YRYOsDlI=)
                          2: 323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (hash: 2+aJnh2Q9Ds6NmQQtQrdd3EFoTKUAvkgTSsvPWnE2Ek=)
                          3: 31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl (hash: SqX1Icw1T5lpR2Teg3T5ATcU5nv/7BlgYV3lgAJw2Vo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
                          rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 Jan 2026 11:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6f:1e:80:4a:35:dd:f5:bf:17:be:c2:88:cb:4b:ec:d9:66:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
        Validity
            Not Before: Jan  6 10:18:12 2026 GMT
            Not After : Jan  7 11:08:12 2026 GMT
        Subject: CN=4FEA8FD93F2ED208DEB09DDA5BE23F041A698BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:01:4e:65:dd:7e:b7:81:fe:98:1a:85:4e:
                    d3:d0:8d:51:9a:a8:c2:84:2c:33:33:c2:14:7d:39:
                    02:cd:ae:90:20:81:a2:67:5c:0d:0e:4f:c1:b1:7b:
                    f7:6d:1c:1d:fd:7d:a9:de:a2:69:8b:01:ea:90:7b:
                    73:f0:4e:22:5a:64:59:3c:4b:d9:35:7b:7d:37:bc:
                    c4:d0:75:1d:6b:8b:f3:f1:99:f8:b9:71:3c:ef:3e:
                    ba:85:7f:9f:d7:c9:dc:55:e9:f1:c4:e8:cb:f8:cf:
                    ae:08:e8:05:ba:1d:47:9d:78:9d:36:20:10:4a:c6:
                    7b:62:f4:9f:fe:a0:9f:89:c0:7d:1f:d2:54:e0:ee:
                    8d:9a:a9:65:b0:1b:71:ff:65:29:b8:dc:87:4a:84:
                    39:d0:64:d0:b8:dc:5a:de:84:1c:00:d3:42:e0:ce:
                    69:4c:ef:10:eb:74:4f:5f:d3:75:cd:89:5a:4a:e6:
                    2d:4b:f1:a6:0c:31:84:21:c7:68:53:2c:c6:ae:e5:
                    62:1d:46:58:26:82:f5:80:11:ac:bc:d3:5a:b8:99:
                    85:bc:cf:fb:f0:97:04:68:8b:70:4d:d4:4c:34:cc:
                    d6:fd:7c:09:5a:67:ab:49:c6:96:00:6b:ab:c1:4c:
                    2a:84:c4:6b:bc:04:81:54:ca:34:03:e6:f0:7d:4b:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:8F:D9:3F:2E:D2:08:DE:B0:9D:DA:5B:E2:3F:04:1A:69:8B:A4
            X509v3 Authority Key Identifier:
                keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:39:f1:22:60:20:b5:c3:8a:ac:28:af:c9:4e:c6:32:8c:e5:
         73:4d:9f:28:75:1f:1c:53:0c:61:11:10:f4:36:49:75:11:84:
         bf:30:61:1b:a2:68:5b:e7:7a:cd:d4:ef:dc:ad:e4:81:0a:13:
         05:0d:b2:b0:05:59:5d:05:54:2a:63:45:ba:f0:78:b5:d6:d1:
         1e:cc:12:fe:df:ba:d7:e3:65:10:90:c9:54:a0:8f:e3:55:6d:
         05:43:b7:ec:b4:74:1b:81:bc:02:84:a3:62:b3:28:26:d7:b9:
         6f:e6:9e:ca:e2:1b:df:d2:14:41:08:cb:f3:fa:77:96:ad:c8:
         1a:6f:6c:c0:d3:88:f1:d7:e2:62:54:86:91:3f:4d:3c:49:d1:
         65:43:62:3a:13:6d:66:a0:1a:d5:72:a2:72:59:fa:b3:5b:85:
         03:76:6d:2e:83:a6:34:e4:c9:8a:69:be:c5:c8:99:ca:f9:13:
         5a:a9:9c:d7:13:b7:c0:68:bf:79:c3:02:7f:9f:99:76:d6:1c:
         80:de:03:b5:0d:e9:6f:11:a5:48:53:2d:e5:9c:bc:01:ed:47:
         f8:f9:1d:79:a9:5a:f8:a3:12:9e:30:ab:b0:1e:5a:c3:ea:44:
         bf:69:57:b4:68:c7:15:ff:5b:05:6c:f8:fa:b3:27:53:d1:73:
         b3:45:2d:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULm8egEo13fW/F77CiMtL7NlmJlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFCQUQ5ODA4REU4MDQ5MDNBQTZDNjVCQkUzM0NCRUUx
Qzk5MUQ5QTAeFw0yNjAxMDYxMDE4MTJaFw0yNjAxMDcxMTA4MTJaMDMxMTAvBgNV
BAMTKDRGRUE4RkQ5M0YyRUQyMDhERUIwOUREQTVCRTIzRjA0MUE2OThCQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/gFOZd1+t4H+mBqFTtPQjVGa
qMKELDMzwhR9OQLNrpAggaJnXA0OT8Gxe/dtHB39faneommLAeqQe3PwTiJaZFk8
S9k1e303vMTQdR1ri/Pxmfi5cTzvPrqFf5/XydxV6fHE6Mv4z64I6AW6HUedeJ02
IBBKxnti9J/+oJ+JwH0f0lTg7o2aqWWwG3H/ZSm43IdKhDnQZNC43FrehBwA00Lg
zmlM7xDrdE9f03XNiVpK5i1L8aYMMYQhx2hTLMau5WIdRlgmgvWAEay801q4mYW8
z/vwlwRoi3BN1Ew0zNb9fAlaZ6tJxpYAa6vBTCqExGu8BIFUyjQD5vB9S1a3AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT+qP2T8u0gjesJ3aW+I/BBppi6QwHwYDVR0j
BBgwFoAUMbrZgI3oBJA6psZbvjPL7hyZHZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQ
NTYvMS8zMUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQkFEOTgwOERFODA0OTAz
QUE2QzY1QkJFMzNDQkVFMUM5OTFEOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQNTYvMS8z
MUJBRDk4MDhERTgwNDkwM0FBNkM2NUJCRTMzQ0JFRTFDOTkxRDlBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5DnxImAgtcOKrCivyU7GMozlc02fKHUfHFMMYREQ9DZJdRGEvzBhG6JoW+d6
zdTv3K3kgQoTBQ2ysAVZXQVUKmNFuvB4tdbRHswS/t+61+NlEJDJVKCP41VtBUO3
7LR0G4G8AoSjYrMoJte5b+aeyuIb39IUQQjL8/p3lq3IGm9swNOI8dfiYlSGkT9N
PEnRZUNiOhNtZqAa1XKicln6s1uFA3ZtLoOmNOTJimm+xciZyvkTWqmc1xO3wGi/
ecMCf5+ZdtYcgN4DtQ3pbxGlSFMt5Zy8Ae1H+Pkdeala+KMSnjCrsB5aw+pEv2lX
tGjHFf9bBWz4+rMnU9Fzs0UtaQ==
-----END CERTIFICATE-----
Generated at Wed Jan 7 02:40:59 2026 by rpki-client