This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
File:                     328938F6B87D58141D853FA04B61F2EC68371E43.mft (raw, json)
Hash identifier:          GHRXFGwcVAvP5e2JlVg761ggS3N3xLh9TIkEvPWnKi0=
Subject key identifier:   75:ED:42:55:45:61:65:7D:B8:40:21:24:C0:8F:76:56:BB:48:FA:11
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       756CEBEDB1C8A5BD0CF52A0888FD4CA8AC1CDB19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
Manifest number:          03E1
Signing time:             Sun 11 Jan 2026 21:09:21 +0000
Manifest this update:     Sun 11 Jan 2026 21:04:21 +0000
Manifest next update:     Mon 12 Jan 2026 23:26:21 +0000
Files and hashes:         1: 323830343a383333633a3a2f33322d3332203d3e20323732313835.roa (hash: ayKHkoUaXDc+dlhSGRGyDF6TYdoTV7sf4lmoMEMC7N4=)
                          2: 328938F6B87D58141D853FA04B61F2EC68371E43.crl (hash: Ri0fHVmrcSJwicwGk6aPuBxzIE9qSkTIsf7Z6si/IIs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Jan 2026 22:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6c:eb:ed:b1:c8:a5:bd:0c:f5:2a:08:88:fd:4c:a8:ac:1c:db:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Jan 11 21:04:21 2026 GMT
            Not After : Jan 12 23:26:21 2026 GMT
        Subject: CN=75ED42554561657DB8402124C08F7656BB48FA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:50:ed:ef:f1:07:24:ad:0f:6c:de:d4:78:
                    d0:d8:d6:87:dc:f8:4c:e3:e7:d3:7e:20:7f:88:93:
                    50:ea:04:a5:7d:f8:a2:6b:50:4a:ea:e5:09:77:16:
                    ca:f2:90:c5:18:a9:3c:1c:cc:3c:c9:e4:92:76:78:
                    d2:aa:4e:3d:ef:a0:5b:ea:84:d5:dd:d1:60:75:55:
                    19:6a:79:2d:43:f2:64:f0:e0:7b:45:cc:ef:14:43:
                    30:e4:90:07:75:c0:c5:e2:14:d6:37:6b:b1:4c:91:
                    f7:99:7c:68:95:85:d0:1c:14:a6:1f:a9:e5:80:2d:
                    28:64:a1:a6:9c:59:f3:11:74:e8:ff:56:7b:80:4f:
                    94:f5:23:fa:5d:3d:c4:d6:81:c2:44:e5:f4:4c:c6:
                    9f:46:c9:3e:96:04:fa:b2:fc:19:81:a8:3e:ff:e6:
                    41:09:66:9b:a1:fb:57:3e:3d:f4:a6:67:d4:85:d1:
                    a3:98:87:45:b2:50:90:ca:33:7c:91:2f:f8:6d:a4:
                    4a:a2:bf:29:c8:c7:f2:0c:07:fe:83:a6:7b:b8:46:
                    9e:25:24:25:b4:41:1d:03:27:8e:fc:f3:39:0e:84:
                    c3:52:5c:df:35:97:27:b1:bf:d2:79:92:2e:de:88:
                    5a:3c:c5:d8:9f:29:e4:2d:33:89:c6:78:2b:bb:4c:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:42:55:45:61:65:7D:B8:40:21:24:C0:8F:76:56:BB:48:FA:11
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:f5:4f:c3:01:c7:c0:4d:0c:98:b0:fd:83:b8:1d:48:9e:
         2a:72:ab:a3:6b:0d:89:5c:f0:95:67:8f:48:41:80:66:9b:17:
         07:a0:44:eb:b2:f7:1e:3d:6b:3e:f1:67:dd:62:31:76:29:d5:
         a2:90:d6:2a:ec:cd:30:5c:55:ea:4d:46:1b:4e:2e:3e:af:3d:
         7d:2c:0b:36:c8:df:cd:b1:4e:2c:ae:ce:f3:d4:a3:5b:13:2f:
         5b:d7:96:7c:ef:ba:3e:c7:5f:bd:d2:4f:d1:dc:4e:93:51:a9:
         36:0b:df:cb:bb:4d:3a:28:7e:66:8b:1b:a1:f1:10:1f:82:f0:
         78:9b:97:3a:0b:d3:d2:53:57:42:32:cf:35:47:f0:f3:7a:62:
         da:90:40:d6:89:70:37:59:fc:b6:30:32:92:a9:0b:10:e9:b3:
         bc:f1:10:13:73:16:59:e6:19:4d:b7:1f:f5:21:1b:3e:73:e6:
         95:58:33:7c:ba:24:dd:af:1e:a9:27:41:cd:2f:1f:e8:73:fd:
         e0:ea:05:e1:f8:db:0c:c5:cd:b6:0e:2f:3d:45:c4:f3:b8:75:
         e2:19:c7:dd:db:10:6a:c5:f0:21:60:8f:9b:7f:b7:05:76:09:
         8c:ce:b0:9f:cb:d3:e9:50:2f:21:65:8d:05:00:38:fc:c6:46:
         6c:39:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----