This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
File:                     913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft (raw, json)
Hash identifier:          mTbXdNeOLVpmlBZviBQoxFEloOt2G7w6S8UH423oqK0=
Subject key identifier:   A1:6E:4F:D5:E9:77:17:A5:2B:FA:4F:C8:3F:11:C9:60:03:65:15:74
Authority key identifier: 91:3A:AE:9C:A3:1D:8F:F4:27:D4:01:DC:A3:B9:8D:28:24:83:6A:FD
Certificate issuer:       /CN=913AAE9CA31D8FF427D401DCA3B98D2824836AFD
Certificate serial:       5A5FF5461E695B09AFDE383B1A189C0F5CC05CF5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
Manifest number:          0352
Signing time:             Thu 01 Jan 2026 02:02:57 +0000
Manifest this update:     Thu 01 Jan 2026 01:57:57 +0000
Manifest next update:     Fri 02 Jan 2026 03:14:57 +0000
Files and hashes:         1: 34352e3137392e32342e302f32322d3234203d3e20323639303633.roa (hash: e5Qzp3t3T8ThEG5tL3dNRzs/1J/VWNDWpvxtGUlGu7E=)
                          2: 913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl (hash: jXNzEsulmSqiVgPE5aWMnJCEif2WhCZpuJN+PncmLUw=)
                          3: 323830343a356565343a3a2f33322d3438203d3e20323639303633.roa (hash: s4I15+99T7jREHxVh6byuk1GRay3KxmEWW5jjWd4CJ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl
                          rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 Jan 2026 03:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5f:f5:46:1e:69:5b:09:af:de:38:3b:1a:18:9c:0f:5c:c0:5c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913AAE9CA31D8FF427D401DCA3B98D2824836AFD
        Validity
            Not Before: Jan  1 01:57:57 2026 GMT
            Not After : Jan  2 03:14:57 2026 GMT
        Subject: CN=A16E4FD5E97717A52BFA4FC83F11C96003651574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:4a:bf:7b:2b:e3:ae:5e:e4:77:1c:a9:2d:
                    49:44:92:ae:fc:7c:44:db:56:d8:55:47:34:65:1c:
                    24:0f:73:4f:db:b9:9d:68:c8:fb:08:51:3b:06:72:
                    9a:4a:2d:af:05:f9:55:9f:f9:17:31:17:70:f6:84:
                    e4:e9:2c:b4:ac:f2:0a:a8:5a:70:18:c0:78:c9:59:
                    73:85:cd:ab:70:d6:1b:6f:51:c3:f1:74:04:7e:93:
                    80:e9:58:46:06:f9:ce:43:ed:cd:4c:59:e1:44:15:
                    76:1c:c8:e4:c0:ea:f1:b3:bc:21:f3:e0:6b:b6:29:
                    b6:43:18:d9:c9:cb:cc:ed:d5:6a:c6:8f:a8:57:4c:
                    13:fd:3b:40:4f:0c:36:e9:53:cd:69:6b:7f:d0:53:
                    c8:b0:ac:28:bc:91:82:08:17:64:4a:50:e5:69:d1:
                    8d:98:82:f8:cd:c2:8e:2c:6f:a1:b6:cb:44:9f:7a:
                    57:4e:3f:81:da:8f:14:0c:8d:18:9c:59:97:ff:11:
                    16:cc:d5:42:3b:20:23:91:f1:05:84:10:1b:78:e2:
                    13:a0:33:b9:ae:0b:51:7e:3b:f4:29:0b:a9:d8:23:
                    b9:d8:9a:b2:77:64:87:0d:c4:46:30:42:21:ec:37:
                    ad:ff:69:22:d1:29:5a:e3:60:dc:fb:9e:d3:47:ed:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6E:4F:D5:E9:77:17:A5:2B:FA:4F:C8:3F:11:C9:60:03:65:15:74
            X509v3 Authority Key Identifier:
                keyid:91:3A:AE:9C:A3:1D:8F:F4:27:D4:01:DC:A3:B9:8D:28:24:83:6A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/1/913AAE9CA31D8FF427D401DCA3B98D2824836AFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:2d:b0:b3:63:ee:48:f0:2e:59:72:24:37:47:bc:37:22:
         5d:16:9c:19:66:04:3a:dd:40:2e:3c:bf:b8:0e:ad:0e:12:60:
         ba:2a:c1:27:30:69:ba:22:22:91:73:39:fe:9d:28:17:5d:55:
         f3:4e:84:29:7b:70:06:90:59:bb:a8:7c:01:55:83:88:c4:ec:
         ff:c2:d0:78:35:aa:ba:81:6f:ba:1b:ac:4d:39:00:71:d7:f6:
         7c:cd:15:3c:51:5b:47:92:50:a4:f6:23:99:ea:d7:5a:5e:14:
         54:38:ce:ec:04:11:53:55:05:72:12:9a:58:24:9b:39:ae:c8:
         c6:98:a0:6b:ea:82:c1:5d:b5:c2:31:eb:2e:37:fb:cd:de:79:
         df:cd:9d:9f:fb:14:79:b9:a4:98:cd:eb:67:12:fe:c2:32:7e:
         b7:0b:e0:30:9a:c4:b4:5d:da:0c:63:e5:dc:0c:6b:eb:1f:7b:
         76:75:d5:2c:e5:73:5f:ae:e6:bc:a8:24:b6:93:3d:42:7e:ff:
         76:90:cb:eb:e0:fc:20:d2:c0:08:9f:d3:bb:e3:f2:9d:82:87:
         08:07:7f:31:93:d7:a2:b5:fd:a0:6a:ad:c0:ee:a8:f7:31:7a:
         aa:c0:f0:d0:cb:d3:27:5b:63:d0:94:69:61:ec:d0:75:2d:24:
         4b:a3:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 06:23:10 2026 by rpki-client