This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
File:                     FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft (raw, json)
Hash identifier:          x2awuJ0Izo98vRGBPT2qQWe4GhUHRW5DMLHfzPImOY4=
Subject key identifier:   58:FA:0F:8C:E4:96:ED:B1:73:5D:42:56:B9:61:5C:28:14:52:2F:10
Authority key identifier: FA:8F:AB:FB:F1:A1:C5:61:2D:7C:C8:D0:30:06:A9:17:66:40:EB:68
Certificate issuer:       /CN=FA8FABFBF1A1C5612D7CC8D03006A9176640EB68
Certificate serial:       69CDEF3A68370DBB0E4A7342014A03593200E9CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
Manifest number:          035F
Signing time:             Mon 12 Jan 2026 02:58:53 +0000
Manifest this update:     Mon 12 Jan 2026 02:53:53 +0000
Manifest next update:     Tue 13 Jan 2026 05:14:53 +0000
Files and hashes:         1: 3136382e39302e3134302e302f32322d3234203d3e20323635323736.roa (hash: FGowHIBLC5ZvHF8hgYYguHpDy98JaKKjWKSSlcgpOc8=)
                          2: 323830343a326435383a3a2f33322d3438203d3e20323635323736.roa (hash: aRQ3w7wvNcCf2QrloiA7MPgYPR4Av+FwjWfa+MEvSXc=)
                          3: FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.crl (hash: EFQ9ctFC1S2sm8X5nhWD7lLcewP7KaoEDUJy+tdLYjs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.crl
                          rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 05:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cd:ef:3a:68:37:0d:bb:0e:4a:73:42:01:4a:03:59:32:00:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA8FABFBF1A1C5612D7CC8D03006A9176640EB68
        Validity
            Not Before: Jan 12 02:53:53 2026 GMT
            Not After : Jan 13 05:14:53 2026 GMT
        Subject: CN=58FA0F8CE496EDB1735D4256B9615C2814522F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:d0:53:f2:b3:3d:77:cf:3f:2f:b9:b2:81:
                    68:df:19:6f:6b:ed:f6:35:f7:a0:de:ba:f0:01:b0:
                    f2:bf:e9:76:5b:14:6b:ed:dc:bd:0d:63:17:6c:82:
                    bf:5c:4c:fd:22:af:b7:78:84:cb:fc:2f:ae:4b:6d:
                    47:07:67:6c:8c:61:ac:c1:53:35:fa:6a:7a:2a:a9:
                    4e:55:3e:56:82:82:c6:ec:44:20:43:2c:73:7c:3e:
                    88:3f:8a:b6:1c:d9:03:41:4a:e4:5b:7b:5c:02:00:
                    e4:64:aa:5e:4e:a5:22:c5:ce:7e:70:8c:f5:4a:02:
                    3c:b9:3e:cb:b5:aa:7d:94:ad:9c:1a:54:32:aa:42:
                    32:a7:4f:ed:6f:64:32:28:54:1f:bf:ba:ab:32:26:
                    1a:3f:8c:b2:f4:9b:55:01:dd:c8:20:42:ad:6b:af:
                    26:48:2a:2d:92:8a:8c:0d:7e:17:6d:c6:da:4c:ba:
                    90:90:67:0b:5e:6d:a2:c4:42:6e:35:1f:1f:31:f8:
                    48:ce:06:5b:04:64:33:8d:c0:4a:a4:23:6b:af:e5:
                    e6:10:2d:a5:d1:8b:45:78:e6:d9:e3:c2:f5:f2:a7:
                    5d:3b:52:ab:c4:cd:79:41:3b:3d:26:d8:6c:3e:a9:
                    f0:b3:02:6c:c9:38:c1:56:54:5c:1a:5b:eb:a3:49:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FA:0F:8C:E4:96:ED:B1:73:5D:42:56:B9:61:5C:28:14:52:2F:10
            X509v3 Authority Key Identifier:
                keyid:FA:8F:AB:FB:F1:A1:C5:61:2D:7C:C8:D0:30:06:A9:17:66:40:EB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgrT7t86dD7Pt44BKjpVsioX7hseB6SQQogKC9ZvLR7a/2/FA8FABFBF1A1C5612D7CC8D03006A9176640EB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:b8:1e:26:0f:0f:f8:29:a6:12:c1:71:01:26:10:d8:80:
         87:fe:0b:b8:5d:49:d4:0e:cb:5c:d9:7e:a4:6e:5e:9e:14:1d:
         2d:04:e6:84:04:41:30:a7:c2:a3:d5:c9:46:9f:3b:6a:3e:7a:
         8e:4f:70:b3:6f:05:04:3f:2c:ef:fa:83:81:b0:5d:dc:fd:16:
         4f:52:d7:50:58:52:af:d0:b5:0f:0e:64:e5:0d:1a:55:02:97:
         7b:d5:c0:79:8b:cc:94:3c:0c:1a:04:bd:62:8e:39:5b:e9:7d:
         35:58:b6:61:62:1b:23:fb:95:e2:f6:81:93:4b:9d:d7:39:fb:
         8b:1d:38:74:ec:24:49:95:68:ea:37:88:d5:4c:75:50:bb:81:
         9a:e6:08:96:43:08:43:c5:c2:b1:c2:7c:82:4b:08:55:da:0a:
         f7:03:e1:04:f4:f6:77:3a:0a:ec:14:06:2f:41:2b:5e:15:93:
         53:16:b3:25:26:44:d6:8b:1b:5d:43:db:2e:f9:c0:c9:ac:83:
         40:e9:38:b9:a6:e7:40:97:5b:c6:ae:4b:d0:47:09:a2:26:60:
         4b:9e:02:8b:91:68:d7:41:f3:52:8b:f5:a7:9d:77:93:07:ad:
         ca:8d:b3:b6:0f:74:6e:49:4f:bf:fd:63:3d:d9:41:2c:4c:72:
         49:9d:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:52:37 2026 by rpki-client