This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
File:                     1A10A2ED52FC4857ABCA56A1489602C109D46814.mft (raw, json)
Hash identifier:          2uI1azv1M1JBy3cG0kPOs+bQet3Acw/s0ccDALQACB4=
Subject key identifier:   89:6A:A3:7C:29:FA:C2:BE:65:A2:25:38:3B:6A:17:F3:0E:1A:9D:DB
Authority key identifier: 1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14
Certificate issuer:       /CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
Certificate serial:       4315E9F81B4F4CD6FA4B142ABD31D850880759BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
Manifest number:          0203
Signing time:             Wed 07 Jan 2026 08:16:07 +0000
Manifest this update:     Wed 07 Jan 2026 08:11:07 +0000
Manifest next update:     Thu 08 Jan 2026 23:21:07 +0000
Files and hashes:         1: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: xBu/tPjzc3U7Xtp/+5ZxwRcbLfpIPhzFjn97C0jLbfE=)
                          2: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: dwBSc//sXi45dTapRIXLgvpyMOBIXnuNMUkFPTLT1O4=)
                          3: 1A10A2ED52FC4857ABCA56A1489602C109D46814.crl (hash: /Qmg0nIHGLUIeKaxceUE/xtqvS3PDU9IDH1ZPtwnQRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl
                          rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Jan 2026 23:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:15:e9:f8:1b:4f:4c:d6:fa:4b:14:2a:bd:31:d8:50:88:07:59:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
        Validity
            Not Before: Jan  7 08:11:07 2026 GMT
            Not After : Jan  8 23:21:07 2026 GMT
        Subject: CN=896AA37C29FAC2BE65A225383B6A17F30E1A9DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:ef:6f:fd:bc:8c:fa:8b:1f:52:bf:50:57:
                    f7:a9:17:bb:cd:da:56:80:9d:ea:70:0d:45:38:19:
                    e7:df:93:29:5a:c3:73:d1:38:3d:c2:4c:fc:99:a4:
                    61:d2:98:52:b2:d9:72:20:1c:fa:cc:c4:df:3c:b0:
                    eb:2a:31:c3:b8:65:60:f4:40:d7:00:89:5d:bf:38:
                    39:40:11:b7:ba:8d:13:b6:d4:f9:35:8e:62:8b:c9:
                    0e:6e:bc:11:52:0a:7f:77:31:7b:6a:4f:56:51:83:
                    40:78:24:38:24:0d:2d:da:2b:7a:72:55:9a:e9:91:
                    7c:2e:fc:d2:71:17:ea:2c:ef:e1:b3:4c:37:90:23:
                    0b:85:80:44:d2:51:e6:66:22:1b:9f:84:d4:40:8f:
                    6a:13:84:42:24:17:89:78:93:25:d7:06:0a:78:c0:
                    59:29:b7:bf:64:6c:f9:6e:7a:d0:fe:ca:85:39:ea:
                    20:ba:66:39:40:cd:e0:2c:5f:40:1f:b9:ae:da:36:
                    77:0b:a8:f9:9c:df:64:91:3f:77:65:57:bc:83:43:
                    7b:2f:64:1a:f2:ca:64:57:b7:a0:75:fd:b6:58:17:
                    36:36:b8:e2:c9:fb:13:09:24:5e:6b:8d:2e:af:8a:
                    d9:27:27:ca:45:09:30:12:81:f2:85:c4:d4:7b:d9:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:A3:7C:29:FA:C2:BE:65:A2:25:38:3B:6A:17:F3:0E:1A:9D:DB
            X509v3 Authority Key Identifier:
                keyid:1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:e6:d0:9f:34:dc:42:00:0a:d2:09:66:8d:fc:f6:00:05:
         c1:65:c4:c6:75:7f:10:e6:20:f2:03:24:1d:11:b0:96:2a:64:
         88:f6:c8:94:f2:b2:14:56:92:e1:71:7c:88:a9:77:f5:1a:98:
         9e:e4:b1:6e:0b:74:a4:23:d7:06:ee:dc:d1:ca:b5:2d:3e:88:
         61:0f:a7:df:a1:8b:e3:ff:16:2d:a6:5b:70:0f:7f:ab:2c:6e:
         c9:90:45:90:7b:77:d7:07:57:5c:02:ed:43:22:1e:af:00:8b:
         a1:cb:12:4b:bd:72:ef:59:b9:35:18:63:0d:13:06:b6:78:53:
         ed:bc:76:dd:ed:f6:e0:a4:2b:19:41:0d:26:34:98:15:da:6a:
         d7:77:df:46:fe:ac:be:55:44:a6:ec:03:81:23:b5:3e:34:e8:
         84:3b:61:8e:18:be:3b:1b:6b:44:e1:f4:70:2a:17:fb:95:ab:
         23:6c:91:8b:56:75:0b:99:6f:9a:42:52:d3:63:4e:04:7a:af:
         f2:ea:9d:2a:55:b2:14:aa:dd:92:33:51:f2:98:58:44:e2:a0:
         c0:ab:a1:16:67:d6:bd:a9:30:9c:bb:53:6e:c6:b7:28:72:7f:
         fc:26:33:e7:07:b3:34:40:83:56:46:ae:70:63:2a:fe:64:39:
         f0:fd:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 13:43:31 2026 by rpki-client