This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
File:                     1A10A2ED52FC4857ABCA56A1489602C109D46814.mft (raw, json)
Hash identifier:          5oGMhJI9l0sfE0GG11OTxliYcwycaWdrb48rw3ZEVKk=
Subject key identifier:   4F:8D:F7:D5:5B:38:DB:5A:27:53:AE:4E:F0:35:F3:9B:86:47:EE:E1
Authority key identifier: 1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14
Certificate issuer:       /CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
Certificate serial:       436E0CB36B8F4C1A831D2962E78B2410CFAE499C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
Manifest number:          0202
Signing time:             Tue 06 Jan 2026 02:50:58 +0000
Manifest this update:     Tue 06 Jan 2026 02:45:58 +0000
Manifest next update:     Wed 07 Jan 2026 16:12:58 +0000
Files and hashes:         1: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: dwBSc//sXi45dTapRIXLgvpyMOBIXnuNMUkFPTLT1O4=)
                          2: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: xBu/tPjzc3U7Xtp/+5ZxwRcbLfpIPhzFjn97C0jLbfE=)
                          3: 1A10A2ED52FC4857ABCA56A1489602C109D46814.crl (hash: tptLTHTJAiR+9BfT0Y+pGZKadAAEd2U56ZkCnse3rLE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl
                          rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 Jan 2026 16:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6e:0c:b3:6b:8f:4c:1a:83:1d:29:62:e7:8b:24:10:cf:ae:49:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
        Validity
            Not Before: Jan  6 02:45:58 2026 GMT
            Not After : Jan  7 16:12:58 2026 GMT
        Subject: CN=4F8DF7D55B38DB5A2753AE4EF035F39B8647EEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:8e:68:12:76:3e:5e:90:91:63:4a:09:47:
                    3a:73:51:e2:82:51:6e:6b:31:cb:de:61:99:67:42:
                    5e:80:40:a7:e1:71:b0:e3:77:c6:64:44:37:1b:d0:
                    96:79:fe:52:f7:10:65:73:ef:de:c3:fc:5c:cd:67:
                    fc:8f:55:2a:fc:81:eb:b6:f5:1f:24:f9:fc:6d:8a:
                    e6:47:bf:7c:10:9e:15:fb:49:4a:5d:86:a7:40:7e:
                    2b:33:47:d6:10:58:82:97:dd:23:df:57:05:9d:7c:
                    0d:de:13:64:ce:b4:c8:6d:38:14:01:a2:78:c6:5e:
                    ae:e2:d5:b8:08:21:98:6b:d6:50:4a:b4:ba:c7:f9:
                    dd:c6:a9:e0:ab:d0:d3:e6:5f:18:86:a0:66:2a:00:
                    58:b9:81:e8:4e:6e:a9:b7:59:2e:78:ff:00:9e:48:
                    43:38:a7:65:f1:c7:35:e7:8b:3b:26:1f:0d:99:5c:
                    86:6c:09:fd:68:0a:80:c7:fc:82:2c:4e:37:f6:77:
                    f5:2f:dc:8f:d8:24:e2:48:66:6c:86:1f:df:31:41:
                    3a:5b:62:41:6e:b4:0e:01:98:9c:a4:22:64:d4:66:
                    ec:90:a2:cd:e8:bd:9a:72:e2:34:b6:7a:4d:9f:1d:
                    9b:59:c6:f9:43:be:21:f4:3d:6a:05:6b:2d:bb:9c:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:F7:D5:5B:38:DB:5A:27:53:AE:4E:F0:35:F3:9B:86:47:EE:E1
            X509v3 Authority Key Identifier:
                keyid:1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4c:c9:d7:81:98:19:4e:11:cb:37:28:ee:eb:62:ee:13:0e:
         4e:80:68:db:01:ef:d5:54:f4:35:c8:e2:f1:21:33:2f:2a:c2:
         4e:6c:b5:de:f4:a7:d5:fc:25:f7:22:cd:c4:ff:87:33:7a:fc:
         ef:68:ac:0d:6b:ff:5b:01:09:ee:de:4e:b4:9f:f2:b1:ca:0a:
         43:e6:53:6d:6a:28:78:02:0f:53:2f:3c:c7:a4:0b:81:e2:44:
         23:bd:bf:fe:8a:92:61:87:1e:17:eb:43:00:45:59:9f:2b:eb:
         7d:26:03:c7:de:53:54:06:b2:25:e2:04:da:9d:cc:bf:61:8b:
         21:46:48:1b:14:2d:3c:d0:ec:b1:ea:7d:2a:40:04:d6:3b:c3:
         f5:a1:d8:05:1b:34:75:a2:24:e3:1f:fc:71:2d:1c:b9:ab:78:
         62:2b:dd:cc:2a:91:e3:c1:ad:10:2f:78:c9:71:b0:00:0d:de:
         bc:a8:64:21:bc:6b:22:c4:6b:57:19:9a:6f:45:95:47:c2:06:
         22:83:f1:e6:75:c6:21:89:c4:d3:68:53:4e:ae:ae:5a:47:d1:
         11:fb:fd:81:ff:f1:80:53:63:9f:e5:24:e9:0e:7f:1b:32:e9:
         4b:0f:c1:9c:c5:3e:e6:ca:6d:7b:8a:b8:70:c0:2c:54:f1:1d:
         9d:e3:36:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQ24Ms2uPTBqDHSli54skEM+uSZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUExMEEyRUQ1MkZDNDg1N0FCQ0E1NkExNDg5NjAyQzEw
OUQ0NjgxNDAeFw0yNjAxMDYwMjQ1NThaFw0yNjAxMDcxNjEyNThaMDMxMTAvBgNV
BAMTKDRGOERGN0Q1NUIzOERCNUEyNzUzQUU0RUYwMzVGMzlCODY0N0VFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhI5oEnY+XpCRY0oJRzpzUeKC
UW5rMcveYZlnQl6AQKfhcbDjd8ZkRDcb0JZ5/lL3EGVz797D/FzNZ/yPVSr8geu2
9R8k+fxtiuZHv3wQnhX7SUpdhqdAfiszR9YQWIKX3SPfVwWdfA3eE2TOtMhtOBQB
onjGXq7i1bgIIZhr1lBKtLrH+d3GqeCr0NPmXxiGoGYqAFi5gehObqm3WS54/wCe
SEM4p2XxxzXnizsmHw2ZXIZsCf1oCoDH/IIsTjf2d/Uv3I/YJOJIZmyGH98xQTpb
YkFutA4BmJykImTUZuyQos3ovZpy4jS2ek2fHZtZxvlDviH0PWoFay27nHBXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUT4331Vs421onU65O8DXzm4ZH7uEwHwYDVR0j
BBgwFoAUGhCi7VL8SFerylahSJYCwQnUaBQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQ
cm0vMS8xQTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMTBBMkVENTJGQzQ4NTdB
QkNBNTZBMTQ4OTYwMkMxMDlENDY4MTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQcm0vMS8x
QTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAokzJ14GYGU4Ryzco7uti7hMOToBo2wHv1VT0Ncji8SEzLyrCTmy13vSn1fwl
9yLNxP+HM3r872isDWv/WwEJ7t5OtJ/yscoKQ+ZTbWooeAIPUy88x6QLgeJEI72/
/oqSYYceF+tDAEVZnyvrfSYDx95TVAayJeIE2p3Mv2GLIUZIGxQtPNDssep9KkAE
1jvD9aHYBRs0daIk4x/8cS0cuat4YivdzCqR48GtEC94yXGwAA3evKhkIbxrIsRr
Vxmab0WVR8IGIoPx5nXGIYnE02hTTq6uWkfREfv9gf/xgFNjn+Uk6Q5/GzLpSw/B
nMU+5spte4q4cMAsVPEdneM2vA==
-----END CERTIFICATE-----
Generated at Wed Jan 7 02:40:06 2026 by rpki-client