This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
File:                     98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json)
Hash identifier:          YN9hq+BmyZYwZtOUoDGexxzQe50Ie71t1oMQtTMARhY=
Subject key identifier:   D2:E1:CD:D7:18:03:6A:3B:E2:AC:5A:A2:10:BD:42:6A:1B:AE:43:EF
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       0A6E964A5487F300F17D7BD363CFAC743D9BB0B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
Manifest number:          0359
Signing time:             Mon 12 Jan 2026 02:03:05 +0000
Manifest this update:     Mon 12 Jan 2026 01:58:05 +0000
Manifest next update:     Tue 13 Jan 2026 05:23:05 +0000
Files and hashes:         1: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: xYKUjGDvB4ohftGmPkBCTmPGZBuO+nqUhKkaIhxMrJg=)
                          2: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: Kun2CCgPn8Q+q8HC0X//kGwa1c8M6wEv2En3ue4bLs0=)
                          3: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: ZGz/qxMNOnn8ZRQqWAjpD7CsiHW3hsbP55xHl3KH4L0=)
                          4: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: oxjQRGVdgBIIIUSH26/VmV6NbSjuLnOQbtY6pEUcqrk=)
                          5: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: Gi4bx+3QEGdye50jJ8S4PtQldaI/3yqrb+C+ub6WW5k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Jan 2026 05:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6e:96:4a:54:87:f3:00:f1:7d:7b:d3:63:cf:ac:74:3d:9b:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Jan 12 01:58:05 2026 GMT
            Not After : Jan 13 05:23:05 2026 GMT
        Subject: CN=D2E1CDD718036A3BE2AC5AA210BD426A1BAE43EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:3d:80:71:5a:8a:7d:b8:ad:a1:13:8f:73:
                    a1:90:5d:a0:1f:35:c1:f0:0d:67:46:6f:98:37:5e:
                    d3:dc:b1:48:2b:3f:9f:b0:9b:66:70:eb:18:ab:0d:
                    7f:f8:16:c6:60:e2:47:85:c5:98:3e:7f:4c:8e:ca:
                    18:2c:8f:5e:0d:fb:3d:5f:a7:e2:f1:47:a2:32:60:
                    a6:01:ad:ff:61:b7:50:d0:47:85:17:9d:45:3a:9a:
                    1e:65:c2:a8:3b:0e:74:83:d5:1c:cf:d5:7f:22:38:
                    9b:0b:43:5f:c5:cd:cd:39:19:7e:40:42:38:9d:ab:
                    3b:03:9f:9a:a7:cc:ed:70:3b:9f:1d:83:f5:cd:72:
                    61:99:4f:ea:62:16:5a:9c:07:f7:19:f3:8b:20:e9:
                    ec:aa:56:18:9b:3b:ef:1e:34:bc:2f:70:de:b6:78:
                    75:2e:56:4e:ea:17:73:0c:94:6c:c6:e2:5e:02:6a:
                    f2:d5:6c:d0:4a:1f:fc:19:f7:90:55:c5:05:ab:cb:
                    24:39:ac:ea:bd:9b:4c:73:ce:a9:94:d5:5b:10:4b:
                    0f:97:d4:39:be:10:6d:96:ab:bc:4f:29:38:a2:8e:
                    b7:78:2f:77:89:62:5f:db:41:92:5f:f9:ca:a5:de:
                    7f:8c:7b:bd:c8:31:73:ab:5f:8d:14:c3:51:e1:f9:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E1:CD:D7:18:03:6A:3B:E2:AC:5A:A2:10:BD:42:6A:1B:AE:43:EF
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:c7:08:83:c6:54:ac:70:7e:92:90:93:ce:23:ef:aa:46:
         c6:ed:81:3f:ad:95:c3:c7:26:c9:35:01:f7:29:de:28:f1:97:
         a4:92:d1:c8:c1:dd:74:e3:7e:10:16:06:ee:5a:77:bb:5c:7b:
         4d:11:a4:7d:43:f8:94:ec:05:fc:e4:ab:53:92:b4:d1:9a:c3:
         d1:d9:22:cc:5a:fa:97:e2:57:d6:9b:6c:d1:92:9b:96:41:ac:
         cd:8b:f1:38:9c:f6:df:55:8e:69:7c:b9:c9:b8:4c:e3:55:67:
         42:c7:ad:b0:b9:ad:92:f7:fb:32:f1:b8:1d:83:82:f5:ae:af:
         cc:ec:1f:00:26:d4:5d:ae:49:34:d7:1a:42:bd:9c:af:5c:ae:
         8f:7d:ba:ed:e7:dd:9d:8b:ad:37:16:4b:59:91:5b:33:4a:f7:
         3d:26:4f:71:b0:24:7d:01:c8:ba:b6:9c:12:2d:86:42:a3:64:
         c2:1b:31:3a:6c:7a:21:03:b2:6c:a7:76:d5:d3:4c:9d:5b:64:
         1a:d2:8c:c0:83:f7:b9:ed:e2:8c:e5:68:5d:d5:ff:0c:d2:33:
         8b:41:2b:70:cc:ee:74:bb:48:ce:d8:b0:f5:71:16:fb:87:1c:
         03:2a:1f:27:e5:7e:23:6a:25:44:db:ce:fe:49:5f:99:cb:9e:
         58:e1:4f:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUCm6WSlSH8wDxfXvTY8+sdD2bsLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThENzA3REEwRjZENzIxQ0E5MDU2QUUwQjcxMjZFREQy
MTRBRDdENTAeFw0yNjAxMTIwMTU4MDVaFw0yNjAxMTMwNTIzMDVaMDMxMTAvBgNV
BAMTKEQyRTFDREQ3MTgwMzZBM0JFMkFDNUFBMjEwQkQ0MjZBMUJBRTQzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtj2AcVqKfbitoROPc6GQXaAf
NcHwDWdGb5g3XtPcsUgrP5+wm2Zw6xirDX/4FsZg4keFxZg+f0yOyhgsj14N+z1f
p+LxR6IyYKYBrf9ht1DQR4UXnUU6mh5lwqg7DnSD1RzP1X8iOJsLQ1/Fzc05GX5A
QjidqzsDn5qnzO1wO58dg/XNcmGZT+piFlqcB/cZ84sg6eyqVhibO+8eNLwvcN62
eHUuVk7qF3MMlGzG4l4CavLVbNBKH/wZ95BVxQWryyQ5rOq9m0xzzqmU1VsQSw+X
1Dm+EG2Wq7xPKTiijrd4L3eJYl/bQZJf+cql3n+Me73IMXOrX40Uw1Hh+QnXAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0uHN1xgDajvirFqiEL1CahuuQ+8wHwYDVR0j
BBgwFoAUmNcH2g9tchypBWrgtxJu3SFK19UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn
U00vMS85OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RDcwN0RBMEY2RDcyMUNB
OTA1NkFFMEI3MTI2RUREMjE0QUQ3RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMS85
OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG63HCIPGVKxwfpKQk84j76pGxu2BP62Vw8cmyTUB9yneKPGXpJLRyMHddON+
EBYG7lp3u1x7TRGkfUP4lOwF/OSrU5K00ZrD0dkizFr6l+JX1pts0ZKblkGszYvx
OJz231WOaXy5ybhM41VnQsetsLmtkvf7MvG4HYOC9a6vzOwfACbUXa5JNNcaQr2c
r1yuj3267efdnYutNxZLWZFbM0r3PSZPcbAkfQHIuracEi2GQqNkwhsxOmx6IQOy
bKd21dNMnVtkGtKMwIP3ue3ijOVoXdX/DNIzi0ErcMzudLtIztiw9XEW+4ccAyof
J+V+I2olRNvO/klfmcueWOFPbw==
-----END CERTIFICATE-----
Generated at Mon Jan 12 09:10:11 2026 by rpki-client