This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft
File:                     1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft (raw, json)
Hash identifier:          cBwzcgbiLcwtfcb07Jj2kqm1KE+19nkBx9WhWy1SscQ=
Subject key identifier:   3F:74:9F:E7:A6:6A:5E:7C:9F:5B:EC:14:0D:DD:A6:78:46:61:A4:58
Authority key identifier: 1A:69:4A:79:E3:F9:AD:8C:80:24:F5:A8:0C:4E:A8:97:9E:DA:27:B8
Certificate issuer:       /CN=1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8
Certificate serial:       4D893657C753A82D3A60A7323E0533DF53E6414B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft
Manifest number:          49
Signing time:             Fri 19 Dec 2025 22:24:06 +0000
Manifest this update:     Fri 19 Dec 2025 22:19:06 +0000
Manifest next update:     Sun 21 Dec 2025 01:50:06 +0000
Files and hashes:         1: 323830343a393064303a3a2f33322d313238203d3e203631363230.roa (hash: e5ogBCsJMNTEypsrkCBB6KJNBdFvGQBoi//pg4P57xo=)
                          2: 1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.crl (hash: d6rn4kt6ajhu3i+UhZZHySfLIbLqlGf99xwty0Xrajg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.crl
                          rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 01:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:89:36:57:c7:53:a8:2d:3a:60:a7:32:3e:05:33:df:53:e6:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8
        Validity
            Not Before: Dec 19 22:19:06 2025 GMT
            Not After : Dec 21 01:50:06 2025 GMT
        Subject: CN=3F749FE7A66A5E7C9F5BEC140DDDA6784661A458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:61:65:52:df:ae:49:0c:0f:42:50:7e:d3:cf:
                    46:d6:d5:f7:15:6e:2b:ce:9e:ea:36:ee:04:da:85:
                    9c:e0:1e:e9:f8:20:74:f8:52:cf:bf:68:a9:9f:23:
                    fa:40:c1:69:fc:34:a5:fe:3f:83:b4:9e:1a:70:f0:
                    79:e7:e1:74:45:10:3b:b3:60:cf:6d:90:3a:da:81:
                    e1:51:1d:90:6d:a7:fb:ae:ee:32:02:7d:08:7b:bf:
                    45:01:6f:a8:2a:6f:3c:e7:4c:7d:54:26:54:f0:9f:
                    33:57:53:60:7e:0b:8e:ef:58:4d:c8:87:ec:dd:a8:
                    ef:8f:5a:f4:34:56:66:d9:77:0b:4f:40:03:3f:f2:
                    d0:65:0a:c4:39:18:b3:38:84:db:1e:a7:5f:bd:cf:
                    6a:11:95:cb:4f:0f:77:2d:91:9c:83:59:e9:fb:62:
                    aa:d3:fd:cb:f0:aa:5b:0c:43:9d:9e:52:43:04:17:
                    85:94:3c:a1:1b:a0:84:b3:5c:4e:9f:9c:b6:0e:29:
                    d0:b6:b8:1c:41:f9:60:fb:ca:80:6c:aa:15:20:b8:
                    e3:c9:1f:16:9f:20:33:79:b4:71:88:e5:e4:0e:6e:
                    e9:b9:f7:f9:3c:bb:23:82:5f:aa:21:28:d3:92:fe:
                    25:68:f2:41:eb:29:25:be:fa:4c:bd:dc:0e:9d:8a:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:74:9F:E7:A6:6A:5E:7C:9F:5B:EC:14:0D:DD:A6:78:46:61:A4:58
            X509v3 Authority Key Identifier:
                keyid:1A:69:4A:79:E3:F9:AD:8C:80:24:F5:A8:0C:4E:A8:97:9E:DA:27:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgHBCnS2JPyEdADPkEd9g2iwU2NL4ZczqYLw2vYbkt3J/0/1A694A79E3F9AD8C8024F5A80C4EA8979EDA27B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:39:3d:cb:67:bd:b4:7b:83:63:82:a4:30:72:82:3c:1e:
         9d:40:b7:f0:2b:0e:ed:eb:4a:1e:8a:eb:dd:bd:7c:b0:a7:c3:
         c6:9c:62:b8:f0:f1:79:25:59:41:11:c3:a3:15:2b:10:22:c6:
         c0:bd:01:8d:f6:36:77:7d:9c:f9:5a:22:b4:69:82:6b:38:50:
         6c:19:2d:a7:cb:5c:ea:88:de:ab:9d:3a:5e:cd:a6:79:b0:a8:
         f1:14:ef:70:de:83:14:c1:c5:84:ca:ed:a2:de:12:c3:45:ac:
         6e:3c:4f:f9:c7:d8:92:44:c0:03:db:7a:b7:7e:33:68:31:ee:
         f9:e5:d0:3a:c4:dc:a0:34:06:72:7f:34:88:28:ab:8b:f1:1d:
         0b:ca:4b:62:e1:50:4b:47:57:ef:e9:8d:43:7b:7c:4a:e6:f1:
         40:be:48:7f:f1:c4:dd:96:bc:8a:31:10:d5:e4:77:36:11:f9:
         1b:46:4f:cb:3b:8d:67:a6:bb:81:6f:95:e1:c8:2f:48:ed:0b:
         bf:d4:f2:09:1a:1c:f7:31:f1:84:6f:52:ff:e0:73:24:18:6c:
         00:9f:59:27:d7:71:76:aa:d0:b6:7d:41:4a:0a:ce:00:58:99:
         aa:48:9f:f8:b1:15:0c:1b:7f:7b:ca:22:87:a9:37:e8:be:d9:
         f0:4e:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----