This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
File:                     CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json)
Hash identifier:          KA+FgKG5VGhZMvY/49Oc5vLqaMXmdQTBuzzU7AQAahE=
Subject key identifier:   60:4B:89:E3:92:05:11:81:6E:BC:73:3F:5C:64:D4:4A:28:71:B8:37
Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D
Certificate issuer:       /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
Certificate serial:       0F6C15B707E898AE4CB8740EE769A9ACA75BFB07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 19:18:30 +0000
Manifest this update:     Fri 19 Dec 2025 19:13:30 +0000
Manifest next update:     Sat 20 Dec 2025 22:32:30 +0000
Files and hashes:         1: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=)
                          2: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=)
                          3: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: THykX7rJcXhwy2t25mt+K1DBQXw+/1KaLPkeh6I381o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl
                          rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6c:15:b7:07:e8:98:ae:4c:b8:74:0e:e7:69:a9:ac:a7:5b:fb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D
        Validity
            Not Before: Dec 19 19:13:30 2025 GMT
            Not After : Dec 20 22:32:30 2025 GMT
        Subject: CN=604B89E3920511816EBC733F5C64D44A2871B837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:69:9f:86:b6:9d:c8:bd:e8:d3:a0:3e:88:d7:
                    39:3e:2a:83:1e:0b:9f:05:43:e0:8f:9c:ee:d9:a4:
                    c4:4f:8d:1f:54:6c:93:c1:95:2e:e5:50:b2:ee:1c:
                    1d:8a:b8:46:be:92:1a:61:78:bc:15:98:d6:e0:91:
                    51:34:2a:f3:1a:73:2a:73:23:81:a5:23:f0:10:d7:
                    ab:e5:be:2c:f5:d6:fa:df:95:9a:64:b5:ee:b9:93:
                    11:3c:52:db:77:19:1e:78:ea:5b:41:62:bd:4d:18:
                    c4:42:cb:a5:1d:f1:2c:c9:da:1e:ca:34:3e:c3:59:
                    9a:d0:bc:8e:5d:f5:5d:95:a7:71:04:a4:51:4e:23:
                    8f:09:7c:d0:61:b8:1f:25:6c:1e:f3:f0:99:5c:16:
                    dd:08:49:b7:b6:14:1b:31:23:d5:69:61:18:9d:8b:
                    09:90:50:1b:c3:66:28:1a:e1:1c:19:a2:d2:0d:4d:
                    0d:93:d8:51:ab:32:7a:c6:d1:85:e6:59:20:57:ca:
                    13:b8:cd:cf:a8:9e:4a:ba:3b:c8:66:67:d5:3e:37:
                    27:68:b4:53:05:b0:86:16:42:b9:df:54:fa:7a:e2:
                    d2:f4:44:3f:c1:7e:b5:b6:ff:e4:e4:82:a0:d7:b5:
                    8a:d2:08:72:22:bc:b4:98:96:75:9f:be:fb:57:33:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:89:E3:92:05:11:81:6E:BC:73:3F:5C:64:D4:4A:28:71:B8:37
            X509v3 Authority Key Identifier:
                keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:c7:eb:fa:9a:9f:55:22:c1:95:7e:dc:eb:75:99:c0:cd:
         1f:10:38:85:8f:d7:a2:17:28:8d:c9:47:b6:78:7f:65:8c:83:
         28:24:51:fa:ae:bc:e5:1f:e8:bc:3e:2c:6e:ce:ae:15:06:c2:
         81:f3:e0:12:f2:c2:ab:73:0f:f0:b4:a5:3b:e1:a9:19:91:59:
         1b:b4:37:bf:bf:8a:b0:3c:fe:d5:ba:30:90:d0:73:dc:26:61:
         a7:61:f6:50:03:7e:42:a3:69:0d:75:15:61:0d:9b:42:74:23:
         de:32:3a:9c:ce:08:18:da:63:7d:8b:c2:91:77:b2:24:ce:e7:
         6e:94:b1:bc:4f:eb:ca:11:fc:03:60:d3:81:f6:16:02:e3:7f:
         76:8c:c0:e9:4b:ab:d6:ac:99:b4:dc:35:ef:57:3c:39:b0:c9:
         79:a6:c1:c8:ea:ce:77:dd:fa:58:18:65:ae:24:0a:38:cb:e7:
         89:3e:16:34:62:1c:ef:aa:49:46:81:9b:92:c2:09:a3:d8:1d:
         23:f2:bf:70:f8:c9:f8:5c:8a:c4:52:c1:84:2e:f0:a9:54:9b:
         99:84:c2:3d:eb:19:1c:61:7d:62:d9:6d:a1:53:e7:7d:fa:30:
         73:c9:81:3a:fb:a6:7f:b3:3c:be:21:c1:78:4f:71:69:dc:a9:
         83:fe:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:31:19 2025 by rpki-client