This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
File:                     450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft (raw, json)
Hash identifier:          GUHoxIaGPtXf08+rR/OI87JTe1T1/6OPkSZe9n9DtUQ=
Subject key identifier:   43:EF:BF:55:02:8E:87:54:0B:50:CE:89:2A:1D:B4:5F:C9:20:DF:05
Authority key identifier: 45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC
Certificate issuer:       /CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
Certificate serial:       550CFAF3B87FFF03248CA920AB64A07397FE3F7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
Manifest number:          6A
Signing time:             Sun 21 Dec 2025 02:30:12 +0000
Manifest this update:     Sun 21 Dec 2025 02:25:12 +0000
Manifest next update:     Mon 22 Dec 2025 06:17:12 +0000
Files and hashes:         1: 3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (hash: tQ97S/LOOBJPJH2AEpMOqy2aqQUoxhnzkj2Y2XdGSKw=)
                          2: 450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl (hash: 9HlbjCCKnRBmyJVOcw+DthLQHETQjkMqGp4KOVkFu2w=)
                          3: 3137372e33392e32342e302f32322d3234203d3e20323632333734.roa (hash: 5T505e0WtJeMa6Sqv42pnWvzQiCmuH/7n9r6auOBpyo=)
                          4: 3137372e3132382e3136302e302f32312d3234203d3e20323632333734.roa (hash: 3oAiuYhvJ+DZt7xofUUV3n0WqVXHrbVIja37AnR0sW0=)
                          5: 3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (hash: SvGAQOD11AFblWetR1z0WTg7tw0PTIOEidfipkYQZYE=)
                          6: 323830343a3837383a3a2f33322d3434203d3e20323632333734.roa (hash: 9Dq+ESk7qJpc9J5Drs5Ga5hnUi1YKQ5wXr9Vd+jr/9E=)
                          7: 3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (hash: F4wF79VzpTSpTG5Ug/Cjn1KAMwa5cjJMX/Jh95YL4r8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 06:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0c:fa:f3:b8:7f:ff:03:24:8c:a9:20:ab:64:a0:73:97:fe:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
        Validity
            Not Before: Dec 21 02:25:12 2025 GMT
            Not After : Dec 22 06:17:12 2025 GMT
        Subject: CN=43EFBF55028E87540B50CE892A1DB45FC920DF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e8:84:3d:87:45:94:a0:77:19:54:c1:98:85:
                    5f:8d:35:5a:2c:20:7a:2b:83:8c:45:a8:dc:29:8d:
                    de:e0:4c:6b:45:c9:b7:08:31:d3:6c:c5:0c:79:36:
                    f4:a8:08:87:07:11:18:22:70:7f:0c:7c:58:e6:02:
                    60:3d:d9:dd:0a:a1:8b:56:42:d4:04:a0:f1:5d:aa:
                    9d:fb:7a:cb:52:4a:76:21:58:a1:66:c2:aa:ff:b6:
                    27:f1:6a:8b:47:64:00:fd:74:11:a4:4f:81:07:92:
                    50:b8:95:9c:41:06:dc:3c:03:d3:45:8b:40:9e:a9:
                    74:a5:43:78:b3:a8:77:8b:32:e2:56:bc:b9:64:cd:
                    97:b0:d8:16:ce:e6:59:6d:c4:29:e0:89:9b:14:8d:
                    64:0b:dc:ac:9c:27:52:68:61:50:a5:30:69:7d:5b:
                    8d:39:11:1d:bb:fd:48:63:0c:6c:ff:7e:64:2a:d7:
                    c9:4c:01:0b:af:b8:ca:75:41:b0:9b:be:4b:c1:a1:
                    55:b6:4d:cd:cf:ed:c1:01:9b:8e:85:f4:d7:b8:64:
                    df:2b:e8:27:6d:ea:29:b6:3a:1d:b5:a5:e5:77:17:
                    7f:c2:44:47:f6:3b:dc:57:b5:96:bf:67:62:6f:7a:
                    d7:e8:31:05:73:f1:5e:9b:89:68:ca:17:3d:21:cd:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:BF:55:02:8E:87:54:0B:50:CE:89:2A:1D:B4:5F:C9:20:DF:05
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:0f:4f:69:35:4f:b7:ac:42:d0:cf:c2:ac:30:05:27:69:
         5a:c9:48:c5:3d:3d:2b:c0:42:9e:68:40:a9:ee:34:fc:f0:bf:
         b4:79:b7:0f:4c:e1:9f:93:e9:2a:b9:76:47:b5:14:00:27:1a:
         cb:2d:58:03:be:98:2c:44:d9:53:fd:70:01:a8:a4:8c:9b:57:
         74:5c:f0:5a:4d:84:51:74:e5:cc:c5:a7:cb:9d:ba:65:e0:2e:
         2a:7b:6f:15:d2:77:0d:a4:e5:0c:9d:9c:a7:d3:0c:7f:19:6f:
         d2:11:c4:41:18:ac:7b:1e:3d:69:3e:72:36:82:a9:0a:32:9e:
         7b:9f:dc:9a:a6:ab:25:33:2d:de:20:b2:f4:c0:3f:f9:c1:d3:
         f0:1a:25:e1:1f:96:35:9b:2a:dc:b9:cd:f0:3c:53:d8:05:04:
         80:ab:71:19:7b:bb:0b:aa:2b:eb:ca:76:3e:cd:f7:ef:35:39:
         c8:19:f8:46:84:f0:7a:0e:38:7a:64:72:71:61:20:b4:cc:6e:
         c4:52:a9:cc:c4:ba:fb:e3:4a:0e:2f:90:8e:d1:f0:d0:44:31:
         40:69:9f:96:ce:24:75:21:06:26:f1:65:21:d5:f4:2e:d2:1a:
         b7:47:2e:ec:c0:65:31:7f:49:d4:0b:d8:92:83:98:56:fd:f8:
         67:55:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:00:16 2025 by rpki-client