This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
File:                     CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft (raw, json)
Hash identifier:          TFN/aOl0kivrQ8FZNwIFhAsyI14EnStFPRNtVDvG4dE=
Subject key identifier:   BF:92:61:83:72:3B:51:AD:3A:A7:3F:6C:F0:20:95:4D:6D:AC:31:5E
Authority key identifier: CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3
Certificate issuer:       /CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
Certificate serial:       7301CC10A1F0CAAF24BF1569A03B77AEFDCFF057
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
Manifest number:          20
Signing time:             Fri 19 Dec 2025 20:06:54 +0000
Manifest this update:     Fri 19 Dec 2025 20:01:54 +0000
Manifest next update:     Sat 20 Dec 2025 22:57:54 +0000
Files and hashes:         1: CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl (hash: NXdTpMUzWlItZ1HMzg9e/F6ubUzfJxTD7ZjUm6aHORk=)
                          2: 3138392e3132362e342e302f32322d3332203d3e20323730333434.roa (hash: TWpMsUryptQu6Hi6KjgY8UHGV5Dc4mwwgB/z57TzmHE=)
                          3: 323830343a366139303a3a2f33322d313238203d3e20323730333434.roa (hash: i51l37KiQWwXtN+K1/iN3p/yRB7t5FE68ciQe18TlUs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl
                          rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:01:cc:10:a1:f0:ca:af:24:bf:15:69:a0:3b:77:ae:fd:cf:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3
        Validity
            Not Before: Dec 19 20:01:54 2025 GMT
            Not After : Dec 20 22:57:54 2025 GMT
        Subject: CN=BF926183723B51AD3AA73F6CF020954D6DAC315E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:a1:99:6b:9b:32:b4:e9:a6:2b:b6:88:ed:
                    87:74:48:76:3b:bf:7e:41:ac:a8:18:53:8f:25:99:
                    82:f4:3e:d7:62:8b:0b:30:a5:5a:f3:2d:18:80:76:
                    b0:19:31:0a:9e:b1:b6:ad:9d:80:d1:e5:6f:7c:b4:
                    19:74:3f:73:5a:8e:cd:cb:62:6f:d7:2a:63:ca:d1:
                    6b:b7:9a:73:4a:de:3c:03:64:ec:97:91:f9:57:9f:
                    c2:a8:02:7d:24:ec:86:40:49:2b:8e:3e:4a:b8:b4:
                    1f:fe:50:e7:75:af:90:83:30:48:a7:82:da:6a:06:
                    bb:79:3d:c9:1a:06:d5:22:55:3d:0f:12:69:2c:cd:
                    35:a7:ab:00:9b:96:f6:76:a0:d3:0f:f7:30:ea:8d:
                    da:af:36:77:65:ed:80:d1:f5:15:f4:c2:1a:79:ac:
                    b2:f0:d3:d8:94:1e:ed:45:94:6c:62:24:0f:58:ec:
                    98:20:e6:70:41:3b:7a:aa:3e:b7:e0:7d:1b:6d:37:
                    fe:e4:ca:20:f6:1b:fa:8b:52:e0:a0:1f:a2:8b:bb:
                    99:70:ab:18:36:92:68:c7:e9:f0:2c:99:8b:9e:58:
                    39:51:9d:9d:4a:89:6a:73:4f:ea:5b:5f:f5:d2:42:
                    c6:4b:82:a1:06:42:e6:47:2e:ad:15:77:a6:cf:de:
                    c4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:61:83:72:3B:51:AD:3A:A7:3F:6C:F0:20:95:4D:6D:AC:31:5E
            X509v3 Authority Key Identifier:
                keyid:CA:5D:3B:AC:C0:98:C7:9F:E5:F2:C9:97:3B:CD:EA:C5:AD:0C:53:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/0/CA5D3BACC098C79FE5F2C9973BCDEAC5AD0C53A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:b0:63:90:7f:c9:32:aa:33:fe:7f:e5:fa:d7:87:61:ba:
         af:b1:50:12:e4:d7:56:01:8b:64:4c:6f:75:82:27:e6:bc:4c:
         09:b7:2b:c6:b0:64:e6:2c:99:03:d6:4d:c1:0c:4e:ed:8e:41:
         59:3f:59:8f:b1:38:c1:06:77:5b:a2:2c:27:35:98:83:9b:d8:
         e8:c8:26:ed:8c:af:71:4d:37:31:1e:60:5e:d3:dc:de:9b:a8:
         39:65:d9:e1:5f:f2:d6:b3:9f:33:f8:c2:b0:e1:a9:d8:d8:e5:
         a8:e9:40:54:08:c7:cd:e5:c1:29:e8:9c:c0:e8:f1:33:e8:af:
         55:02:8e:da:c4:89:fd:95:4c:07:6f:2a:1c:17:c9:93:c1:d0:
         9e:3d:08:e7:d6:10:33:b0:b7:98:9c:15:70:ba:45:c9:15:cc:
         d2:a3:df:e1:9e:4a:88:a9:82:2b:dd:ec:f4:28:c4:9b:44:26:
         d5:ce:8b:40:a8:eb:51:74:75:4b:77:fc:b5:d1:5e:3a:8f:06:
         ce:20:b4:eb:65:c7:0e:5a:e1:2e:92:6e:2a:33:f3:bb:13:9e:
         e4:e7:d4:ff:86:1f:07:93:40:75:cd:32:16:6c:bc:f1:dc:2e:
         f7:f3:3d:eb:2b:49:12:e8:1f:ae:b1:42:10:74:f8:85:bd:9d:
         02:e9:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:11:51 2025 by rpki-client