This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
File:                     5A04500F2CCC3AD327B65C082F00942A95A22666.mft (raw, json)
Hash identifier:          9FpKNbGy1ZeKnpfdTwEVR5en/1A/hk78zkExPQSoyjc=
Subject key identifier:   92:50:47:AE:39:65:C1:F7:73:0D:99:87:E4:94:95:A6:9B:BA:94:0C
Authority key identifier: 5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66
Certificate issuer:       /CN=5A04500F2CCC3AD327B65C082F00942A95A22666
Certificate serial:       6CF069D20A9E0D1B81E2FF1886BA2F950A42A65F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
Manifest number:          22
Signing time:             Fri 19 Dec 2025 04:09:19 +0000
Manifest this update:     Fri 19 Dec 2025 04:04:19 +0000
Manifest next update:     Sat 20 Dec 2025 06:49:19 +0000
Files and hashes:         1: 3133312e3130382e36342e302f32322d3232203d3e203631363830.roa (hash: reustH0IN5Jvtd0mkq9tZiJS+VJ3xGKKbbgtRnG73+A=)
                          2: 323830343a316365303a3a2f33322d3332203d3e203631363830.roa (hash: tP1DxaWxNTnrv2iksiYlm6Hre5HJet9d9sM8h3bagdo=)
                          3: 3133312e3130382e36372e302f32342d3234203d3e203631363830.roa (hash: nisYoQyTzdv/1XgIi2TF6GlQWjZe1Y1WvN0U8JznDWU=)
                          4: 3133312e3130382e36352e302f32342d3234203d3e203631363830.roa (hash: Qdw93tl+TCbNykxLXfQHIoAWoQK/FSDMwkVFQNTk4IM=)
                          5: 5A04500F2CCC3AD327B65C082F00942A95A22666.crl (hash: 3U3BaDO9dhFcruHMGSk9TQpQe2U+H/gw0eTFG79vKz4=)
                          6: 3133312e3130382e36362e302f32342d3234203d3e203631363830.roa (hash: VMeY3+PxEzc0KZa1mg2jSREQplk9aK6QB1Uv/ggia00=)
                          7: 3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (hash: 2pwwpILl1hQZwjkbSJqlu7VIDtZ+6rER/b7eoVkwBiw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 06:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:69:d2:0a:9e:0d:1b:81:e2:ff:18:86:ba:2f:95:0a:42:a6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A04500F2CCC3AD327B65C082F00942A95A22666
        Validity
            Not Before: Dec 19 04:04:19 2025 GMT
            Not After : Dec 20 06:49:19 2025 GMT
        Subject: CN=925047AE3965C1F7730D9987E49495A69BBA940C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:9d:32:3e:8c:a9:28:13:0e:fa:ef:95:19:
                    c8:2f:11:72:8d:72:16:49:30:c0:6c:e3:a2:04:97:
                    fc:19:20:25:ca:11:58:78:a3:e7:e0:a6:8b:d0:b7:
                    d6:61:7b:a5:e5:65:75:91:f4:da:f7:79:50:bd:49:
                    d2:b1:e6:c8:c3:15:9c:17:42:1d:14:53:b5:64:03:
                    82:b5:c8:56:dd:02:08:68:b2:0a:ee:e9:61:06:ee:
                    41:77:3f:44:6a:b2:74:16:ba:8e:1a:d0:47:0f:85:
                    f1:c3:52:00:5a:1b:ef:16:b2:39:cf:e4:cf:64:83:
                    3e:d9:63:ad:e2:37:07:1a:ae:f7:4d:f4:0a:e0:72:
                    c3:37:7a:3d:20:9d:b2:4d:ac:3a:92:82:e8:10:4b:
                    9a:80:6d:74:16:cb:07:fb:1f:6e:9a:7b:cc:58:ab:
                    59:f6:28:1d:ff:ae:f4:89:bc:22:6b:50:4e:a0:99:
                    23:9b:ab:dc:87:18:6d:cc:bc:63:3b:33:6f:9a:3f:
                    b9:a3:ce:15:dd:dd:33:72:5d:e6:7a:21:b2:cf:de:
                    cf:5a:61:a8:b3:d5:e9:c4:88:d2:8e:43:ad:6c:2c:
                    b1:e2:68:5a:56:9c:50:41:ad:3f:d7:fa:4e:06:7d:
                    42:9f:f4:06:a4:65:31:3b:c9:17:e3:5a:0d:3a:67:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:50:47:AE:39:65:C1:F7:73:0D:99:87:E4:94:95:A6:9B:BA:94:0C
            X509v3 Authority Key Identifier:
                keyid:5A:04:50:0F:2C:CC:3A:D3:27:B6:5C:08:2F:00:94:2A:95:A2:26:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A04500F2CCC3AD327B65C082F00942A95A22666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/5A04500F2CCC3AD327B65C082F00942A95A22666.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f9:99:f8:f1:46:9f:f6:7c:54:27:1b:ee:62:3a:cc:ea:0b:
         b8:c1:72:28:ed:85:15:39:c3:c2:4e:23:bc:0a:b6:81:7b:1f:
         9b:0f:3c:e6:d2:6c:86:74:6a:6a:70:fe:77:5e:9e:67:16:d6:
         ba:75:bd:38:22:f5:60:98:84:91:3f:38:e2:95:0d:18:29:76:
         d1:35:cc:f3:b6:08:45:2a:c1:36:93:68:32:b3:77:a4:4a:a6:
         e4:74:2f:38:7a:57:92:52:d5:d5:bd:ec:fd:62:bc:1e:94:e3:
         d9:cd:ef:df:05:cb:ac:9e:36:52:ff:58:b5:7b:79:cb:c0:02:
         e3:a0:f4:1d:fc:a8:49:b9:2a:4a:08:48:b6:df:e4:ca:bc:81:
         16:f6:0a:e2:d5:25:bc:13:ac:cd:7d:f7:4d:06:73:1f:6c:d8:
         88:d1:1e:fe:e9:fc:63:98:da:9a:e1:02:64:17:f6:97:90:99:
         fb:9b:5e:c6:6d:df:0b:11:1a:e5:9b:44:63:b2:7e:92:7e:85:
         85:cd:32:fc:32:3a:da:2e:7f:56:f5:22:41:5e:7d:a9:11:59:
         e1:65:2f:eb:cc:12:79:dc:7a:bc:fd:b2:8f:69:5f:8c:13:8b:
         e6:12:45:16:44:9e:e3:cc:20:20:fe:06:91:19:ba:d5:06:26:
         50:2d:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:32:38 2025 by rpki-client