This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
File:                     8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft (raw, json)
Hash identifier:          QRt/DOdkAjTsHGXNy6CxVPA6KuL3uRNwdkkoLO+LbyA=
Subject key identifier:   DC:97:0E:D2:D7:D0:9F:D3:F1:1A:D9:C1:22:46:CF:8D:73:EC:64:60
Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF
Certificate issuer:       /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
Certificate serial:       3AFA0C8F876D3E2794E7A1F5A4C56ACA88F8E159
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
Manifest number:          033F
Signing time:             Thu 18 Dec 2025 16:03:47 +0000
Manifest this update:     Thu 18 Dec 2025 15:58:47 +0000
Manifest next update:     Fri 19 Dec 2025 19:46:47 +0000
Files and hashes:         1: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl (hash: i8I2nLusIrsaqVEI1teAdPzIP0c7+pbn14/xU9Hrlbw=)
                          2: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: SLEHFECRXQmMYbYlcQhzLdJpI1AWkv5FBYpLZmL4zfY=)
                          3: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: mZN4AszSQT36UMwFtHkIGpU8mMiqKNrNGykEzvf6hdU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl
                          rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 19:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fa:0c:8f:87:6d:3e:27:94:e7:a1:f5:a4:c5:6a:ca:88:f8:e1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
        Validity
            Not Before: Dec 18 15:58:47 2025 GMT
            Not After : Dec 19 19:46:47 2025 GMT
        Subject: CN=DC970ED2D7D09FD3F11AD9C12246CF8D73EC6460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:9a:f3:02:16:5b:ef:d2:e1:42:a0:5e:a2:
                    04:4a:b8:52:d9:0c:f8:5c:90:6f:f7:28:c7:62:3e:
                    9b:e9:e9:b1:89:cb:55:11:b5:b5:26:6e:36:8a:a2:
                    31:6d:97:b2:f4:de:ec:a6:7f:eb:fd:87:21:98:83:
                    a7:56:49:f2:25:44:35:0e:34:c2:5d:1b:a7:9a:67:
                    d0:6f:2d:78:00:b5:e7:bc:f5:ed:b4:99:62:93:8e:
                    fa:c6:1e:49:f4:72:93:17:02:05:07:52:fa:6d:b0:
                    fe:d9:15:6c:4a:5f:de:ce:79:42:76:98:29:b1:ca:
                    a2:b7:eb:5d:73:37:ea:f8:80:ca:82:40:cb:29:84:
                    ef:74:cb:75:d4:88:d5:92:32:22:c8:a6:99:ba:e0:
                    1f:27:f8:05:d5:b4:98:b6:5b:0f:d8:4a:2e:b2:60:
                    4e:8f:4b:20:95:b1:93:b6:cd:d9:e5:da:96:11:46:
                    9b:fe:28:88:6c:87:66:15:c5:18:57:2e:7a:99:3b:
                    df:4f:2f:aa:0a:47:2f:d4:f6:fc:8b:e4:4f:6e:ef:
                    51:e3:b1:37:e3:24:78:12:2d:b3:51:e3:04:a2:7e:
                    94:de:54:ac:65:93:d1:1e:80:3d:d7:5f:2e:35:bc:
                    fc:c0:63:8f:11:e2:ff:cf:01:19:f8:f1:83:95:17:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:0E:D2:D7:D0:9F:D3:F1:1A:D9:C1:22:46:CF:8D:73:EC:64:60
            X509v3 Authority Key Identifier:
                keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:16:ee:a2:85:38:59:d8:ee:5a:5a:4c:c5:9f:d3:de:e2:
         ad:25:59:0b:00:1f:7e:fb:d1:45:03:0f:51:df:fa:79:1c:d6:
         92:56:13:94:24:e4:23:1d:de:14:47:3e:a7:26:6f:f2:c3:4b:
         05:66:d9:bf:e1:c6:67:33:03:a9:4d:06:6d:47:6f:74:ec:47:
         d6:cb:6f:6a:67:a1:6f:bf:c8:25:d4:bc:87:87:22:94:ca:5a:
         24:23:73:8f:92:06:09:ef:af:ea:16:35:94:5c:44:19:19:b7:
         1c:1e:6e:f2:63:f1:34:be:c3:5e:23:de:8b:37:70:ae:93:5f:
         b8:c7:7b:ef:d2:f3:2a:34:b7:59:e3:53:14:de:a0:a2:e8:fc:
         0f:1e:f1:ee:2c:b0:94:ba:1b:08:99:61:c2:77:53:2e:c5:f8:
         d2:ef:6b:a7:18:03:b4:82:86:8d:15:f0:de:82:a0:bf:a9:7c:
         72:a9:1d:58:55:13:19:a6:eb:87:2d:36:57:fa:c7:3a:fb:99:
         77:37:a4:18:00:78:31:ca:c0:1c:8a:b7:79:72:fd:20:18:b4:
         6f:54:9f:2e:59:fb:9b:09:f7:31:9f:92:55:0d:d8:0a:08:80:
         a7:2f:24:e8:7a:26:73:79:ea:89:30:b3:9a:57:de:75:39:fb:
         48:46:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:59:57 2025 by rpki-client