This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
File:                     86B2810A6C4EB421987C3396698910082BEA85F9.mft (raw, json)
Hash identifier:          ynhRzLx9Oum/uqWOvyMekSYxSHG0w5v1eejcg1nh5C8=
Subject key identifier:   BE:6A:92:55:94:D1:7C:A5:45:40:0B:B8:B2:34:89:4E:C4:63:6F:EF
Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9
Certificate issuer:       /CN=86B2810A6C4EB421987C3396698910082BEA85F9
Certificate serial:       51437CCF0E9E59E4BD3DD319B66F22FEA3A320E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
Manifest number:          A7
Signing time:             Tue 23 Dec 2025 04:45:59 +0000
Manifest this update:     Tue 23 Dec 2025 04:40:59 +0000
Manifest next update:     Wed 24 Dec 2025 05:26:59 +0000
Files and hashes:         1: 323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa (hash: AEKRQ/5XfHq7feFa23x6BNuywuCE4831EZnSnQ1ej9g=)
                          2: 323830343a353134633a3a2f33322d3332203d3e20323638343434.roa (hash: MkNwHyBeHjjx6MrP4jlNocS//YBZt/fyVgQGGoUV9W8=)
                          3: 323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa (hash: WM24ggMzIvL1akgaP6TBXJL88cMabi0mQ4JHzGJT/kQ=)
                          4: 86B2810A6C4EB421987C3396698910082BEA85F9.crl (hash: G3ywYpCvMW3OVlELlbuPhdvCzNIpsmtNd/oquclVTt8=)
                          5: 34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (hash: 1YqklDYP/n1RZgRlYx1W7MOZlkN40BrMgtxRYCtmFUc=)
                          6: 34352e3136312e36362e302f32342d3234203d3e20323638343434.roa (hash: ItEyvd0bBA6hnfxLg9xzL3gGae4YFWM05KJfBAFfRCA=)
                          7: 34352e3136312e36352e302f32342d3234203d3e20323638343434.roa (hash: 7voV/3P555pp8E4DYMA5jgT8xfe9H+nHMPMTXozVC4c=)
                          8: 34352e3136312e36372e302f32342d3234203d3e20323638343434.roa (hash: 0egYk00yhfNAsWtX77B7UJzjpdWYJzXm9OxeJpA2exg=)
                          9: 323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (hash: 0tKT0hmw4ukQ0+/EyfsQekM38ZKvZKpvXHeczBv3RtU=)
                          10: 323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa (hash: 4mt7dYfRonQTs8kzD6Da1koeoE+EpGvEsW9spYMZ1H4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 05:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:43:7c:cf:0e:9e:59:e4:bd:3d:d3:19:b6:6f:22:fe:a3:a3:20:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9
        Validity
            Not Before: Dec 23 04:40:59 2025 GMT
            Not After : Dec 24 05:26:59 2025 GMT
        Subject: CN=BE6A925594D17CA545400BB8B234894EC4636FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:ca:59:ec:ba:1b:17:04:5c:09:e1:53:5d:
                    9c:b8:57:ff:18:0f:4a:b7:0c:79:70:69:7a:6a:d8:
                    2b:0f:33:70:d9:48:45:78:57:1f:6c:1f:7c:16:07:
                    b4:2e:f8:2d:40:fd:83:88:b7:ea:ed:f6:f4:4d:d3:
                    eb:ca:37:69:ef:b1:f1:70:d2:31:bd:4b:e7:fc:c8:
                    34:6d:0b:00:5a:f2:ab:8e:9b:77:d4:6b:86:d3:d7:
                    fc:c2:70:38:65:85:ee:cd:08:b6:be:fb:07:63:1b:
                    44:45:c3:d9:6b:45:36:ca:0c:eb:69:bc:71:e3:1f:
                    ee:c5:f6:f0:6d:1b:f1:d1:75:52:5e:22:fb:fa:cf:
                    3f:f2:58:cc:af:c5:57:a8:04:69:b6:00:01:4f:38:
                    c4:24:12:03:be:cc:bc:d2:27:32:44:4e:92:3a:91:
                    73:2f:4b:01:d3:24:10:c4:3f:05:4a:fb:a3:79:8c:
                    aa:85:27:63:f6:57:eb:94:43:cb:1e:07:7e:94:73:
                    b7:e2:13:f1:13:22:80:69:2d:93:a0:a6:98:61:76:
                    7b:f4:49:6d:92:88:04:a8:76:c6:f6:36:6c:fa:5d:
                    d8:cd:b1:3a:6d:1d:6b:5d:7c:d7:a7:87:d1:c4:8a:
                    e5:57:37:d0:a1:7d:95:b6:96:b7:fd:a2:36:19:d9:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:92:55:94:D1:7C:A5:45:40:0B:B8:B2:34:89:4E:C4:63:6F:EF
            X509v3 Authority Key Identifier:
                keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:10:eb:7c:1d:82:b7:2a:53:da:54:90:6c:b5:cf:50:08:1f:
         52:e0:f4:e0:ac:17:04:34:1b:6a:f2:56:f6:d0:a6:39:b6:19:
         98:aa:ee:c0:c4:8a:d7:4a:af:85:2b:a8:b7:60:86:1d:14:b3:
         3b:ef:24:de:94:17:ca:b8:df:b2:34:26:1b:f2:57:c8:8c:5f:
         c7:21:8a:bc:0a:24:39:dd:dd:4e:83:f3:ce:d3:97:fa:8b:e8:
         8a:2d:6c:24:63:77:0e:47:6b:8f:c8:c3:ac:ae:77:89:7a:65:
         87:25:4f:a0:c3:69:b1:22:78:8f:80:6a:b4:e4:bc:1c:01:41:
         4f:19:bc:67:b0:a0:9c:9f:e8:e2:0d:73:7c:82:d4:3c:a0:54:
         46:a5:e6:f3:f9:f0:d0:20:68:1e:77:1d:37:af:0c:df:51:d2:
         11:36:2b:20:4c:8f:83:ff:d8:c0:79:e5:63:d8:65:3b:f8:60:
         4a:d7:97:79:1a:06:2a:da:30:f7:21:b5:fd:04:1d:b0:9b:7a:
         9e:07:5e:60:98:02:24:38:e5:2e:c0:6f:af:3d:0f:f4:3a:34:
         49:84:63:0d:19:b4:0f:20:28:2d:a7:a8:c9:ec:35:77:49:d3:
         33:23:25:15:4e:7b:66:f8:df:bf:a9:8a:29:c5:15:2f:d6:23:
         77:2e:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:42:03 2025 by rpki-client