This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
File:                     F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft (raw, json)
Hash identifier:          s4HD9yYJ8ku1Cgej8b49uiAR6blCfe9G4cCUHHGhzzE=
Subject key identifier:   86:56:16:8E:BB:57:C0:18:DE:3D:83:48:89:98:71:3D:1F:88:68:BE
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       7E6C62BCF5C3A426F3BA54B9175C6E5A19E63BBF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
Manifest number:          028B
Signing time:             Tue 23 Dec 2025 02:57:26 +0000
Manifest this update:     Tue 23 Dec 2025 02:52:26 +0000
Manifest next update:     Wed 24 Dec 2025 06:07:26 +0000
Files and hashes:         1: AS28220.roa (hash: KOqAwMAkBcUkJijgOCDySGeaV/MKyiJbpj0XfSkCeJc=)
                          2: F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl (hash: R8C9diW6RD/IV0nlEn8dDH4BH7qIuSATOoL62+Ngd38=)
                          3: AS65421.roa (hash: 7Vbeor9m6+dzt12Qpm3uCT7kahvrt4HBovBC5ZDDDd4=)
                          4: AS53224.roa (hash: OJqA0lZpH+T3qq0CkGXdAQI1pCzajmI6h/xqXRgSt/Q=)
                          5: AS262726.roa (hash: qITL8Gn3VDSA6aoF+PRgXmMC9uKDklviECGzSSdOHrQ=)
                          6: AS53054.roa (hash: tBVOE5N/dng+wg40JTvvEkVEVH+V6P707fgE4QZEmFA=)
                          7: AS53059.roa (hash: s+LmQbhopeP1NjqUoYdepm9wJK8I7ZUZSHAnD+AnSHE=)
                          8: AS264352.roa (hash: PNkz6krXGkO5/xDFMTb0JCPbyeLANaEk+g1yCS2a5oE=)
                          9: AS262493.roa (hash: ZhmzsiFfQgQjm4qOgTsB6Hacn5+bSGAoYc4dphEju5w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 05:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6c:62:bc:f5:c3:a4:26:f3:ba:54:b9:17:5c:6e:5a:19:e6:3b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Dec 23 02:52:26 2025 GMT
            Not After : Dec 24 06:07:26 2025 GMT
        Subject: CN=8656168EBB57C018DE3D83488998713D1F8868BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:62:28:71:69:62:7a:ef:1e:7e:ed:9b:74:
                    22:c1:ac:88:56:16:2d:a3:6b:e8:8e:66:a7:b0:f0:
                    f4:cf:ea:5f:15:a1:36:b9:4a:1c:1b:aa:53:90:36:
                    f8:f2:99:08:d1:f4:bb:38:0f:53:34:1b:58:9d:53:
                    a8:0b:40:3b:6a:2b:4c:e9:cb:e1:91:72:9b:48:55:
                    a4:06:e0:74:4b:df:52:17:d8:0b:f0:b2:47:d7:b2:
                    11:8c:f4:50:d3:3e:ad:09:f0:ee:78:19:55:3d:ee:
                    4f:a9:62:21:82:89:a9:93:d4:1f:c5:a6:68:4d:d2:
                    b5:cd:51:f6:c3:69:53:95:4a:8f:23:61:1b:1d:04:
                    be:7f:56:d9:49:fa:5d:d0:40:17:cd:98:64:c7:26:
                    1f:63:e5:c0:21:4b:4a:8e:5e:74:46:88:95:58:56:
                    aa:a2:2b:f2:9a:99:55:09:71:3a:df:55:48:f5:ae:
                    04:f9:02:7a:fe:4c:cd:45:8d:18:7b:54:70:f0:dc:
                    c7:61:e6:40:b2:49:2b:30:97:b5:63:cb:4c:91:fa:
                    c7:93:de:8c:f2:41:b8:89:0a:d4:7a:8d:f8:a0:f2:
                    ec:35:e1:51:77:de:f9:c8:0f:8e:c2:8b:b7:72:8a:
                    a8:2d:50:74:3b:5a:d9:98:64:38:d1:ae:9d:57:1e:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:16:8E:BB:57:C0:18:DE:3D:83:48:89:98:71:3D:1F:88:68:BE
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:0b:84:16:bb:dd:f0:02:e0:3c:27:04:5e:6c:62:6c:bd:
         31:b6:6b:4f:88:1a:fa:14:9b:1b:4f:40:d6:4f:cd:3f:94:7c:
         78:80:14:42:b0:0f:ad:cf:b3:46:1d:79:89:f8:39:c0:2c:92:
         8b:45:09:58:5a:a7:d2:6b:ab:9e:aa:5d:60:97:f2:57:b9:52:
         23:ec:f6:42:65:3e:e6:f1:30:eb:a0:af:1b:7f:29:a0:ef:e2:
         76:a3:46:ce:f5:3f:5f:f1:a6:1a:54:14:9f:e8:4d:37:aa:43:
         b2:bf:13:c8:6a:e4:51:6c:ae:d7:44:d3:b5:60:a7:1c:2a:39:
         42:02:43:23:00:e7:3b:89:2d:58:66:47:39:13:e6:a2:cf:ca:
         ca:60:53:da:a2:c6:2c:38:99:4f:85:1d:a7:ef:f5:42:fc:42:
         fe:33:d4:11:67:0a:2a:ed:99:e3:e6:b7:60:e1:04:32:d6:49:
         d3:12:6e:8e:57:d2:98:fd:81:8c:ff:d1:bf:fc:4e:b5:b2:56:
         13:9e:8f:61:40:0f:d8:d4:f1:f7:b0:5b:c3:c7:30:ca:b7:55:
         ab:35:02:d6:31:b6:78:9a:c4:f8:6e:0b:44:32:d5:41:31:64:
         32:93:1d:33:5a:3c:6e:15:6e:85:87:8a:39:1c:95:3d:35:03:
         73:c2:7e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:49:38 2025 by rpki-client