This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft
File:                     5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft (raw, json)
Hash identifier:          /v5QlUtwKFhE1NL76ZKDV8HOG2Is6H6d6WUZKovmju4=
Subject key identifier:   2A:8E:3B:93:DC:C8:2D:8C:DF:7E:88:B7:81:BD:A1:CB:08:C7:9E:1C
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Certificate issuer:       /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial:       2005D4B469E20104A5A22B80800D2493F6BE4531
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft
Manifest number:          01AB
Signing time:             Sat 20 Dec 2025 08:18:13 +0000
Manifest this update:     Sat 20 Dec 2025 08:13:13 +0000
Manifest next update:     Sun 21 Dec 2025 09:38:13 +0000
Files and hashes:         1: 34352e3137342e3139362e302f32332d3233203d3e20323731353939.roa (hash: DiwH+PdG3Kq0yR9pzcVtVv7MCwDkI4Gcnsq+19N+wsY=)
                          2: 323830343a376530633a383030303a3a2f33332d3333203d3e20323731353939.roa (hash: a6Vm2RZYIvbtu0nkojFMKBQy+hlu+BV7uUAEePLvGxM=)
                          3: 34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa (hash: P3cl1CT/FH34XOiVOZ7o0V52ACoRBoI/nRAQ8J2ig8A=)
                          4: 323830343a376530633a3a2f33332d3333203d3e20323731353939.roa (hash: coyLRbiXsN6lFmy8hrqNw0thYONPiJXXT6wwdftgsIM=)
                          5: 34352e3137342e3139382e302f32342d3234203d3e20323731353939.roa (hash: 2vQcJ/bi+dTGEcoM4yiauzCzRcsO8gjXbQWo7eLBbcU=)
                          6: 34352e3137342e3139362e302f32342d3234203d3e20323731353939.roa (hash: sgIQjb+hCgY35iREFkkIJU1Nu3Fbe2h3HSfDOoXfmxo=)
                          7: 323830343a376530633a3a2f33322d3332203d3e20323731353939.roa (hash: Z2DkkJd2AK+QUSLve8hbICwqyDIYuiR3iqP9H6NOsk4=)
                          8: 34352e3137342e3139382e302f32332d3233203d3e20323731353939.roa (hash: XJC6sfvvpBpomocXGx+OkBu9xMFaPSijLoMEVDvLAEo=)
                          9: 34352e3137342e3139392e302f32342d3234203d3e20323731353939.roa (hash: Psgtq3wpQVly10/d/IGppksY7NCw0DwjUOAasNhL1D4=)
                          10: 34352e3137342e3139372e302f32342d3234203d3e20323731353939.roa (hash: K1tOXflEJib6YOTuVYZZJdmphTSoW/mMyIefRCgoEIM=)
                          11: 5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl (hash: TBNbQr7RBZ+sUDj6hVnT2bEp48kA+dLcG304TQQEGBQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 09:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:05:d4:b4:69:e2:01:04:a5:a2:2b:80:80:0d:24:93:f6:be:45:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
        Validity
            Not Before: Dec 20 08:13:13 2025 GMT
            Not After : Dec 21 09:38:13 2025 GMT
        Subject: CN=2A8E3B93DCC82D8CDF7E88B781BDA1CB08C79E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:e4:7a:7b:fe:e0:fe:77:a4:05:21:bb:62:
                    94:11:b2:7e:d7:0f:77:72:91:5b:2b:97:94:b5:cd:
                    c2:85:c1:55:55:d0:cb:6e:7c:d1:ca:16:3d:ce:68:
                    53:27:4d:11:0a:d6:62:57:4d:d1:b1:a5:d7:8c:bc:
                    b4:cd:b8:f7:03:14:8e:88:b6:45:c0:7e:f1:5b:12:
                    6b:0b:ad:f6:ff:08:ae:10:bf:35:4e:96:4b:6d:78:
                    5a:70:28:e0:45:57:88:fa:81:d3:0b:d8:c0:ba:e9:
                    6d:0e:4a:45:77:51:25:90:1f:af:3f:61:5d:b7:ff:
                    93:42:07:46:c4:a0:18:3f:80:12:4d:12:f3:1c:35:
                    9a:2a:bd:dd:c3:96:05:4b:e3:ba:ed:48:94:65:1e:
                    ee:95:a3:df:89:91:f6:0a:23:f8:32:2f:6d:9f:4b:
                    25:2d:49:61:4c:02:fe:46:2d:46:59:1f:f5:65:b3:
                    4d:b6:d0:a2:4e:f8:3d:1a:8c:67:4e:6e:b9:6f:85:
                    bd:fa:b4:6f:f1:da:9e:6a:c5:f7:77:58:a2:3b:54:
                    32:43:39:46:dd:01:f3:ac:6a:e3:63:dc:c1:7f:47:
                    ef:70:ec:13:c9:c2:d6:a0:9b:e2:61:8b:dc:ef:06:
                    8c:d9:65:91:d2:8d:5b:a4:53:e0:ea:68:01:c4:c5:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8E:3B:93:DC:C8:2D:8C:DF:7E:88:B7:81:BD:A1:CB:08:C7:9E:1C
            X509v3 Authority Key Identifier:
                keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:ed:74:ad:ec:04:58:62:bf:52:de:ed:a4:22:8f:b7:54:
         a2:64:cd:21:72:0a:e1:e9:45:bc:bd:30:24:40:79:0e:74:8e:
         bf:41:fe:5e:af:47:b0:1f:08:b7:54:40:06:91:ee:52:59:fa:
         ff:85:b5:40:b9:f0:a9:32:b5:21:46:1a:bf:a2:bd:75:3e:49:
         c4:de:2c:ce:aa:96:3c:01:ef:b3:0e:ac:36:98:9e:33:d6:e2:
         5f:a1:bf:5e:f8:be:db:b5:29:fe:a6:df:ed:c4:0b:00:4c:fc:
         9d:3e:2a:3f:65:f2:7e:7e:b9:e0:cc:1f:3e:30:d9:45:c1:4a:
         f4:f3:19:4c:9b:a0:9c:02:04:79:51:61:29:84:37:5f:c3:38:
         4e:30:42:9b:80:a8:62:2c:b3:2f:e3:1f:f3:94:20:85:db:bd:
         7e:3e:3f:70:8b:a3:73:83:5f:e3:d8:2a:31:3a:d2:92:d9:2a:
         25:4c:82:9a:32:7c:38:16:bc:4d:43:1e:76:62:ee:64:c3:c6:
         6a:84:1f:5c:f6:b3:db:9c:05:43:44:74:b3:7f:e1:a1:be:d5:
         8f:b0:50:8f:20:6f:cb:4b:99:ce:10:ba:62:fe:28:a4:8d:25:
         98:37:f8:e4:b6:0c:a4:4b:60:63:92:1e:ed:53:67:f2:35:d8:
         bf:a0:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:03:15 2025 by rpki-client