This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
File:                     A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft (raw, json)
Hash identifier:          xfW/Yg45nEhYycZz+r3l8HNPCZqg0APF5hM5ujz3ii8=
Subject key identifier:   5C:35:DE:13:96:9E:8C:98:F9:2F:B5:2A:3F:02:59:85:40:E9:65:D8
Authority key identifier: A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38
Certificate issuer:       /CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338
Certificate serial:       594D909B085D1218E6B1B7EB7E6A0E1F6EC8A23B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
Manifest number:          19
Signing time:             Sat 20 Dec 2025 02:21:30 +0000
Manifest this update:     Sat 20 Dec 2025 02:16:30 +0000
Manifest next update:     Sun 21 Dec 2025 05:39:30 +0000
Files and hashes:         1: A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl (hash: WS8Vfw9B2hRcAVmOJlLu+7Kp5Lw1IC675r3rhQMxQRc=)
                          2: 323830343a356562383a3a2f33322d3438203d3e20323632383636.roa (hash: 5E0Ifwta81LchCt92H2rxh4tPOU70g5Au1TMHbfMgYU=)
                          3: 3137372e31322e3234302e302f32302d3332203d3e20323632383636.roa (hash: d2HfhAlckHg4C6fC1rT/Khe5GGcuY40/8fSPstNqiY8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 05:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4d:90:9b:08:5d:12:18:e6:b1:b7:eb:7e:6a:0e:1f:6e:c8:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A812952D65CD2E97C19E7D7A7880F72BC1E0F338
        Validity
            Not Before: Dec 20 02:16:30 2025 GMT
            Not After : Dec 21 05:39:30 2025 GMT
        Subject: CN=5C35DE13969E8C98F92FB52A3F02598540E965D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:cd:7a:0e:bf:d4:f0:80:23:59:5d:0f:dd:
                    b2:18:70:11:bc:db:cc:81:1a:93:08:4f:b1:56:92:
                    cc:58:0a:b3:27:c0:88:43:4e:af:f0:82:30:42:46:
                    16:8d:fb:32:4e:17:0a:a6:33:38:65:65:f7:bc:42:
                    1d:5b:7a:80:df:ca:54:a1:dd:40:9f:7f:9c:da:48:
                    75:59:fe:c7:31:fa:75:6a:e2:5d:89:b3:31:b6:27:
                    34:21:95:6c:60:01:c9:c2:af:61:e4:9c:25:3e:9c:
                    66:d6:59:7f:24:07:37:5a:f7:df:a5:f4:c4:84:ae:
                    78:8f:ce:ed:02:31:03:b7:4c:04:f0:45:5c:67:1c:
                    dc:05:01:98:18:88:a2:d3:ad:b3:b1:07:2b:c5:59:
                    38:a0:9d:a2:50:4a:a5:63:9b:89:13:f4:30:ba:98:
                    b1:20:4d:31:48:44:dd:72:02:4e:36:6d:8f:96:99:
                    92:35:40:ea:12:ec:b2:ce:e3:84:8e:1a:4e:20:69:
                    e9:6c:ba:64:dc:a4:d2:00:4a:98:0f:7a:6e:85:46:
                    3e:c2:5c:0b:0e:c5:b5:5a:77:25:f5:d5:0e:76:f8:
                    31:00:08:9d:9a:72:86:5b:96:67:a1:d2:44:c3:eb:
                    44:58:2f:82:48:02:07:73:e5:26:49:5b:76:79:ea:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:35:DE:13:96:9E:8C:98:F9:2F:B5:2A:3F:02:59:85:40:E9:65:D8
            X509v3 Authority Key Identifier:
                keyid:A8:12:95:2D:65:CD:2E:97:C1:9E:7D:7A:78:80:F7:2B:C1:E0:F3:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/0/A812952D65CD2E97C19E7D7A7880F72BC1E0F338.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:33:e6:28:75:17:0a:b4:dc:c9:a5:fc:69:46:55:21:e2:
         fa:7b:63:d0:b1:35:97:d1:b5:c8:34:77:7d:5b:5f:7c:f3:fc:
         68:d1:08:47:2e:4a:c3:b3:27:b0:93:5f:71:6f:6e:54:a4:90:
         8e:e7:94:21:ed:10:3f:27:81:b5:c2:76:fa:0e:22:74:43:ee:
         15:05:10:c4:9e:6b:8a:6f:a0:d5:35:c1:ff:31:3f:45:fe:e5:
         95:38:98:c6:94:44:49:cd:54:cf:90:d2:5c:58:e9:2d:1b:a2:
         71:52:eb:79:0d:8f:7f:8f:1d:23:5f:1d:8a:fc:eb:71:b8:eb:
         82:fe:d0:8a:41:f1:f1:88:73:25:64:ff:d1:f9:91:13:35:65:
         60:d9:86:cd:50:aa:76:8b:46:5b:a7:30:53:68:9f:49:9f:3d:
         23:7e:e3:78:ed:43:99:8a:2f:94:14:ba:1c:11:67:16:ad:ba:
         45:3c:ca:be:3e:98:36:20:7b:16:a7:08:17:65:7e:21:6e:b0:
         68:7c:a8:f4:6e:59:88:4c:96:c0:e1:69:ed:20:62:86:2b:ef:
         75:c7:19:68:ee:27:10:be:3f:d2:32:bb:c8:8f:63:33:db:4d:
         2a:e3:7a:ae:8d:7b:1a:f7:9c:bf:5b:dd:e9:98:35:f1:77:b0:
         74:5c:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----