This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.mft
File:                     4290059BE28E435DA0953004AF02E14518D3EE13.mft (raw, json)
Hash identifier:          5RACyyVP7f9x/hPkKPsqmiFztES9PlwTTc1Cd+dS5R0=
Subject key identifier:   C5:8A:E1:50:E1:FD:A7:3B:45:99:CE:AB:DD:51:E6:BA:A4:1B:8B:09
Authority key identifier: 42:90:05:9B:E2:8E:43:5D:A0:95:30:04:AF:02:E1:45:18:D3:EE:13
Certificate issuer:       /CN=4290059BE28E435DA0953004AF02E14518D3EE13
Certificate serial:       2F59828E329EE38C3C0971423FDA4759D87D426B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4290059BE28E435DA0953004AF02E14518D3EE13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.mft
Manifest number:          87
Signing time:             Tue 23 Dec 2025 03:45:53 +0000
Manifest this update:     Tue 23 Dec 2025 03:40:53 +0000
Manifest next update:     Wed 24 Dec 2025 07:38:53 +0000
Files and hashes:         1: 323830343a366531303a3a2f33322d3332203d3e20323730353733.roa (hash: QhKfWuOCGzXjK0AtKwQdeyzuDsrjgWJJnNBJQgH+fZg=)
                          2: 3230302e31342e3132302e302f32322d3234203d3e20323730353733.roa (hash: uo4ODfLOK17pVyRZPwUjEAWf0F16SBGQkG+nhyinJ1U=)
                          3: AS270573.asa (hash: bswzzS19sHAIeQR9l7+TOv23T+atK4/zflVA6JAkGkE=)
                          4: 4290059BE28E435DA0953004AF02E14518D3EE13.crl (hash: FE1fsWiumAbWkj6d3LLl0YxwIR27HvEAWLZgt9yrTJ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.crl
                          rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4290059BE28E435DA0953004AF02E14518D3EE13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:59:82:8e:32:9e:e3:8c:3c:09:71:42:3f:da:47:59:d8:7d:42:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4290059BE28E435DA0953004AF02E14518D3EE13
        Validity
            Not Before: Dec 23 03:40:53 2025 GMT
            Not After : Dec 24 07:38:53 2025 GMT
        Subject: CN=C58AE150E1FDA73B4599CEABDD51E6BAA41B8B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:e3:59:63:1d:e0:5b:1c:ca:09:48:3e:fc:
                    d9:d8:23:15:24:80:4b:60:d4:4f:63:45:aa:cd:31:
                    32:56:db:cb:60:a9:df:f3:f0:30:cd:b5:f2:5b:15:
                    76:b8:72:82:0f:77:f5:dd:86:d1:c2:1e:fa:2f:92:
                    a9:79:73:dc:c3:73:12:ff:66:0f:78:42:06:95:28:
                    d8:78:17:72:a0:a9:7a:79:7e:37:7b:46:6b:fa:7c:
                    9c:33:59:41:a0:06:1e:3c:a9:c3:8b:81:e2:00:ee:
                    63:75:6a:15:7c:6f:93:63:e1:31:bf:68:60:6f:18:
                    9d:b4:9c:46:d2:2d:a4:f1:a4:99:87:ec:82:d9:1e:
                    e2:ad:5c:f2:52:db:74:a7:cb:5f:30:d9:88:e2:fd:
                    b3:75:f0:a9:81:b1:17:21:5e:84:9e:32:be:11:3b:
                    36:6e:ed:d5:5a:3b:29:37:89:d8:cf:93:38:9c:3c:
                    23:43:a5:0b:66:e4:c8:3f:a8:49:48:74:99:18:1e:
                    ce:ba:8e:86:2e:88:f1:86:e9:db:6b:c3:98:3a:50:
                    c1:ec:e1:7c:41:87:7b:3c:53:81:4c:13:d3:3e:b1:
                    9e:31:b6:3a:d2:bd:b2:4c:ea:e8:37:14:f1:d5:1c:
                    5d:60:9c:49:0e:eb:f1:0e:e7:e3:28:dc:25:17:48:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8A:E1:50:E1:FD:A7:3B:45:99:CE:AB:DD:51:E6:BA:A4:1B:8B:09
            X509v3 Authority Key Identifier:
                keyid:42:90:05:9B:E2:8E:43:5D:A0:95:30:04:AF:02:E1:45:18:D3:EE:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4290059BE28E435DA0953004AF02E14518D3EE13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ad:5d:e2:cc:a2:13:0d:11:a6:d4:55:5f:9e:61:fa:7e:ee:
         e9:d2:e1:61:6c:83:fc:a8:db:d2:62:41:69:02:45:e8:e2:2d:
         ce:7d:45:6a:da:90:1a:ad:fe:ed:f8:ee:14:fa:71:7a:d6:44:
         3c:b8:8c:e8:36:ab:5d:7a:ac:ed:06:26:10:bb:8d:8e:a6:98:
         fa:44:e6:7a:8c:0e:c6:d8:88:06:d5:1f:b0:f4:16:f3:37:61:
         d9:33:fd:47:5a:5e:d3:c5:1e:13:dc:15:c2:05:9d:2e:27:6c:
         f9:39:ea:31:fa:37:f0:b3:cd:4f:ec:a5:06:e1:48:83:7e:32:
         4a:a0:03:44:40:f8:00:46:1e:01:45:b1:d1:e1:c8:a6:cc:69:
         ea:0f:53:ac:97:e6:aa:4d:31:93:1d:47:b1:72:a2:a8:3f:e5:
         2e:0b:00:4a:f1:fe:84:4b:12:cb:7b:55:5c:3a:f7:b6:59:fb:
         c5:a0:4c:0e:52:e8:5c:b3:3f:c9:94:64:79:af:c9:8e:91:cd:
         aa:ff:23:11:63:1e:1c:9c:c5:97:8f:0b:e0:f4:b0:cc:39:5f:
         51:e6:25:c5:90:ef:89:a8:9f:b6:5c:3c:bf:97:df:b8:d6:0c:
         ae:5f:56:6d:7f:98:84:9a:f9:2d:20:0d:16:f8:81:85:ce:40:
         a3:aa:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:44:57 2025 by rpki-client