This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
File:                     A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft (raw, json)
Hash identifier:          rxGN9C2rHPDh2PqFmsvgO0/HU1Ta0CLxPXFPP6TaO5U=
Subject key identifier:   84:8B:06:F3:50:9A:39:49:08:A2:AB:FD:B4:B9:65:CB:17:B4:A0:9F
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       025DF80752F29FFA557E59AB568B6D0406A34F44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
Manifest number:          0340
Signing time:             Fri 19 Dec 2025 20:56:04 +0000
Manifest this update:     Fri 19 Dec 2025 20:51:04 +0000
Manifest next update:     Sat 20 Dec 2025 22:26:04 +0000
Files and hashes:         1: 323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (hash: IGZC/ZqhSQbu5GFCYQCixQwJXOH+Gl9YndWhUHmy/Gc=)
                          2: A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl (hash: 25/d7hNKBrcu1DeSAi+bkpsBo0cLxGPexd+5dexegUQ=)
                          3: 3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (hash: FAgRhtWVbW83aLMZDwCfmIgyXr+8usf+s+PrU2i3Erw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 22:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5d:f8:07:52:f2:9f:fa:55:7e:59:ab:56:8b:6d:04:06:a3:4f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Dec 19 20:51:04 2025 GMT
            Not After : Dec 20 22:26:04 2025 GMT
        Subject: CN=848B06F3509A394908A2ABFDB4B965CB17B4A09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:df:0a:cc:bf:cc:34:d1:14:2e:6e:56:44:
                    fd:6e:51:03:3d:41:64:44:9a:d4:83:11:f2:05:07:
                    34:56:2b:8e:20:d8:aa:3d:c0:c6:0f:5b:1b:51:65:
                    31:8b:fb:ee:f7:85:dd:03:e4:c5:28:d8:30:f7:95:
                    bb:c4:a0:a3:a9:6e:8a:5c:69:e3:8c:09:28:5f:ac:
                    1e:3a:e2:81:37:c3:16:c0:0f:be:5d:5e:98:b4:77:
                    21:43:06:35:0d:9f:22:e6:ee:0b:e0:ab:52:ff:05:
                    96:c1:9e:84:08:7a:f0:c4:50:43:43:c2:de:d7:10:
                    61:f9:21:4c:47:97:70:8d:36:41:7c:f3:be:9a:63:
                    58:8a:d5:c9:27:ed:45:30:f3:62:a7:bb:ea:2b:c8:
                    55:09:7b:1c:74:1f:11:a0:b2:7f:f7:66:76:72:c9:
                    4e:d6:46:f9:7e:d0:3f:88:12:c7:db:ef:61:c0:37:
                    9c:1b:59:1c:48:d8:d3:4a:7d:5c:db:d5:f2:09:02:
                    39:1c:12:dc:ec:0c:29:25:df:55:b8:1f:ba:e4:aa:
                    55:c0:49:d7:ea:b1:0c:7f:ce:70:ea:91:67:94:f3:
                    69:05:1d:d1:55:eb:2e:0e:f2:eb:40:aa:2a:58:ed:
                    c1:ab:ea:6e:a8:4a:28:e1:fa:1b:0c:87:49:85:cc:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:06:F3:50:9A:39:49:08:A2:AB:FD:B4:B9:65:CB:17:B4:A0:9F
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:04:19:c8:2c:6a:43:30:28:17:85:fb:19:ee:85:e7:54:
         78:8f:5e:5f:8f:a6:01:09:01:24:54:aa:fd:9c:8d:b1:30:96:
         df:5a:dc:0d:44:a7:11:18:a6:a2:3f:33:d8:a9:87:dc:41:46:
         25:c2:6f:3d:c8:08:77:9d:10:6d:3e:e9:1b:8c:aa:29:a1:a0:
         71:d7:c9:a2:46:59:11:da:e6:cd:98:c2:74:a6:01:5e:f3:76:
         39:be:34:64:d9:4a:14:e0:8f:c0:b0:fe:67:89:71:34:fb:ae:
         50:56:7d:0a:62:2a:1c:f7:a8:75:13:0d:0f:37:e3:09:fd:ef:
         92:99:31:ce:a4:c8:d2:e0:bb:27:73:1c:34:97:1d:a7:ee:44:
         45:d9:82:8f:37:ea:90:ee:9f:67:f6:bc:f6:d2:f2:bd:26:d8:
         c9:ec:75:7f:b9:66:da:04:88:35:ae:64:c0:89:63:97:c2:0b:
         4c:5a:90:f1:58:6e:dc:a4:b7:d9:87:f7:4c:d0:53:3c:87:da:
         45:d2:44:df:7b:66:c9:5c:58:af:98:b2:ac:de:6b:52:f1:a3:
         98:b9:f0:e1:21:80:ae:06:47:2e:c4:9f:d1:61:09:6a:f4:9a:
         cb:4b:e0:cb:24:fa:44:b3:4f:37:a7:c6:08:90:11:f3:5f:68:
         20:4b:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:02:57 2025 by rpki-client