This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
File:                     4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json)
Hash identifier:          M3p9StkOVhf6yxwP7/eMyZWLb30taqFzd9lt8GBovqQ=
Subject key identifier:   B3:5D:73:6E:8F:9E:49:AE:B4:0C:F0:E3:56:BE:C9:69:BA:F9:A2:90
Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA
Certificate issuer:       /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
Certificate serial:       798B336279A7BB59619DA94A16BE4E2CB1836E2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
Manifest number:          016D
Signing time:             Wed 24 Dec 2025 00:04:57 +0000
Manifest this update:     Tue 23 Dec 2025 23:59:57 +0000
Manifest next update:     Thu 25 Dec 2025 03:44:57 +0000
Files and hashes:         1: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=)
                          2: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=)
                          3: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=)
                          4: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: RPIprpVN+l694wHYJIGPLSYtndjxkg3jDfcPDOCruEk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl
                          rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 03:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8b:33:62:79:a7:bb:59:61:9d:a9:4a:16:be:4e:2c:b1:83:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA
        Validity
            Not Before: Dec 23 23:59:57 2025 GMT
            Not After : Dec 25 03:44:57 2025 GMT
        Subject: CN=B35D736E8F9E49AEB40CF0E356BEC969BAF9A290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:b0:01:4e:2e:b6:9c:91:03:93:3b:c3:cb:
                    43:be:bc:42:ad:62:3b:81:a7:d4:fc:b4:c3:e8:d1:
                    06:ee:d4:f7:6d:f7:3a:ac:6d:5c:ca:43:58:c6:a7:
                    2a:ed:46:f0:7c:05:14:96:bc:6e:0a:1a:13:49:1f:
                    82:33:75:35:cc:3b:71:41:19:81:03:ed:fb:c0:8d:
                    7c:cd:fd:65:68:d8:af:7c:02:f7:a3:c4:5b:64:46:
                    3e:cf:5d:67:aa:c7:88:c6:87:1b:c4:a2:f6:49:aa:
                    0b:c3:16:4d:30:ca:dc:c8:34:04:7c:46:d3:e7:17:
                    9b:34:07:30:e9:a5:01:bf:7f:a5:50:33:22:98:be:
                    19:c4:0c:c5:ac:5f:3f:3b:7f:c7:da:b9:35:1a:9e:
                    67:50:a5:49:b5:17:a9:dd:d2:f1:6c:d5:3a:ba:eb:
                    32:27:ae:23:91:d0:50:98:d3:1f:27:37:19:7d:a8:
                    3d:f2:ed:e8:61:8b:8e:96:c4:4e:81:e2:25:f5:c0:
                    5b:d7:2e:da:a9:29:4e:2e:67:9a:49:de:63:ce:fc:
                    d2:17:23:74:d7:43:14:60:f6:55:5c:06:b9:af:4b:
                    69:af:64:37:5f:d2:3c:13:1f:7d:81:5d:67:3c:7b:
                    0f:66:07:46:d6:92:58:ef:7f:29:92:c4:ec:c5:4c:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5D:73:6E:8F:9E:49:AE:B4:0C:F0:E3:56:BE:C9:69:BA:F9:A2:90
            X509v3 Authority Key Identifier:
                keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:63:3c:1f:37:09:7f:06:a6:6b:9b:fa:c2:99:00:28:c0:5f:
         b3:6b:a7:21:5b:fa:75:2e:43:36:e6:96:bb:47:c2:9a:35:e2:
         c8:a7:12:db:8c:76:3a:bb:44:a2:d3:e7:41:05:a0:61:df:b4:
         88:76:94:47:41:29:44:eb:81:23:6c:85:5f:9d:67:31:f3:ac:
         d8:23:02:cf:1e:ab:48:53:c6:19:2f:2a:d9:2f:58:b8:86:f3:
         4e:0f:fc:ab:3d:6d:ba:c5:26:2c:77:03:0a:32:89:6f:ef:a1:
         98:e3:e7:1b:24:34:dd:19:c9:4d:b4:16:93:d0:25:c7:d6:30:
         59:17:0d:dd:84:3d:dd:c7:39:11:bd:a5:03:17:64:6f:24:45:
         b5:28:9c:18:85:9c:96:f0:92:9a:d4:af:c6:d1:a8:47:2f:5e:
         9a:ac:7f:d1:b6:1c:0b:0b:99:0c:d0:c2:f8:82:b0:f5:e8:ec:
         53:d1:c4:0a:16:39:c6:54:05:bc:6f:fa:d9:ae:9b:00:3e:35:
         9c:b5:01:3a:af:84:bc:52:cd:8c:09:cd:17:e8:7c:75:14:6a:
         db:c4:bb:e6:e5:e5:92:4b:d9:8b:3f:04:f8:45:1f:3f:e9:2b:
         54:96:ac:1c:74:96:a5:58:e6:cd:48:f9:de:29:91:cc:cf:c6:
         cb:4f:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:10:59 2025 by rpki-client