This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft (raw, json)
Hash identifier:          Gl00W3gsgxTixZd7ttOEb8PBCSKWBW/kX/7OsEj/V3I=
Subject key identifier:   DF:07:E2:CE:8E:C9:E1:A0:78:2B:3B:2A:63:3E:BE:79:B1:85:7F:3D
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       14A0CCC465070F79C813B5F8C99053390794EE4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
Manifest number:          03B0
Signing time:             Mon 22 Dec 2025 03:20:00 +0000
Manifest this update:     Mon 22 Dec 2025 03:15:00 +0000
Manifest next update:     Tue 23 Dec 2025 03:20:00 +0000
Files and hashes:         1: 34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (hash: cvl9XN6D9prdMFpaUtK33s8zHTgWyCPhHvs5DTeHQOk=)
                          2: 34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (hash: mFDQzS/Ad8gKFIuL0FgAwGbiz2AkpGyAGickt8RlhVc=)
                          3: A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl (hash: I3D8k723o+9PpyNA4f8NO3m+TlA3/vaOcAAlGcEl4Kk=)
                          4: 323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (hash: oIn9GZF5p5pNefIVeN0UiS8wgqn3Gv7XI5/YxvIRfSA=)
                          5: 34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (hash: +K5pOFau4ZXe2MVLt8P7O8Yh0nJiT0WuYcjyq4lHU0U=)
                          6: 34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (hash: GxoI1DsIOHonoYDFpLsELEka4FnyR3oyfVJn+2wiMAE=)
                          7: 34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (hash: SErwqqgGaKkYiiTZSZGe1niblQP3x2+Q6HGo8mm/f7g=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:cc:c4:65:07:0f:79:c8:13:b5:f8:c9:90:53:39:07:94:ee:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Dec 22 03:15:00 2025 GMT
            Not After : Dec 23 03:20:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:ab:9e:e7:ee:0b:04:af:71:ae:39:4c:4c:
                    7d:27:b6:d2:b9:06:4e:13:2f:b2:4c:5b:11:ec:3b:
                    4c:4e:8b:ff:0b:92:e1:ab:ae:14:4b:7d:5e:37:2b:
                    6c:19:04:a5:d6:e7:4f:12:9a:c5:58:41:6c:0a:dd:
                    34:fb:16:28:ee:61:e2:98:5a:d5:0d:1d:5a:5d:91:
                    63:19:f6:53:a9:e5:7f:98:5f:57:34:8f:11:1d:04:
                    ee:fd:ca:5e:4d:bc:98:e8:c1:42:c1:ae:63:6f:81:
                    7d:9b:d3:ec:d7:39:18:34:d9:82:65:68:ea:0a:54:
                    47:bd:09:cc:e7:13:78:b2:1d:d0:f7:ec:b1:1f:b3:
                    76:04:25:2d:a9:f3:88:81:53:fe:68:bd:18:81:bf:
                    09:df:7c:05:58:1a:9a:08:ca:0e:10:96:e6:dc:92:
                    63:78:15:57:03:e4:d4:b8:4a:27:6c:16:15:df:c1:
                    0f:77:ee:f1:42:c3:57:ee:ee:b8:90:5d:31:14:3f:
                    9f:36:df:36:d1:1b:61:b4:db:71:70:97:11:74:99:
                    d6:d4:fa:5b:97:76:c0:f0:53:e1:bc:7e:54:9a:85:
                    96:d0:77:06:5d:ed:79:de:22:aa:b4:3b:26:1f:da:
                    c3:8a:c2:ea:25:c3:1d:e5:fc:2c:9f:f1:41:b7:db:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:E2:CE:8E:C9:E1:A0:78:2B:3B:2A:63:3E:BE:79:B1:85:7F:3D
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:77:50:af:9e:cf:ad:fe:86:d6:ea:ff:1d:ff:73:96:f6:ff:
         cd:78:86:f8:78:60:28:1a:cd:b2:f3:d1:bf:a8:e1:9d:f5:3c:
         7b:3f:45:a2:22:93:47:ff:3d:66:88:2a:bc:ec:68:82:ee:6e:
         aa:97:a8:e7:7a:f4:46:f7:a1:63:07:ed:9c:ee:e0:d9:73:8e:
         6b:0b:c5:90:f6:29:0c:4c:af:85:e9:a7:08:8c:07:7e:f3:57:
         1e:07:ef:ab:26:70:45:40:0c:7b:ed:9b:4e:72:df:35:5c:e1:
         f9:ce:24:10:77:ad:af:c4:d4:b3:16:a8:bc:4c:c3:ae:cb:ab:
         dc:1a:b7:b7:05:07:30:96:e9:95:a3:e9:12:51:11:29:3f:e3:
         9e:0c:41:83:59:94:49:81:38:46:0e:69:c8:6c:55:b0:56:f9:
         15:a9:ac:56:fa:f7:ce:58:f3:9b:b2:2d:5d:b2:50:62:68:e3:
         c0:83:09:c3:22:ad:b6:5c:2f:9f:bb:a5:e2:22:4f:9b:90:46:
         3c:c8:d8:d1:e4:9f:9c:66:c7:0f:ef:ff:43:07:70:dc:65:00:
         0b:89:84:42:16:82:06:70:57:1f:42:e3:c3:45:21:d8:aa:15:
         52:03:b1:45:86:f7:8a:13:55:c8:29:d7:fd:27:c3:29:78:fb:
         1a:b7:43:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----