This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
File:                     849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json)
Hash identifier:          vGCOlg+pSXzU24g2ct8GtVrqbqhpWzXq8rb1ghxPBok=
Subject key identifier:   4F:59:64:14:1C:C1:C4:6B:6A:DA:D5:EE:B3:4A:20:36:03:0F:9D:BE
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Certificate issuer:       /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial:       2035BC5D5F7EE328A1915382208F6748D5EB0251
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
Manifest number:          0345
Signing time:             Sat 20 Dec 2025 16:57:07 +0000
Manifest this update:     Sat 20 Dec 2025 16:52:07 +0000
Manifest next update:     Sun 21 Dec 2025 17:43:07 +0000
Files and hashes:         1: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: 9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=)
                          2: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: ZRY6nFDsnmP6pXoUdcrnxx3g2/0sHO0RRKz1O+nBktA=)
                          3: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=)
                          4: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
                          rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:35:bc:5d:5f:7e:e3:28:a1:91:53:82:20:8f:67:48:d5:eb:02:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
        Validity
            Not Before: Dec 20 16:52:07 2025 GMT
            Not After : Dec 21 17:43:07 2025 GMT
        Subject: CN=4F5964141CC1C46B6ADAD5EEB34A2036030F9DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:d0:8a:69:f1:2a:95:fe:0b:d6:7e:99:20:
                    7b:03:ce:8d:f8:af:ab:3d:34:4c:9d:c2:fd:e0:6e:
                    ff:6e:2f:7a:c0:01:e6:80:fc:9a:ba:d3:07:d6:94:
                    a6:d6:06:69:f6:bd:eb:69:7c:4e:9b:e6:ef:ec:8a:
                    e6:0d:62:e3:58:a7:4b:1a:9c:4f:19:d7:90:02:64:
                    10:3c:3e:b9:5b:c0:8c:10:79:af:15:52:e0:39:a8:
                    9b:58:83:be:01:4a:3d:92:23:bf:c7:71:f3:38:68:
                    57:d0:31:60:ac:6d:ab:1a:6a:84:76:8a:ec:51:f5:
                    b5:82:b8:38:0a:89:e0:09:26:6a:d1:2a:4f:94:f8:
                    5e:06:21:39:c5:19:b2:5c:75:ca:e1:2b:ee:0b:65:
                    38:28:1d:b3:87:72:59:f7:60:f9:cc:4e:c4:b7:7d:
                    8f:5b:6a:54:a7:42:1c:8a:fb:37:2e:13:9e:35:62:
                    fd:f3:a5:dc:2f:f2:90:da:84:81:1e:17:99:30:b1:
                    b3:44:6e:a5:51:e0:2a:aa:95:b3:2b:22:ce:27:91:
                    10:ec:81:01:04:c5:18:6b:97:f9:c2:00:a2:ed:e1:
                    1c:92:a4:a6:9d:89:95:69:9c:cb:b8:c3:ec:c4:d4:
                    49:9a:fd:8d:33:b7:09:e9:ed:88:7e:b4:76:ed:95:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:59:64:14:1C:C1:C4:6B:6A:DA:D5:EE:B3:4A:20:36:03:0F:9D:BE
            X509v3 Authority Key Identifier:
                keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ae:c8:c3:bb:85:b3:1b:9d:35:a4:2d:9a:98:a6:8a:97:45:
         40:c0:ac:bf:ca:df:c2:b4:39:d4:3a:9c:c0:32:0b:3e:30:22:
         1f:ed:b4:95:66:14:61:4a:d0:fc:21:c7:32:f9:0b:fe:ba:98:
         95:05:b2:34:c1:9b:ea:ce:a7:9d:85:fc:3d:b9:4e:81:f1:66:
         c3:1a:96:a3:c3:37:42:37:f6:3c:39:12:3e:04:9e:fe:4d:b9:
         cf:5b:3f:2c:f1:6b:ca:31:65:50:30:d3:94:79:7e:d1:13:b9:
         2b:1d:64:dd:e1:85:41:6b:92:30:ef:0a:5d:f2:56:53:8e:5c:
         9a:c3:02:21:1b:0e:10:cd:a8:cd:a4:01:b9:65:d6:ac:13:64:
         8b:9f:f4:53:81:aa:30:e9:71:1a:43:1c:54:e9:5b:82:ee:d0:
         8b:86:7f:d0:30:78:83:59:fa:f2:4b:f6:a3:05:10:b6:1d:37:
         3c:64:5c:66:81:54:c7:2f:20:46:4a:8c:98:2f:e8:8c:f6:12:
         a0:b6:43:53:cc:e7:6a:c0:64:1c:35:32:b2:99:4b:0f:b6:f4:
         eb:f2:2e:32:69:a5:72:83:7c:f6:11:ff:4a:97:70:41:73:11:
         f7:e5:fd:33:e4:e1:9f:fe:4d:46:1f:72:96:be:3e:9e:49:cd:
         23:5a:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:45:58 2025 by rpki-client