This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
File:                     589266404FC4F49C44EDD95659918140330CBF03.mft (raw, json)
Hash identifier:          NblHhiPIU7bBzr7ycAJNGkO0iJzW7zh5U7iujQul4C8=
Subject key identifier:   B4:53:E3:CA:A6:F7:4A:AE:C0:44:A6:CC:FB:1D:3D:E3:94:E8:53:A9
Authority key identifier: 58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03
Certificate issuer:       /CN=589266404FC4F49C44EDD95659918140330CBF03
Certificate serial:       338BDCB7868305432E1E11630C6A015227995E0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
Manifest number:          0195
Signing time:             Sat 20 Dec 2025 09:31:00 +0000
Manifest this update:     Sat 20 Dec 2025 09:26:00 +0000
Manifest next update:     Sun 21 Dec 2025 12:26:00 +0000
Files and hashes:         1: 323830343a383261633a3a2f33322d3333203d3e20323732353333.roa (hash: aqW4fbZ2Swsr8gyeE1ICG/UZJuYSvpkYXFf5rpVyKeA=)
                          2: 589266404FC4F49C44EDD95659918140330CBF03.crl (hash: 67nAtdcVYHMnDv7KgX5lX6brFOoM7s67vVkJ8BMkWZg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl
                          rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8b:dc:b7:86:83:05:43:2e:1e:11:63:0c:6a:01:52:27:99:5e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589266404FC4F49C44EDD95659918140330CBF03
        Validity
            Not Before: Dec 20 09:26:00 2025 GMT
            Not After : Dec 21 12:26:00 2025 GMT
        Subject: CN=B453E3CAA6F74AAEC044A6CCFB1D3DE394E853A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:2d:98:8d:e4:0b:3c:c8:92:7f:d3:fb:02:
                    89:8a:a0:70:16:1e:9f:66:f8:e3:ea:6d:78:55:89:
                    4c:3e:20:7f:63:1a:dd:0f:24:08:ab:87:0d:c5:ab:
                    46:95:c0:ca:c6:72:db:c2:8f:71:1c:d0:9f:85:89:
                    60:d2:22:37:17:5e:45:de:51:36:3f:a9:54:b5:59:
                    63:4c:de:0f:c0:f4:17:64:22:02:5c:fa:89:7a:20:
                    21:85:e4:76:06:43:13:f8:a2:37:6d:2f:03:a7:82:
                    ef:54:2d:be:7a:d5:07:c4:41:b9:25:71:6d:f0:6b:
                    dc:cf:dc:c4:f5:56:ee:33:1a:62:f0:62:25:16:3d:
                    53:11:39:af:35:25:e1:d2:79:d7:5f:72:9f:0d:32:
                    19:38:5a:66:62:d0:68:15:85:6d:e3:1a:db:d6:1d:
                    16:04:06:a6:ca:93:1d:97:bf:e1:a4:37:87:7f:35:
                    7b:66:2b:12:df:f7:64:d1:7c:6b:4c:1a:f4:e7:44:
                    7f:2f:ed:58:ab:a0:a4:2d:57:a3:ae:63:35:e6:a7:
                    54:59:34:8c:2a:d7:74:b0:56:b8:9c:32:67:51:39:
                    0a:55:a2:13:27:50:45:79:55:9f:17:28:4d:98:86:
                    3d:2a:f6:e2:a5:c0:74:b8:03:14:b9:6e:67:55:20:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:E3:CA:A6:F7:4A:AE:C0:44:A6:CC:FB:1D:3D:E3:94:E8:53:A9
            X509v3 Authority Key Identifier:
                keyid:58:92:66:40:4F:C4:F4:9C:44:ED:D9:56:59:91:81:40:33:0C:BF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/589266404FC4F49C44EDD95659918140330CBF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/589266404FC4F49C44EDD95659918140330CBF03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:85:29:32:63:77:b1:e8:b8:fd:32:be:e4:ce:76:d6:eb:
         ed:98:ae:29:72:5c:e1:f2:7c:95:99:41:ef:6d:e5:15:38:7b:
         74:91:49:78:54:40:12:14:54:ac:70:04:c3:1b:4e:d4:27:5b:
         8b:e4:21:62:a0:e1:14:1e:c1:17:ae:df:0d:c1:6c:f0:99:57:
         84:e2:84:8d:07:ca:2a:ed:1a:45:6a:27:73:ef:ee:c7:ff:6a:
         df:e7:bb:ff:10:e6:16:dc:81:86:2f:5e:82:47:20:26:eb:e8:
         de:f0:e8:22:b5:06:41:11:1d:f4:ac:8d:76:02:68:e3:b8:2d:
         19:a2:03:d6:9a:01:d6:db:43:30:56:c8:05:24:12:c5:f2:b5:
         dd:e1:a6:43:9f:2c:d8:cc:65:3d:0b:ac:7a:a0:de:ba:ae:37:
         4d:01:59:96:57:a5:f1:83:77:9d:4a:97:cb:ab:57:23:4e:2c:
         13:3d:ce:05:50:aa:bf:a0:98:21:d7:bf:af:e6:b7:32:1a:cf:
         8c:fa:b6:f5:a6:72:b1:95:3d:ae:c0:fb:cc:a3:80:96:be:aa:
         4b:d6:f9:19:a9:70:89:c9:87:71:ec:a4:26:25:b7:50:8c:1c:
         0f:9c:95:e1:5d:91:78:44:b0:c2:ec:23:55:34:1f:f4:1b:64:
         d7:9e:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:08:54 2025 by rpki-client