This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.mft
File:                     D092506534967FD958F42A34B4B7FF755DACEA03.mft (raw, json)
Hash identifier:          SOeUQBwe0I/DHmdwvxf9IrxKBbgtGidwAVWx9liiDj8=
Subject key identifier:   63:BF:2B:23:21:21:DE:1B:F1:08:89:48:28:34:44:5F:79:B3:36:82
Authority key identifier: D0:92:50:65:34:96:7F:D9:58:F4:2A:34:B4:B7:FF:75:5D:AC:EA:03
Certificate issuer:       /CN=D092506534967FD958F42A34B4B7FF755DACEA03
Certificate serial:       6E9E741522B61E6D95AD63560391BB8244CC7452
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D092506534967FD958F42A34B4B7FF755DACEA03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.mft
Manifest number:          A2
Signing time:             Wed 24 Dec 2025 12:42:43 +0000
Manifest this update:     Wed 24 Dec 2025 12:37:43 +0000
Manifest next update:     Thu 25 Dec 2025 14:00:43 +0000
Files and hashes:         1: 3138372e3132302e33322e302f32302d3234203d3e20323632363835.roa (hash: BSCj9cyD4nupzpfPusMzauK2KjMumPBXiiYHGjKcFYs=)
                          2: 323830343a3130343a3a2f33322d3438203d3e20323632363835.roa (hash: 9IN9uxDs9s+Tpamdy+UHjA76AsqK+pVtFv3H1MNQzeM=)
                          3: D092506534967FD958F42A34B4B7FF755DACEA03.crl (hash: 1ZiAFoiQgYBmWyXT/9rFP6AAZMhXyaOuUy8+xpcvWJo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.crl
                          rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D092506534967FD958F42A34B4B7FF755DACEA03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9e:74:15:22:b6:1e:6d:95:ad:63:56:03:91:bb:82:44:cc:74:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D092506534967FD958F42A34B4B7FF755DACEA03
        Validity
            Not Before: Dec 24 12:37:43 2025 GMT
            Not After : Dec 25 14:00:43 2025 GMT
        Subject: CN=63BF2B232121DE1BF10889482834445F79B33682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:0b:48:4d:a7:bc:bf:3c:7d:8b:de:2b:25:
                    31:1c:0d:1c:0d:5c:9c:09:dc:e8:10:13:ba:1f:1c:
                    76:0e:75:60:1f:ac:6e:0b:9b:85:ef:46:9f:81:bf:
                    22:10:59:15:c5:96:b3:d9:54:b2:35:40:b4:3e:3b:
                    af:28:e0:7d:b7:48:95:2a:7c:7a:15:9e:d7:16:9f:
                    05:aa:04:98:62:19:04:53:07:97:6a:a9:b6:75:da:
                    5a:5d:4c:b2:34:93:45:ae:96:3e:e8:b6:e5:c9:22:
                    53:9d:8b:0b:7f:c9:86:30:fd:40:83:cb:c7:14:7d:
                    e9:0f:98:15:8e:b9:49:e2:3e:3e:21:f5:21:a1:21:
                    db:4b:5a:25:cc:9f:08:da:3e:e3:64:00:f6:37:fc:
                    68:34:1e:a0:24:ba:54:df:a4:63:f4:b1:43:3f:d6:
                    b6:3c:0a:f0:9e:cc:37:d5:6f:75:42:a9:66:9e:a2:
                    7a:0f:95:85:f7:d1:0b:78:00:a4:ae:4e:29:57:44:
                    03:e9:b5:b0:b1:7c:a2:95:14:cd:30:a7:25:32:65:
                    28:34:6f:fb:b0:30:e3:a5:2a:b0:6a:b5:77:41:9a:
                    0a:9a:95:44:95:2d:7f:15:0b:d2:5b:cf:f6:d1:18:
                    5d:b4:f2:e3:a6:8c:c4:c1:b5:03:f2:ef:a5:2a:3b:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:2B:23:21:21:DE:1B:F1:08:89:48:28:34:44:5F:79:B3:36:82
            X509v3 Authority Key Identifier:
                keyid:D0:92:50:65:34:96:7F:D9:58:F4:2A:34:B4:B7:FF:75:5D:AC:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D092506534967FD958F42A34B4B7FF755DACEA03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:79:30:8a:3e:8d:ed:9c:a4:40:00:ef:61:ed:51:8c:ad:ce:
         26:56:9f:a0:d6:ea:45:b1:b9:37:81:42:40:cd:1a:01:6b:43:
         1a:10:bc:6d:85:87:61:56:11:66:27:b1:86:41:ea:75:bc:c4:
         bd:b6:a7:d8:07:8b:19:b3:22:41:99:e4:87:aa:85:18:58:ed:
         55:83:b2:99:9f:48:13:11:19:26:b3:40:a6:62:c3:3d:63:0d:
         dd:79:3a:c4:21:30:3a:fc:23:c7:04:c0:83:af:70:17:51:1c:
         90:d5:f4:0b:26:17:9a:12:66:fe:2a:c5:9e:6a:cb:83:8d:cb:
         ee:b0:12:fb:07:8b:47:67:38:60:e2:4e:bb:51:0d:f6:d6:3d:
         f8:80:88:04:1f:b5:63:d2:52:cf:07:ba:38:60:a9:3e:b1:23:
         d2:f2:1e:3c:93:1c:ae:60:29:44:b6:cd:2b:90:7f:5b:e6:c0:
         ea:f2:87:33:8f:08:2e:ca:bc:66:bf:76:9e:ae:5a:2d:8b:ef:
         f1:35:65:ed:78:eb:cf:26:6a:12:da:81:6c:51:2d:fa:c3:55:
         4f:06:b2:73:b4:68:7e:10:6e:82:11:1a:e8:84:62:7a:f2:40:
         10:7b:3f:f9:36:aa:3b:d8:73:93:3d:31:45:30:33:92:f9:a1:
         1c:ef:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:06:40 2025 by rpki-client