This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
File:                     D5A1856A52E7F9EBF280FCB86750839A6466C111.mft (raw, json)
Hash identifier:          85drZ0ZtqFcDkSPIyM9qy/YQ0optnXQiE3PMSw7YAU0=
Subject key identifier:   4E:A6:AB:90:DD:A2:A7:F5:B9:72:68:F8:B1:AD:FB:A2:62:F6:39:14
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Certificate issuer:       /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial:       0923F914DD1931EE831077102BB110E7C5F1F5A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
Manifest number:          89
Signing time:             Tue 23 Dec 2025 21:17:04 +0000
Manifest this update:     Tue 23 Dec 2025 21:12:04 +0000
Manifest next update:     Wed 24 Dec 2025 22:43:04 +0000
Files and hashes:         1: D5A1856A52E7F9EBF280FCB86750839A6466C111.crl (hash: P5T+Z+MGEpSJwgpZ/b7eMTUZxpRoV3dZPgI/acW/81c=)
                          2: 3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (hash: KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=)
                          3: 3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (hash: iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=)
                          4: 323830343a383237633a3a2f33322d313238203d3e20323632393337.roa (hash: w7mrlzP9adJiyFUUgR0vUJKBTlOPeWaDs+XqI7y8EJY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
                          rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:23:f9:14:dd:19:31:ee:83:10:77:10:2b:b1:10:e7:c5:f1:f5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
        Validity
            Not Before: Dec 23 21:12:04 2025 GMT
            Not After : Dec 24 22:43:04 2025 GMT
        Subject: CN=4EA6AB90DDA2A7F5B97268F8B1ADFBA262F63914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:30:e3:d2:ec:98:da:8e:e6:0e:fb:e1:62:
                    47:bd:09:44:31:cc:9f:5a:ed:28:e3:3a:71:77:8c:
                    e5:75:90:e0:81:fc:15:a9:c9:b9:f9:bb:d5:22:33:
                    b7:0b:26:84:f0:6e:c0:c3:2e:d9:5d:b5:25:88:51:
                    e2:51:27:7c:4f:a6:7b:bf:72:35:bc:3c:f2:02:0e:
                    02:9b:31:db:ff:2c:ae:10:ad:97:1e:9c:d5:28:21:
                    d2:46:72:98:6a:de:c4:cb:fa:3f:90:07:13:ca:c4:
                    d8:bc:47:96:9d:86:08:8d:05:a1:92:31:45:04:35:
                    34:7d:b5:a9:fc:37:b4:8c:b0:48:87:95:50:e8:8a:
                    b4:d5:b6:84:d5:ab:21:71:1d:55:6c:dc:05:0e:6b:
                    7d:7f:e1:3a:43:ec:27:0f:1e:a9:3f:de:de:cc:3e:
                    61:06:8f:6e:ac:94:19:04:d3:c9:2e:50:16:0e:ef:
                    4d:d2:7c:ec:1b:c7:f4:ef:98:24:dc:0f:f6:0d:e7:
                    59:12:5e:9e:6d:3b:14:8f:08:59:2b:5f:4c:f1:89:
                    f3:b5:b4:52:a8:59:8c:02:88:b9:20:6e:dc:dc:1a:
                    f3:b9:18:9b:45:33:ff:1e:97:6d:c9:c0:cf:c7:f9:
                    f5:51:80:2e:52:16:12:42:56:a9:33:70:71:c0:ee:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A6:AB:90:DD:A2:A7:F5:B9:72:68:F8:B1:AD:FB:A2:62:F6:39:14
            X509v3 Authority Key Identifier:
                keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:33:f1:3f:90:d0:fd:c0:75:61:fa:17:96:8d:1d:de:46:
         53:d2:fd:69:8a:38:42:a7:ed:fb:1a:fc:20:a1:14:c3:bf:cd:
         78:7a:ee:49:47:7b:66:01:77:c1:d3:12:2e:36:82:35:13:88:
         07:fb:eb:36:22:cb:2b:7e:c0:44:40:d1:7d:e0:8d:16:3e:a8:
         ba:64:a8:fe:fc:c0:6e:12:2c:a0:b2:9e:c0:f1:e1:2b:a0:b8:
         3d:83:d6:6e:9a:d4:37:32:cd:11:a4:73:58:a7:57:6b:e5:be:
         94:73:da:e7:21:0e:d7:b6:db:5c:5d:32:08:34:2b:00:d2:8f:
         93:39:d7:5b:84:a0:fc:bb:2f:bb:7c:89:c1:fc:09:9e:f9:3b:
         8b:1c:83:d9:2e:49:5f:d8:5d:ab:e4:ca:c5:56:68:42:cd:a3:
         8b:ea:16:05:ac:27:88:dc:1d:e6:09:c4:25:ed:8c:09:c9:6b:
         f8:f5:ed:6b:10:80:69:c2:fc:7b:eb:d6:29:2f:a7:32:ce:eb:
         14:fa:c3:77:11:70:af:28:cb:5d:11:aa:f7:4f:a5:1c:5e:04:
         be:dd:e1:f9:6a:74:c4:52:55:3a:c0:67:d6:76:c2:94:58:12:
         c2:ff:82:e5:be:23:19:ef:db:5b:5b:bd:a3:9e:01:a2:4c:5c:
         94:de:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:16 2025 by rpki-client