This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
File:                     A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft (raw, json)
Hash identifier:          qxi3u/WH+IxsF7sPln+Lag6++rsvOI88eXE8f63WVwA=
Subject key identifier:   D8:61:37:DA:EB:54:56:DC:33:C3:FC:8A:86:74:E3:17:97:5C:24:57
Authority key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
Certificate issuer:       /CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
Certificate serial:       0D8C122F343CF931EF9D3E7F2AEB2F9E2F4FC979
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
Manifest number:          0344
Signing time:             Thu 18 Dec 2025 18:39:17 +0000
Manifest this update:     Thu 18 Dec 2025 18:34:17 +0000
Manifest next update:     Fri 19 Dec 2025 20:42:17 +0000
Files and hashes:         1: 323830343a333635303a3a2f33322d3438203d3e20323636333431.roa (hash: NPoEvucmg7gk/rHkLdAoTXuA7M1Mvusbw5RdqYB0WKI=)
                          2: A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl (hash: 3630kZ57X/sWgXGlDAVxUpaZDVEqzQ1Ud2Z/bXMey4Q=)
                          3: 3137302e3233392e36302e302f32322d3234203d3e20323636333431.roa (hash: zu/wmGjXObhDRMO6HzLv9WqtIfTWUWAgcIF9FIZJY8U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl
                          rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8c:12:2f:34:3c:f9:31:ef:9d:3e:7f:2a:eb:2f:9e:2f:4f:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
        Validity
            Not Before: Dec 18 18:34:17 2025 GMT
            Not After : Dec 19 20:42:17 2025 GMT
        Subject: CN=D86137DAEB5456DC33C3FC8A8674E317975C2457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:1c:a2:0f:cf:eb:9b:7c:3c:2f:f3:48:2f:
                    41:a5:b3:ec:29:3f:c4:6f:6e:32:ac:0e:59:df:51:
                    c1:c8:fb:1c:c0:cc:90:1a:59:e6:e0:18:e6:fe:6f:
                    00:ea:f4:fe:89:54:75:a1:6e:fe:ae:63:6b:11:4b:
                    e3:ae:ae:65:fb:a1:e8:43:26:c0:2c:4d:91:ad:8e:
                    8f:f1:7c:29:59:90:88:88:49:30:f6:01:b5:97:2e:
                    7f:29:58:7f:96:57:68:30:b3:73:9f:f3:e1:29:e9:
                    55:25:af:02:04:5d:0f:81:e6:c3:50:64:3c:03:01:
                    ff:6a:dd:47:3a:16:3c:70:44:77:61:0d:c1:11:95:
                    73:e1:d1:ac:4a:d3:e3:79:9e:12:f8:ae:1c:a4:a7:
                    8b:b8:a2:99:06:75:f1:d0:23:e6:17:72:6b:32:15:
                    32:3a:49:8b:ea:f2:c1:a8:3a:6c:de:b6:ae:6c:0f:
                    56:e9:31:38:41:1a:44:e4:55:ef:77:b1:21:ab:ba:
                    43:d1:2a:73:0b:04:32:fd:46:3b:74:67:49:99:a3:
                    a7:ad:7b:05:1e:4a:f0:a8:37:fd:cd:1e:bc:d9:56:
                    65:2e:84:23:8b:61:25:08:51:1c:a3:df:91:78:a1:
                    c1:36:fb:93:7b:fb:65:4c:7b:c3:3f:2f:70:19:9f:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:61:37:DA:EB:54:56:DC:33:C3:FC:8A:86:74:E3:17:97:5C:24:57
            X509v3 Authority Key Identifier:
                keyid:A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:b5:92:4e:b9:ca:45:2c:f5:d3:16:4a:bc:10:48:bd:c8:
         01:fa:9a:47:47:3f:65:da:49:03:4e:f3:a6:6b:fe:7c:d0:95:
         30:81:9d:e3:18:4d:13:ee:24:06:78:ca:c7:ee:c1:30:2f:95:
         7d:9d:83:4b:d6:c9:1c:b9:04:63:5f:0b:9e:b9:a6:3b:79:af:
         d3:8d:20:da:45:91:21:d1:23:16:3f:fb:61:0b:d9:30:d0:e7:
         e0:2d:f2:67:c3:52:64:ab:54:f9:b6:6e:cf:79:01:7d:00:39:
         03:bf:7a:89:c3:91:46:b5:81:fc:81:80:50:2a:fe:46:d8:d4:
         00:53:f9:5f:d3:9f:c8:4d:ee:9d:3d:51:a9:20:c8:83:0a:aa:
         25:c4:08:38:38:f2:62:d7:7d:85:55:02:f5:f1:8b:2f:e9:26:
         88:18:60:ff:2b:d4:d5:c4:a0:df:2c:c8:9e:d7:57:85:e4:a8:
         15:d9:27:aa:c6:e3:60:05:0c:4c:19:67:4c:35:94:32:e3:8e:
         a2:d5:26:55:61:72:4b:c4:d5:fc:cc:70:6a:ca:09:5b:ee:ac:
         f5:64:89:48:19:7c:76:52:22:f9:fb:ea:5f:5e:e3:05:4e:6a:
         3e:e5:ef:04:70:66:89:97:b5:4c:77:4c:78:2e:fe:5b:90:f6:
         f3:68:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:01:33 2025 by rpki-client