This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
File:                     D7845391014F7F9470788EC727561382C9EE8439.mft (raw, json)
Hash identifier:          U45yrD5H5sjmsZJxPIEctMy0lAchfb8s2V4pk0AdUlA=
Subject key identifier:   E8:F0:FA:E0:3E:C0:E1:0A:1F:C1:78:4F:C2:B9:59:9C:A8:68:57:82
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Certificate issuer:       /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial:       285748E9271511550D830A4172C8954F68BEA4A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
Manifest number:          0157
Signing time:             Thu 18 Dec 2025 19:12:57 +0000
Manifest this update:     Thu 18 Dec 2025 19:07:57 +0000
Manifest next update:     Fri 19 Dec 2025 20:27:57 +0000
Files and hashes:         1: 323830343a383336343a3a2f33322d3332203d3e20323732313935.roa (hash: rgvbKpGGOBBwQiU4IYW5VEIzyEidbzoZXS4wrkDPyRQ=)
                          2: 323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa (hash: hMS/g2zUJ8tEuCLfr1w0Pne2zylTOnyo12ThqYKt5gY=)
                          3: 323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (hash: R7pr90YgpFFP5Nc7qri0o39IOqCfCC6qNNTtfKj76zk=)
                          4: 323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (hash: GHlEJYoOK3UZfIQkY3Z0DdCy5FiSdSOVhsz6I91euIc=)
                          5: D7845391014F7F9470788EC727561382C9EE8439.crl (hash: 7qFXW+ubw+20ZvO2bgZuGiw09KQ8+zYSbH/jZibCeT0=)
                          6: 323830343a383336343a3a2f33342d3334203d3e20323732313935.roa (hash: OVa1a5v+QoZlIYGiHT9SrqRCIw87bhwKdHhHZ59h0Vw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 20:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:48:e9:27:15:11:55:0d:83:0a:41:72:c8:95:4f:68:be:a4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
        Validity
            Not Before: Dec 18 19:07:57 2025 GMT
            Not After : Dec 19 20:27:57 2025 GMT
        Subject: CN=E8F0FAE03EC0E10A1FC1784FC2B9599CA8685782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:e5:a9:ec:a2:1c:3c:a0:36:73:a1:7f:70:
                    59:e0:d0:d1:f9:70:2c:e8:c4:8e:20:54:fa:1d:1e:
                    c8:78:d4:60:4e:45:57:4d:7f:aa:4d:21:c9:18:ce:
                    fd:f9:dc:b5:4c:60:4d:ef:0e:2a:b1:9c:43:e8:7d:
                    79:30:37:52:d0:1d:cd:17:bd:3e:84:9a:fc:0d:a8:
                    5c:86:6a:f5:59:26:4c:be:32:9c:0d:7a:98:39:66:
                    89:69:ca:d4:4d:02:03:38:f0:db:47:d9:8a:96:9d:
                    06:f7:d8:5f:16:2c:a9:22:1d:b2:26:fd:6e:11:e4:
                    f7:56:ef:35:35:c4:76:16:18:14:ab:ee:9b:f9:eb:
                    97:d9:47:81:24:2f:c0:57:5e:b5:78:63:de:1e:e8:
                    e1:2d:0f:ef:ed:eb:da:89:a0:ac:ec:f6:22:cb:77:
                    8f:0e:c3:a3:40:d5:59:5e:7a:4a:39:48:7b:a9:79:
                    41:d3:7c:9b:81:7b:82:c7:ff:2d:55:91:2e:2a:fe:
                    18:00:4a:85:19:11:50:9f:fb:f7:97:c1:9d:97:9d:
                    39:a4:34:1d:47:f1:80:63:d4:0c:f5:0f:f7:23:2b:
                    83:cb:6f:e8:fc:c7:55:3a:0c:d5:a1:3e:0c:39:52:
                    ef:c6:e4:3a:9e:13:2c:4b:5e:f3:34:68:54:40:03:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:FA:E0:3E:C0:E1:0A:1F:C1:78:4F:C2:B9:59:9C:A8:68:57:82
            X509v3 Authority Key Identifier:
                keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:60:b9:91:6f:10:d3:7e:8c:94:0a:d1:2e:c1:5f:c2:ed:d5:
         30:fd:87:b6:9e:20:1c:7d:5d:90:8b:99:7f:de:7d:28:a5:ea:
         ae:0b:b0:9f:95:44:ff:0e:b7:d0:50:3f:91:e9:20:3c:d8:3b:
         fa:3b:a2:26:37:75:84:3c:b0:c7:cb:4e:b8:1b:32:f4:65:34:
         07:76:ee:a6:38:5d:b1:89:b2:c2:6c:04:6f:29:ff:49:b4:1d:
         16:28:3c:d0:66:1f:02:76:c9:e9:ca:7e:a0:db:1b:74:33:96:
         d0:05:2d:75:04:e3:ab:15:c8:43:c0:a1:6a:96:4d:4f:98:c3:
         aa:bc:ac:40:d0:80:fa:e8:ce:07:a4:43:12:fd:d1:92:11:19:
         ff:f1:ab:08:89:42:3f:e4:43:2c:90:ef:e5:8c:1e:fd:30:c4:
         c2:43:1d:3d:b5:88:0c:22:11:92:21:0e:cb:97:5a:32:14:65:
         59:77:e7:56:82:c3:e6:b6:04:b0:0c:80:03:51:18:b4:dc:ab:
         35:15:c1:33:a0:8c:57:22:97:05:26:89:b5:7e:32:d5:42:d4:
         7e:9c:43:3e:a0:62:d5:b6:ff:f5:05:7f:33:2c:44:e8:b0:b3:
         11:da:ef:e4:a9:f4:e1:56:2f:b4:a5:5f:45:29:a4:62:09:2e:
         a9:d1:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:39:04 2025 by rpki-client