This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.mft
File:                     E85D49068D2412F7E334C1E8D541787D43A203B7.mft (raw, json)
Hash identifier:          uV3nQVbHf7xFOirrKO06wCJliE9/HGFfzbUI97Hu2Vo=
Subject key identifier:   68:C7:5C:56:DF:00:90:98:6F:46:BE:9A:A4:6D:E6:4C:9D:78:D3:69
Authority key identifier: E8:5D:49:06:8D:24:12:F7:E3:34:C1:E8:D5:41:78:7D:43:A2:03:B7
Certificate issuer:       /CN=E85D49068D2412F7E334C1E8D541787D43A203B7
Certificate serial:       4DCEDD2471416261E3CCEB0918D25D666936FDCE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85D49068D2412F7E334C1E8D541787D43A203B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.mft
Manifest number:          AC
Signing time:             Wed 24 Dec 2025 05:56:26 +0000
Manifest this update:     Wed 24 Dec 2025 05:51:26 +0000
Manifest next update:     Thu 25 Dec 2025 07:31:26 +0000
Files and hashes:         1: 323830343a393439383a323a3a2f34382d3438203d3e20323734343638.roa (hash: f5OhrSgcVQQnXb9ICImlEfyoIEpE3ryCKuc96kkMl6g=)
                          2: 323830343a393439383a666630303a3a2f34302d3438203d3e20323734343638.roa (hash: hDDZ+ffCx/7/iX8vDiLMDEDSVKdQJO46N7tgs3Q5ghI=)
                          3: 323830343a393439383a3a2f33322d313238203d3e20323734343638.roa (hash: ZBKdYWmjswjXANc8t0u2HRSUfUiyG5f4spPQtBDFhVI=)
                          4: E85D49068D2412F7E334C1E8D541787D43A203B7.crl (hash: 7ZFunXcppyLG3hRSwxj52XhGodCciKto6xA8iumFpic=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.crl
                          rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85D49068D2412F7E334C1E8D541787D43A203B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 07:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ce:dd:24:71:41:62:61:e3:cc:eb:09:18:d2:5d:66:69:36:fd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85D49068D2412F7E334C1E8D541787D43A203B7
        Validity
            Not Before: Dec 24 05:51:26 2025 GMT
            Not After : Dec 25 07:31:26 2025 GMT
        Subject: CN=68C75C56DF0090986F46BE9AA46DE64C9D78D369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:a2:53:0f:fc:05:85:03:61:bd:0b:95:04:
                    14:85:3e:c4:50:b3:f8:90:e7:81:32:89:ea:4c:56:
                    d7:50:97:cb:f4:f6:80:28:08:de:c4:6c:2a:53:bb:
                    05:c9:15:5d:79:64:84:24:f9:d9:02:55:0d:65:42:
                    48:2c:48:77:f7:27:a1:ff:62:f2:b3:45:79:17:5d:
                    4f:e7:b5:07:f2:db:b7:85:9e:64:d7:a7:4d:2d:5b:
                    7a:ae:30:13:ee:d6:f5:a0:6a:d7:73:fd:26:c9:4e:
                    39:e1:3d:b3:a5:53:1c:5d:43:ae:61:13:dc:b8:de:
                    97:11:c0:7c:ee:e4:4d:83:6c:2d:fa:6d:8a:ec:48:
                    ab:50:f3:22:e9:1b:e4:92:20:30:69:34:1c:78:22:
                    67:24:14:78:85:b0:a4:fc:84:4f:6c:08:d1:02:b2:
                    23:0d:11:60:ee:6b:9e:60:62:0b:c4:be:e7:d2:61:
                    cc:ca:0c:7d:c7:08:4d:0a:74:6c:65:5b:a8:66:81:
                    64:c9:23:20:d6:1e:63:5a:6d:6e:40:ea:cc:95:77:
                    a2:aa:aa:d1:89:f7:cd:c0:85:47:b1:0f:3e:0d:a1:
                    bb:19:7f:e4:ef:b0:9d:7e:53:e2:13:61:90:05:f6:
                    cd:37:2e:48:d9:6f:94:cc:3a:5e:68:82:3b:8c:a0:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:5C:56:DF:00:90:98:6F:46:BE:9A:A4:6D:E6:4C:9D:78:D3:69
            X509v3 Authority Key Identifier:
                keyid:E8:5D:49:06:8D:24:12:F7:E3:34:C1:E8:D5:41:78:7D:43:A2:03:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85D49068D2412F7E334C1E8D541787D43A203B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuarTiH4oNNAfc6VTeTr81HDPcbcmYm676hXz2hHjVhU/0/E85D49068D2412F7E334C1E8D541787D43A203B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:42:0e:dd:cb:8f:16:59:3d:db:77:17:ed:1d:8c:64:ef:eb:
         d8:64:ce:da:c0:53:94:c2:60:c8:db:ec:26:af:49:b2:a4:17:
         21:5e:fb:f0:b1:12:e8:e6:3e:66:6d:dc:4e:dc:fb:ae:b6:60:
         4a:39:e7:3c:9b:2f:0e:b9:45:51:37:b0:47:a2:b8:fb:7a:c2:
         e5:2f:6e:6c:f8:be:af:9a:36:c6:db:ac:7a:70:7f:0c:4c:61:
         e1:fb:3e:23:ee:30:e6:31:52:8d:b8:21:88:47:41:5c:e1:53:
         9c:bf:1a:44:e3:39:e1:0d:69:95:b2:e9:a3:7e:f2:f8:a4:12:
         62:3a:da:09:d7:74:90:21:aa:ae:ab:f3:12:f3:e6:24:df:48:
         09:36:12:1c:db:f2:c2:9f:ff:0c:46:b4:7b:d6:82:ff:bd:d1:
         f0:da:a5:00:3d:da:d0:3f:b8:5b:91:70:ca:88:fb:5e:dc:6a:
         be:86:4c:6e:97:a1:40:f3:0e:26:6d:48:32:92:e0:ec:6c:c9:
         d3:07:32:0c:87:d9:49:59:f3:f2:a5:d2:b0:6f:51:15:de:36:
         b0:63:27:8c:a2:93:c5:85:75:1a:10:d4:43:5f:51:be:39:4c:
         71:2f:e6:a1:07:74:0a:3d:a0:f8:17:77:9a:b1:b2:3f:7c:7c:
         62:36:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:27:28 2025 by rpki-client