This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
File:                     8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft (raw, json)
Hash identifier:          b80X9niLOHtNeZ+24OiyGMQ6EOkxgan+XqYLjLeOkW0=
Subject key identifier:   BF:80:36:73:03:DF:92:41:E1:7C:A5:7A:E7:B8:5D:F2:BB:C1:67:32
Authority key identifier: 8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3
Certificate issuer:       /CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
Certificate serial:       513CE1D7B8C6CC0E1372B2BDE48B30EC5710ABF0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
Manifest number:          BC
Signing time:             Tue 23 Dec 2025 23:34:15 +0000
Manifest this update:     Tue 23 Dec 2025 23:29:15 +0000
Manifest next update:     Thu 25 Dec 2025 02:56:15 +0000
Files and hashes:         1: 8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl (hash: krH720qbYwJxIhMb+it1bzh4XZh2wL6wAAWpN6QzS9E=)
                          2: 323830343a353439303a3a2f33322d3438203d3e20323638363538.roa (hash: i83s5u9huhbJHapQ9/OBbf/QCqrm4HELSWsH4LVEbM4=)
                          3: 34352e3136352e36302e302f32322d3234203d3e20323638363538.roa (hash: /ReUzT2vFRsB7AzdAhivYPC6glBsbzMTBCpkRANlGEQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl
                          rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 02:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3c:e1:d7:b8:c6:cc:0e:13:72:b2:bd:e4:8b:30:ec:57:10:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
        Validity
            Not Before: Dec 23 23:29:15 2025 GMT
            Not After : Dec 25 02:56:15 2025 GMT
        Subject: CN=BF80367303DF9241E17CA57AE7B85DF2BBC16732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:bf:b8:57:3f:f0:0a:35:88:d0:a1:26:5a:
                    41:ea:1b:96:3c:e1:a6:06:f4:68:85:07:f7:01:d4:
                    a8:3c:27:14:bd:44:9a:99:df:47:62:7c:a7:1a:19:
                    03:26:bb:a6:bf:39:7a:d9:28:91:a1:c5:bf:0a:4c:
                    64:9e:06:a1:20:18:57:b8:9d:58:75:92:d7:62:2a:
                    fc:20:17:a1:f4:80:68:65:32:57:30:71:5f:91:78:
                    a6:4d:6b:59:26:47:48:b2:b4:cc:18:bf:d4:41:e8:
                    53:90:9d:b4:d4:b2:e8:ce:61:9f:0b:a4:19:c9:ac:
                    0c:03:39:fd:ec:9c:d0:4b:6d:b3:fa:c0:65:3b:31:
                    e9:a7:1e:c9:2f:34:e8:56:cc:50:6d:48:2c:ad:70:
                    f0:6c:fa:d1:17:42:e8:6c:19:36:ae:0e:f6:f8:db:
                    8c:03:31:73:34:06:73:c5:18:30:4a:cf:59:4e:37:
                    1b:55:4d:4a:0e:27:23:e8:0e:04:57:d6:02:ea:bc:
                    9a:a9:77:70:49:8c:a8:34:ef:5e:93:85:ba:93:90:
                    cf:49:eb:36:57:4c:51:06:3e:59:5e:42:27:39:ba:
                    dd:e7:f2:f3:62:d6:5d:b3:41:74:fc:25:ae:2c:11:
                    34:66:9d:3d:38:fd:f6:76:15:57:74:92:07:84:b9:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:80:36:73:03:DF:92:41:E1:7C:A5:7A:E7:B8:5D:F2:BB:C1:67:32
            X509v3 Authority Key Identifier:
                keyid:8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:ae:40:c4:d5:d8:67:90:67:c3:a0:ad:72:ae:2c:98:34:
         d6:a3:69:6e:7c:c4:aa:81:63:be:d4:8a:90:17:ae:74:ab:5a:
         d4:ff:aa:c4:4a:56:65:a1:45:fd:4a:1d:91:ce:e9:fd:ff:c9:
         56:8d:b1:86:61:0b:a1:2e:57:ee:17:15:4f:a2:99:5b:a5:f9:
         5e:e4:7b:14:50:fd:b6:24:42:39:19:86:b7:7c:01:76:10:4c:
         0a:6f:d2:56:1f:2e:4d:f0:56:89:5f:bd:de:87:0f:22:cc:8c:
         f4:19:f5:01:b2:9e:b5:da:6f:9e:e9:c7:dc:09:5e:d5:7a:c8:
         96:d8:9b:59:c9:55:2b:9e:2d:1d:b4:89:81:61:e4:27:77:70:
         71:9d:9f:97:53:b5:b5:09:eb:bc:7e:4f:32:9a:5f:cc:00:db:
         2b:ed:96:58:13:21:2d:b4:2c:c8:38:17:a2:6d:6e:6d:7e:d5:
         62:7c:d4:86:8c:fb:6d:7f:be:b9:89:29:4e:e6:00:74:86:ed:
         30:04:12:a7:ab:22:b9:54:68:e2:d5:37:4f:10:8c:e8:53:cc:
         a4:c3:01:cc:51:14:53:62:49:48:38:5a:95:dd:98:10:16:79:
         b1:09:fd:4f:ba:4c:55:d9:5e:24:2e:c3:6f:0b:ef:36:d8:32:
         db:42:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:11 2025 by rpki-client