This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft
File:                     5A3AE20076D062C545A8A8573997926813E925D8.mft (raw, json)
Hash identifier:          vN54dP/mYkaY0qLvGqbfMIzK4dOUsVr/N6w8IKkzjnU=
Subject key identifier:   3A:B2:93:A0:B5:C5:F3:6A:B6:D6:73:2A:2E:9E:9F:78:00:8A:82:33
Authority key identifier: 5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8
Certificate issuer:       /CN=5A3AE20076D062C545A8A8573997926813E925D8
Certificate serial:       604FFA9F9CB6AED9AC641152139CF843D6E826DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft
Manifest number:          021F
Signing time:             Thu 18 Dec 2025 19:56:42 +0000
Manifest this update:     Thu 18 Dec 2025 19:51:42 +0000
Manifest next update:     Fri 19 Dec 2025 23:16:42 +0000
Files and hashes:         1: 34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (hash: 6W+sBJcJZ2b6bj5RsmyJFMfqEinjpbph4IeKP9qOa9U=)
                          2: 5A3AE20076D062C545A8A8573997926813E925D8.crl (hash: ExEHgwNRZZW5VbFAsHGOkN0U0OnQAg7B0ppbzUH3hwQ=)
                          3: 323830343a356437343a3a2f33322d3438203d3e20323638393733.roa (hash: MsKHn0SiETNQZVMd+4wWyPuOBT80tvdac+Ej9lHHtR0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl
                          rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 23:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4f:fa:9f:9c:b6:ae:d9:ac:64:11:52:13:9c:f8:43:d6:e8:26:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3AE20076D062C545A8A8573997926813E925D8
        Validity
            Not Before: Dec 18 19:51:42 2025 GMT
            Not After : Dec 19 23:16:42 2025 GMT
        Subject: CN=3AB293A0B5C5F36AB6D6732A2E9E9F78008A8233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:7c:9e:02:f4:35:11:23:68:6a:9d:17:75:
                    78:f1:51:e5:be:e4:91:ef:e7:78:04:62:db:3b:2c:
                    95:c4:6a:c4:72:78:00:0d:30:04:e1:ff:c3:b9:b3:
                    f1:1d:58:58:e9:07:8c:c6:ab:23:da:e8:46:80:58:
                    86:09:14:ff:bf:10:4a:65:b5:4c:6f:96:fe:1f:93:
                    bc:51:92:3f:d6:74:cb:ec:46:38:1f:61:6f:78:75:
                    b9:0e:42:c2:6c:b7:8d:cf:26:f2:94:a9:c8:29:1b:
                    50:15:42:2b:4b:04:34:20:62:08:86:6b:6b:46:5e:
                    32:23:c5:c0:2b:16:c9:81:53:f8:e6:bb:e6:de:cf:
                    97:49:d5:27:f5:bd:2b:6c:36:4f:ba:e8:1d:47:5a:
                    ae:94:be:fd:46:e4:b7:c9:94:6c:26:54:c9:47:6e:
                    9e:9a:1a:a2:67:c9:cf:5c:0f:4a:d8:9e:ee:7a:0d:
                    76:b4:b2:48:01:63:39:46:e0:a9:da:cf:7a:72:8f:
                    43:cd:b1:05:fd:22:33:52:35:c8:47:6a:44:f7:58:
                    d0:ae:88:6e:28:78:4e:ce:58:c3:68:53:3b:db:b1:
                    27:30:43:1b:95:4b:c4:cc:6b:a3:af:aa:2a:4d:61:
                    4b:8e:44:e1:55:fa:cc:55:df:ba:0d:eb:6a:2f:e9:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B2:93:A0:B5:C5:F3:6A:B6:D6:73:2A:2E:9E:9F:78:00:8A:82:33
            X509v3 Authority Key Identifier:
                keyid:5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:06:9a:6f:ff:bc:30:e7:71:3c:02:f4:c8:94:65:35:f6:fb:
         50:27:87:ce:96:76:47:ea:29:95:d3:9f:f4:1a:fc:0f:e2:07:
         60:1e:d9:f6:e4:e9:c9:61:27:79:d6:ee:be:f3:57:00:2a:af:
         7a:32:af:55:b5:de:7e:e6:48:c6:7f:4a:f2:18:94:a0:ae:71:
         3e:36:4e:4e:d7:63:f4:0d:1b:19:9e:d4:88:f8:8a:31:c6:cf:
         98:a5:72:75:68:27:2f:5c:1b:47:c5:e6:5a:f1:c2:20:0b:5c:
         61:05:64:81:fb:ee:a2:14:6a:94:a8:76:88:7b:c6:00:df:ef:
         0f:66:a4:9a:6a:97:fd:34:63:21:0c:49:bd:20:be:3d:c5:c3:
         04:f6:7a:d5:95:85:d8:4a:15:ba:1c:0b:82:13:b9:28:a0:3b:
         34:49:d1:6b:b9:63:e6:38:3c:15:08:05:8c:0a:71:1d:7c:34:
         0b:bf:8b:db:95:7b:cd:e5:f0:99:83:0a:ab:92:2f:36:11:7f:
         2a:4e:dc:dc:47:0b:ce:bf:bf:44:f6:1c:b5:17:42:fe:53:cc:
         4f:ec:ee:2c:0f:7c:9c:3d:79:5a:af:0d:55:00:1b:1f:06:10:
         d3:ff:98:36:df:72:de:50:64:d6:e0:ca:a2:92:b3:73:99:c2:
         02:56:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:59:44 2025 by rpki-client