This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
File:                     9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json)
Hash identifier:          Br8AyMzkAcs1VV/LEGmHh74vFZFUY7gTFVKKt5L71WU=
Subject key identifier:   C2:01:08:52:57:CF:B5:6B:CD:71:26:2C:99:99:B4:E8:F2:4D:0F:62
Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1
Certificate issuer:       /CN=9A8CDCA9443D140D02860AA0070928656A172CE1
Certificate serial:       01BDC55C3625CDE93F9E11B26735EA160DC0B05A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
Manifest number:          0347
Signing time:             Mon 22 Dec 2025 20:33:49 +0000
Manifest this update:     Mon 22 Dec 2025 20:28:49 +0000
Manifest next update:     Tue 23 Dec 2025 22:48:49 +0000
Files and hashes:         1: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: 8R4rvXI+iMslyFXB4PeOWRFCLmpgdZrCcLVZ5KHaVfI=)
                          2: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: 6QI59QFSBypQTZ5kO9smMt1xwKHCr2mkAkTRBmyy6jQ=)
                          3: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: ZqrOslqYWLGFsmKU89MhLS+hYRFBqQJ88vZlR3GwnD8=)
                          4: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: UXdHA797b5kGmZTBMIoKW3ejH3LItHlI0iAJwdYv0OA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl
                          rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 22:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bd:c5:5c:36:25:cd:e9:3f:9e:11:b2:67:35:ea:16:0d:c0:b0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1
        Validity
            Not Before: Dec 22 20:28:49 2025 GMT
            Not After : Dec 23 22:48:49 2025 GMT
        Subject: CN=C201085257CFB56BCD71262C9999B4E8F24D0F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:d5:c3:4a:8b:d8:eb:b9:22:5e:ff:e0:ab:
                    2d:79:5a:ae:c2:6f:71:2e:c1:d9:66:0b:b1:dc:43:
                    90:53:03:2e:da:7b:e7:d4:55:2d:f8:bc:bf:19:96:
                    52:6a:e3:10:c9:1d:d5:c5:93:c7:89:d8:0d:27:69:
                    e4:74:9d:44:16:0c:fd:a1:85:82:2c:8c:b4:8f:21:
                    ce:08:8b:39:9d:69:7b:ef:04:1c:44:91:4b:51:0b:
                    d8:aa:23:c2:c0:a2:06:06:87:b0:68:72:a1:9c:08:
                    64:11:e7:32:bf:96:8b:e9:69:2d:4d:a8:d1:0b:21:
                    43:ad:bc:97:a9:81:8e:b8:eb:8b:cf:63:bb:c7:16:
                    4d:76:1a:7a:a2:ae:a8:14:80:c1:db:66:9e:c9:0d:
                    a3:98:d4:a0:9a:eb:39:2e:bf:ef:d2:13:9a:6a:dc:
                    d1:ee:ed:02:2e:b4:52:e1:59:66:9e:ce:08:57:75:
                    42:b0:8f:09:ce:9f:23:7b:05:0d:73:54:3b:38:67:
                    27:42:71:d2:3a:3b:43:6f:43:e2:e5:b9:42:84:9f:
                    39:00:3a:0d:94:ac:c2:cf:28:13:3f:f3:14:e0:4e:
                    eb:05:56:64:96:a2:9e:49:80:fc:47:1f:6a:e9:d4:
                    fe:84:6b:75:70:3b:f5:92:5b:0a:c9:5b:84:28:aa:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:08:52:57:CF:B5:6B:CD:71:26:2C:99:99:B4:E8:F2:4D:0F:62
            X509v3 Authority Key Identifier:
                keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:df:4f:c6:53:97:03:34:0e:75:80:a5:1c:0e:cb:d5:a7:d0:
         e8:2e:bc:79:a1:26:5d:8d:e0:9f:a2:4c:59:98:32:4e:cc:66:
         61:d6:37:46:b2:ec:23:bd:92:59:26:c6:00:4e:0b:58:36:24:
         56:9f:fe:03:20:f1:94:63:67:00:b6:fc:1e:98:da:a0:85:6b:
         e3:2e:11:b4:01:e9:31:c1:71:d2:2f:5d:b2:0c:e6:5e:ae:cd:
         6d:31:aa:71:75:9e:fd:a7:57:49:79:c2:21:55:b2:bf:45:b1:
         18:97:89:81:96:77:e4:f9:e6:e8:61:f7:34:a1:44:de:98:43:
         93:49:ae:49:a2:3e:1b:fd:80:f4:0a:e4:75:b4:5e:c3:bb:2d:
         82:08:6b:a9:9a:d2:f6:dc:df:a9:da:e5:01:05:19:c9:24:e6:
         da:95:71:3f:9d:51:80:9d:4e:5f:fd:37:23:16:b0:c4:e4:0e:
         50:20:7c:a5:ed:2e:ab:bc:42:7d:5e:01:ca:bb:f3:54:d4:50:
         89:35:ce:ba:1d:d3:53:cc:00:2e:7e:89:9c:64:8d:cb:74:dd:
         6b:22:93:04:f0:ef:fe:06:44:71:23:a8:ae:95:8d:ca:78:7b:
         63:ff:e8:94:d2:e4:46:5e:b0:01:fd:2a:47:21:29:da:42:6e:
         68:d1:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:05:53 2025 by rpki-client