This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
File:                     8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft (raw, json)
Hash identifier:          bsiTWwcganvguocZ5sPCBAlQ6eQG30DPPDHWsIFQxTw=
Subject key identifier:   12:03:20:9C:6D:E3:4B:8B:DF:EE:A8:F6:67:66:81:F1:F0:1A:C9:ED
Authority key identifier: 8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6
Certificate issuer:       /CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
Certificate serial:       2F03778320D3535DFF457D35BBB1AE42D5C90455
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
Manifest number:          01FA
Signing time:             Sat 20 Dec 2025 03:22:46 +0000
Manifest this update:     Sat 20 Dec 2025 03:17:46 +0000
Manifest next update:     Mon 22 Dec 2025 05:14:46 +0000
Files and hashes:         1: 8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl (hash: U7OQ2F7NAWZBA+6KAsV2jJ0jTOeE/7WVP3OqOHW9Uwc=)
                          2: 3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa (hash: iAu4Sn6+WMKF8OyDUh0Pxwmo0/SpaqAMrb8UWhWUOZQ=)
                          3: 323830343a366461303a3a2f33322d3438203d3e20323730353435.roa (hash: Ct24ruh2eqUcDib0GE7nKREbyCTGd+91Me4Db7yUB5A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl
                          rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:77:83:20:d3:53:5d:ff:45:7d:35:bb:b1:ae:42:d5:c9:04:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
        Validity
            Not Before: Dec 20 03:17:46 2025 GMT
            Not After : Dec 22 05:14:46 2025 GMT
        Subject: CN=1203209C6DE34B8BDFEEA8F6676681F1F01AC9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:bd:d8:39:ea:cc:c9:2b:fc:2c:7b:df:04:
                    7a:7d:8f:63:e8:9a:f4:80:4c:7a:1d:d9:ec:5b:8c:
                    e3:58:10:39:28:da:6f:e3:19:0a:af:5d:fa:d0:3f:
                    5e:a8:7e:02:2e:eb:7b:50:ce:17:cf:24:e8:60:a4:
                    1a:67:0d:5e:3c:00:1d:09:f9:39:48:d4:41:c9:a6:
                    a0:32:3c:0d:74:01:fa:02:a7:d6:72:1c:93:0d:50:
                    bf:5f:09:84:de:8f:a0:f0:25:b4:b9:44:38:de:a2:
                    c4:01:d1:b0:51:d3:fb:26:05:d8:61:77:9e:bb:4d:
                    35:cf:c7:fd:b1:11:2e:5c:7f:a8:8a:72:5f:6e:1c:
                    8d:d1:62:ee:f0:f0:d2:85:4b:4d:c8:5b:3b:db:3c:
                    f9:fc:58:81:43:10:8a:26:b3:a5:96:d9:b0:da:15:
                    3b:76:6f:81:8f:eb:aa:9c:c0:e3:e2:12:eb:47:d2:
                    d2:d1:a5:28:35:44:49:cf:11:8a:ff:c1:c5:42:1a:
                    ad:38:14:09:eb:33:5b:63:a4:ae:12:c3:78:44:15:
                    03:2f:ed:1f:bb:1d:ec:4c:f4:92:a3:f6:35:b9:d8:
                    da:9b:a0:09:ca:7d:e0:fa:73:f3:19:4e:67:44:fe:
                    0b:d9:e6:2d:8c:4b:cc:24:93:de:a3:4b:b8:ba:13:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:20:9C:6D:E3:4B:8B:DF:EE:A8:F6:67:66:81:F1:F0:1A:C9:ED
            X509v3 Authority Key Identifier:
                keyid:8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:42:6f:88:f5:36:b1:06:fb:70:61:91:75:b6:75:14:da:
         ad:c6:35:a1:64:46:bb:1b:42:2d:30:6e:9a:37:54:35:47:9d:
         db:ea:7e:3e:41:ad:7f:d3:c7:a5:ae:da:54:1a:76:f9:27:93:
         ec:7c:bc:49:f9:7b:6d:d1:5e:1a:50:ac:e0:06:46:5b:57:11:
         63:b5:1d:d7:19:0e:bc:39:99:4d:93:21:42:35:b9:01:37:75:
         e6:d5:a9:f1:b7:3f:8f:0b:e4:a0:88:60:c7:c7:3e:03:6d:af:
         29:25:38:00:c7:86:aa:6b:59:7e:cd:7c:c1:aa:37:0f:df:8f:
         2d:03:12:aa:77:92:9c:61:0e:51:e8:1f:d7:b2:57:d2:6a:94:
         8b:cc:bc:8c:d8:a6:c7:fb:05:7d:f9:f6:e1:df:41:61:1d:da:
         f8:a5:f1:be:66:dc:72:78:c1:b5:65:93:94:91:c1:62:1d:e7:
         95:88:83:84:3d:94:16:8d:7a:e4:ac:f2:95:c5:05:8f:30:28:
         74:60:2e:b9:46:a9:79:48:4e:9d:9c:c5:38:1f:76:cf:de:bc:
         a8:57:20:97:5d:49:4c:7e:1d:f9:84:38:ca:51:70:03:86:c5:
         ba:f3:d8:1c:16:19:e6:77:bc:3b:46:0e:06:ec:ed:a7:a5:ad:
         b6:52:4b:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIULwN3gyDTU13/RX01u7GuQtXJBFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFDNDUwMzQ0MDI1M0M0QTRCNDcxQ0NDMUI1REI5RDZG
MUVDNkFDNjAeFw0yNTEyMjAwMzE3NDZaFw0yNTEyMjIwNTE0NDZaMDMxMTAvBgNV
BAMTKDEyMDMyMDlDNkRFMzRCOEJERkVFQThGNjY3NjY4MUYxRjAxQUM5RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCler3YOerMySv8LHvfBHp9j2Po
mvSATHod2exbjONYEDko2m/jGQqvXfrQP16ofgIu63tQzhfPJOhgpBpnDV48AB0J
+TlI1EHJpqAyPA10AfoCp9ZyHJMNUL9fCYTej6DwJbS5RDjeosQB0bBR0/smBdhh
d567TTXPx/2xES5cf6iKcl9uHI3RYu7w8NKFS03IWzvbPPn8WIFDEIoms6WW2bDa
FTt2b4GP66qcwOPiEutH0tLRpSg1REnPEYr/wcVCGq04FAnrM1tjpK4Sw3hEFQMv
7R+7HexM9JKj9jW52NqboAnKfeD6c/MZTmdE/gvZ5i2MS8wkk96jS7i6E6OtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUEgMgnG3jS4vf7qj2Z2aB8fAaye0wHwYDVR0j
BBgwFoAUisRQNEAlPEpLRxzMG1251vHsasYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnRNTUpuVkNHZm5ZV3c5NDhhd0xuem1pS0RiS3hremE0eUtVM3FnRFRV
bkIvMC84QUM0NTAzNDQwMjUzQzRBNEI0NzFDQ0MxQjVEQjlENkYxRUM2QUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQzQ1MDM0NDAyNTNDNEE0
QjQ3MUNDQzFCNURCOUQ2RjFFQzZBQzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnRNTUpuVkNHZm5ZV3c5NDhhd0xuem1pS0RiS3hremE0eUtVM3FnRFRVbkIvMC84
QUM0NTAzNDQwMjUzQzRBNEI0NzFDQ0MxQjVEQjlENkYxRUM2QUM2Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWf1Cb4j1NrEG+3BhkXW2dRTarcY1oWRGuxtCLTBumjdUNUed2+p+PkGtf9PH
pa7aVBp2+SeT7Hy8Sfl7bdFeGlCs4AZGW1cRY7Ud1xkOvDmZTZMhQjW5ATd15tWp
8bc/jwvkoIhgx8c+A22vKSU4AMeGqmtZfs18wao3D9+PLQMSqneSnGEOUegf17JX
0mqUi8y8jNimx/sFffn24d9BYR3a+KXxvmbccnjBtWWTlJHBYh3nlYiDhD2UFo16
5KzylcUFjzAodGAuuUapeUhOnZzFOB92z968qFcgl11JTH4d+YQ4ylFwA4bFuvPY
HBYZ5ne8O0YOBuztp6WttlJLKA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:10:10 2025 by rpki-client