This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
File:                     CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json)
Hash identifier:          /x/dDhJt+Q71O9uj9vnaM5a4BBB04ZexRslsu4rO/rI=
Subject key identifier:   7C:E6:95:97:A4:2C:2A:40:1F:ED:9E:51:5C:1D:6B:DC:7D:7C:F3:8D
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       79A363E433F6F2A6C8862835F4AC9E9E94C16A5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
Manifest number:          035D
Signing time:             Wed 24 Dec 2025 10:11:28 +0000
Manifest this update:     Wed 24 Dec 2025 10:06:28 +0000
Manifest next update:     Thu 25 Dec 2025 10:42:28 +0000
Files and hashes:         1: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: aNY4CVp3lvUGIeehKHntmxej/dcIbSb+4GCBHrvnMk8=)
                          2: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: mPllKRKV3IA19ztcXHV1p58k2tvSt9HOsh1tvmPZK+Y=)
                          3: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=)
                          4: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: 9M2hvR/h7Gxg8IegGv35+UX8psD6fGWaDUT/8pP6YpE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
                          rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a3:63:e4:33:f6:f2:a6:c8:86:28:35:f4:ac:9e:9e:94:c1:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Dec 24 10:06:28 2025 GMT
            Not After : Dec 25 10:42:28 2025 GMT
        Subject: CN=7CE69597A42C2A401FED9E515C1D6BDC7D7CF38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:64:f1:54:20:38:c2:62:10:1b:8d:05:fe:
                    6d:f2:d2:a7:bc:80:24:30:f1:db:ea:91:44:03:c8:
                    74:b9:a2:b5:05:af:fb:fd:be:c9:b2:c5:75:14:43:
                    cd:36:0e:e6:6c:a0:52:23:23:99:99:c8:70:9e:2a:
                    c8:b0:74:db:60:31:c8:83:cb:bb:d1:38:f4:9c:ce:
                    8b:07:95:75:4c:c5:70:dc:64:b0:6e:50:b8:3d:c6:
                    22:0f:74:e3:19:cb:f9:3b:c7:7f:51:3e:9c:84:17:
                    7b:63:81:3a:bf:92:fd:3d:f1:91:09:58:a3:32:09:
                    65:da:74:55:da:37:08:9b:a3:c6:c1:8d:2a:b0:b8:
                    2d:14:a9:33:2d:70:a1:00:0f:1a:1f:19:50:ec:82:
                    e5:9b:4f:56:e9:1c:a0:82:a3:84:8f:b6:88:27:a6:
                    f7:42:8f:3c:14:f2:e8:f8:ea:35:0d:e5:43:7f:24:
                    42:cb:20:24:29:95:7d:58:75:d6:cd:27:63:cd:2f:
                    42:70:15:c7:b1:55:5e:c4:42:8f:91:9f:4f:c7:e5:
                    6d:98:c1:4a:c4:ea:36:f4:fa:83:d3:7b:65:7a:89:
                    21:32:79:da:2b:b0:b2:c6:66:5d:13:b5:00:2c:66:
                    1b:fc:9e:e2:16:12:2f:d4:8c:d1:7c:d9:e4:81:d0:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:95:97:A4:2C:2A:40:1F:ED:9E:51:5C:1D:6B:DC:7D:7C:F3:8D
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:46:0d:b3:b1:f6:0a:9e:7c:c8:55:5d:84:a2:7f:97:67:22:
         3d:01:81:69:7d:fc:e8:c2:54:81:c6:48:69:3b:42:09:df:02:
         59:66:8a:06:73:58:c0:d7:e5:08:bd:0c:b8:ce:7a:d3:f2:ea:
         3e:34:13:f3:f2:9a:47:d1:e6:a1:3e:85:0b:2e:13:eb:ac:b8:
         4d:00:a5:e2:37:88:05:36:ce:a3:9d:d0:41:0a:07:42:47:d6:
         8a:b2:fa:36:2b:d0:e2:8d:a8:37:59:13:02:6c:47:c8:d6:ea:
         df:2c:10:05:e7:e9:79:a5:7a:6f:8d:75:ee:22:3f:4a:d2:96:
         c3:19:74:b9:39:7b:33:aa:36:6c:bd:14:52:b2:df:fe:ae:fd:
         a7:33:8f:1d:77:59:3b:7e:c2:5d:5d:bc:ac:9c:fd:a0:2f:49:
         6c:f2:9f:8e:22:f7:5d:d9:ca:88:52:4b:18:9a:18:f8:4a:bd:
         24:99:b0:b3:23:d2:04:8d:81:3a:00:3f:9f:3e:dc:20:b8:18:
         63:fc:a5:2d:40:f0:99:2c:05:99:23:62:8f:76:6f:7a:85:19:
         05:db:22:7c:41:e7:f0:99:8d:5b:df:71:1b:fc:4a:3c:6a:58:
         a8:87:e7:44:7f:b9:27:b2:0f:35:59:b4:82:1a:ef:a5:fa:a4:
         cc:a6:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:58:25 2025 by rpki-client