This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
File:                     A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft (raw, json)
Hash identifier:          AX8FrcBCbh6ncke8tKdIGHZ8BjXZzV0iLl/Q/PHiXXc=
Subject key identifier:   BF:E5:20:6E:19:7D:E6:94:4F:AC:01:09:CC:16:B8:65:56:FA:AA:9C
Authority key identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
Certificate issuer:       /CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
Certificate serial:       70AE3A02EDD5C685F9F39C52D5D72A9B0A037C06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
Manifest number:          0345
Signing time:             Sun 21 Dec 2025 21:18:34 +0000
Manifest this update:     Sun 21 Dec 2025 21:13:34 +0000
Manifest next update:     Mon 22 Dec 2025 22:02:34 +0000
Files and hashes:         1: A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl (hash: EFfjTU8ZRsIyeozrtFTXZikMWPldpnIlt8jYv7bYzcw=)
                          2: 323830343a366336383a3a2f33322d3338203d3e20323730343636.roa (hash: s6KXo1wwEJBxH+b7Le5pRY/FyTNzQlIcdhc6vHyP1UA=)
                          3: 3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa (hash: sY1gg4XSEBnQru7FQKGMnl8I5uMtQMSWLdLy4EzMWQQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl
                          rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 22:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ae:3a:02:ed:d5:c6:85:f9:f3:9c:52:d5:d7:2a:9b:0a:03:7c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
        Validity
            Not Before: Dec 21 21:13:34 2025 GMT
            Not After : Dec 22 22:02:34 2025 GMT
        Subject: CN=BFE5206E197DE6944FAC0109CC16B86556FAAA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:1f:d0:ec:19:9c:ca:6f:fc:ff:c1:f4:63:
                    55:1d:7e:78:c0:54:d6:dd:b9:c7:6d:81:8b:f1:15:
                    1a:af:c1:26:4d:95:4f:08:0d:ea:28:f3:a1:d0:fd:
                    5a:a7:3d:31:a0:71:1d:80:44:9d:70:b4:ee:13:6c:
                    9c:59:00:e4:17:dc:c4:cb:52:b3:04:ca:6c:7f:ae:
                    91:f8:58:cb:fb:71:49:4f:f5:6d:c9:72:76:dc:df:
                    18:f1:76:9c:19:cb:dd:9b:13:10:15:1b:8d:f2:5b:
                    27:06:ae:fa:12:07:55:c8:6d:21:65:3d:63:99:5c:
                    4c:c2:1d:78:75:de:9c:41:3c:5c:a0:57:e1:a4:6a:
                    8e:d2:c8:2b:e2:7e:51:fa:7d:84:69:19:8c:bc:d9:
                    db:a7:22:1b:66:18:9b:d8:f1:ad:e5:20:4c:6d:2c:
                    4a:ec:e2:b7:a7:e0:91:1f:fc:67:4d:44:f7:0a:b1:
                    63:a0:26:4e:d5:49:41:1d:65:4a:76:11:a1:2b:38:
                    d0:42:c9:a9:57:42:56:74:6e:7f:f6:71:22:7f:66:
                    60:ea:6e:77:f2:03:0e:fb:09:dc:43:c1:5c:69:d1:
                    ac:59:5f:f9:69:4e:4f:70:e6:a3:ce:0e:7c:f2:79:
                    70:f9:0e:55:dd:91:2d:aa:a1:c8:fc:5e:5e:b2:08:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:20:6E:19:7D:E6:94:4F:AC:01:09:CC:16:B8:65:56:FA:AA:9C
            X509v3 Authority Key Identifier:
                keyid:A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:93:7f:d2:03:a8:fe:7b:65:11:fc:d2:80:ce:50:81:04:52:
         f2:3a:7d:a2:eb:60:5b:c9:3a:fb:ed:69:72:af:f7:fe:7b:40:
         74:a1:03:7c:ed:0b:f6:be:94:67:d4:56:e2:20:6e:39:3b:8a:
         ff:1c:5f:a6:ad:8b:dd:40:45:d0:ad:52:05:08:98:be:fc:3b:
         bb:c2:38:f1:aa:91:f5:b5:47:6d:77:55:e3:8a:36:26:8a:78:
         4e:04:dd:b1:ae:c7:6c:01:d1:9d:f5:f2:78:32:41:59:29:06:
         51:90:f5:69:13:7f:1d:39:fc:84:ab:38:ce:39:ba:4c:7e:40:
         c5:85:b4:e3:c9:7c:c7:e2:e2:04:67:e5:13:d7:7d:11:db:bd:
         cc:9c:3d:c9:18:82:38:e3:2c:ef:c0:e7:09:6f:92:25:ce:1e:
         e7:da:02:ba:cf:11:6c:95:f2:73:b8:1d:de:ac:42:d5:97:dd:
         0a:89:7b:73:e7:f4:cf:42:d1:b8:50:e3:27:09:c4:b8:20:e7:
         74:02:9f:26:1e:2c:43:f7:a4:aa:f9:73:9b:8f:a0:36:eb:a0:
         05:83:02:86:0b:03:4b:be:ee:c4:c3:87:8d:21:09:96:ba:4e:
         10:c6:08:51:0f:92:fd:f1:16:22:36:0f:15:73:fc:bb:5c:bd:
         b9:24:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:11:16 2025 by rpki-client