This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
File:                     8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json)
Hash identifier:          AqXL8TU4kwr/mxy64v0OvaV1DtUIDXkfYB7lubBTIrw=
Subject key identifier:   75:2A:CF:D9:67:AC:50:74:AE:76:A2:1F:A4:8A:33:60:0D:AB:F6:E5
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Certificate issuer:       /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial:       4226C847F21FD92CA6722C5E4CB89B8BF264C3C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
Manifest number:          034A
Signing time:             Tue 23 Dec 2025 02:57:27 +0000
Manifest this update:     Tue 23 Dec 2025 02:52:27 +0000
Manifest next update:     Wed 24 Dec 2025 03:22:27 +0000
Files and hashes:         1: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: UuJdu9oNRzQAzqGiZTO4vBqCVsMzpdiamCVuQEkL6sg=)
                          2: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=)
                          3: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: jknnpXflD9t6uZtlkHZfBaShxc5Ivryz19OpAO1dbLk=)
                          4: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: ORpItz/kBb3bXBiU/q9Su7SYmZ2oQTmI/c9DsHZIB4Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
                          rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 03:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:26:c8:47:f2:1f:d9:2c:a6:72:2c:5e:4c:b8:9b:8b:f2:64:c3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Validity
            Not Before: Dec 23 02:52:27 2025 GMT
            Not After : Dec 24 03:22:27 2025 GMT
        Subject: CN=752ACFD967AC5074AE76A21FA48A33600DABF6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:36:18:d3:b6:ef:02:99:69:4b:b1:33:40:
                    b5:31:ad:a6:9b:1a:89:b8:97:78:74:4c:64:7f:fe:
                    30:c0:37:79:7c:c5:04:1c:f5:07:21:1f:87:1b:40:
                    fb:5a:db:47:be:75:8c:8b:31:7a:e7:c3:1e:54:bb:
                    66:de:b5:55:81:e9:36:c6:d6:d8:7c:47:fb:0b:fb:
                    33:cc:93:c1:c5:5d:62:47:aa:3b:0d:88:46:9d:69:
                    97:28:c4:2d:20:fd:e8:6a:49:e5:b0:96:b8:f8:14:
                    2a:27:08:2c:61:0b:c4:b5:84:18:9a:ea:da:17:71:
                    28:09:0e:ff:27:75:ac:e9:88:f7:11:1f:f1:54:05:
                    ac:b7:32:97:5a:4a:42:de:3d:9b:62:65:e1:71:b8:
                    33:40:7c:51:29:48:25:34:4b:3c:05:31:70:00:c3:
                    57:a0:f5:bc:e9:ef:62:0b:08:a1:eb:79:72:d7:2e:
                    2f:71:0b:70:d4:b9:b9:70:1c:73:6a:22:6a:0e:d3:
                    1a:1c:4d:f2:44:18:4b:05:5f:73:3b:7f:8e:0d:8f:
                    32:88:cd:5d:02:b1:a3:9f:89:3a:40:db:1d:25:37:
                    d2:29:21:4f:c0:ed:3b:8d:f3:47:11:f3:f5:46:11:
                    1c:62:11:a6:f2:7a:90:70:96:9c:bc:cb:19:d2:1a:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2A:CF:D9:67:AC:50:74:AE:76:A2:1F:A4:8A:33:60:0D:AB:F6:E5
            X509v3 Authority Key Identifier:
                keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:60:a1:ed:78:43:27:62:5b:3a:77:84:9c:58:56:b8:f2:69:
         43:dc:38:9d:19:f8:74:ad:20:6e:76:33:a0:b6:f5:dc:90:8b:
         5f:c3:22:3a:ea:70:5f:9c:95:cd:7f:c2:7a:19:a5:c8:33:a1:
         99:cf:62:4d:90:cd:53:d6:83:99:97:58:ac:91:37:0f:92:f7:
         8b:38:ab:ca:90:19:5b:61:42:88:db:1a:e2:aa:f6:1f:84:50:
         59:82:9e:07:4c:6a:5f:c4:25:72:09:39:35:e4:29:0a:ba:d1:
         aa:9d:fa:1f:93:89:18:82:3b:f0:a9:92:01:87:67:5e:32:e5:
         89:06:6e:99:32:e9:3b:7b:58:f6:e2:75:7b:db:08:f1:cd:48:
         da:e0:94:33:d4:09:62:e1:ed:85:d9:a3:44:64:69:85:00:38:
         5e:02:16:b9:55:42:36:56:5b:44:e6:48:52:79:ce:71:ad:89:
         98:8b:90:cb:80:c2:15:cc:dd:65:63:6b:03:24:5e:ba:eb:2c:
         fd:c3:c9:ed:df:8a:69:d6:18:24:8f:69:62:b6:bd:e1:67:7f:
         99:ff:f9:7e:5d:29:b7:d3:cd:9c:44:6f:1f:38:01:d1:91:2a:
         7d:c3:79:c8:a0:92:a2:0d:20:61:be:81:ec:ba:af:c9:4f:1e:
         15:f2:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:43:36 2025 by rpki-client