This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
File:                     A5455EE25C6FEB15A12789F15E975474289CE800.mft (raw, json)
Hash identifier:          hIK342YLBlKd2JSGXSSDwH3ZhxiV8+iYcoAhzZyspxA=
Subject key identifier:   DA:FC:2A:60:F0:6E:CA:A4:C3:97:75:23:63:95:31:80:47:93:28:7D
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Certificate issuer:       /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial:       033D0434A13F1A3E37CFB7B8D3658EE0493772CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
Manifest number:          0341
Signing time:             Fri 19 Dec 2025 15:52:49 +0000
Manifest this update:     Fri 19 Dec 2025 15:47:49 +0000
Manifest next update:     Sat 20 Dec 2025 19:02:49 +0000
Files and hashes:         1: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: Q2JymKQF6NmDOXMRSwyKq2Je2bjCMsxjvwq3vjHVwnE=)
                          2: A5455EE25C6FEB15A12789F15E975474289CE800.crl (hash: m+3MnzXnaqa8MOo1gy2KNVR7Q2jG5hq27Y5JY97Fsg0=)
                          3: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: wyF0GJjDX5YnWfr20u0CwT3kDZX//zWud8hjzCmqbF4=)
                          4: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: WkDXinBlhSpzEvUc/HOjtx0nayVUYKfHQ1jGnnUDwSE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 19:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3d:04:34:a1:3f:1a:3e:37:cf:b7:b8:d3:65:8e:e0:49:37:72:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Validity
            Not Before: Dec 19 15:47:49 2025 GMT
            Not After : Dec 20 19:02:49 2025 GMT
        Subject: CN=DAFC2A60F06ECAA4C3977523639531804793287D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:39:0d:58:63:1c:b3:9e:d0:82:d7:44:bb:
                    81:ce:ea:d5:9d:03:de:31:7b:89:84:69:1f:e1:4a:
                    ec:43:cc:0d:d7:f0:27:82:2d:2c:55:b3:0b:34:69:
                    45:d5:9e:df:b9:72:6b:7a:eb:ba:92:bd:f5:5b:30:
                    7b:22:4e:9b:1e:bb:c2:77:3a:2a:1c:c2:fd:11:cb:
                    89:0e:17:ac:d0:79:d4:8d:34:e1:9a:d8:6b:27:f8:
                    bd:03:e6:89:57:9b:32:c2:09:78:44:6c:5d:3e:70:
                    2f:80:f5:04:af:02:29:6c:44:95:34:ff:86:aa:7a:
                    4b:21:e9:cf:35:f9:5c:bc:0a:6b:03:d7:29:45:cf:
                    5c:f0:a8:6c:d0:39:a7:c2:37:1c:49:45:6c:33:fa:
                    5b:4c:d0:fc:a2:27:2b:fa:f1:16:91:18:19:19:bb:
                    cd:14:2f:0c:30:b5:fb:22:ff:40:47:b5:5c:40:03:
                    7d:d0:3c:7b:f9:fb:7c:8b:6a:35:eb:1a:2d:8c:20:
                    31:fc:5d:f3:98:6e:0a:9e:8a:13:38:f1:62:a8:31:
                    b7:e5:12:b1:25:99:52:4d:e5:fc:7a:bd:9c:7b:90:
                    6f:b3:02:d5:f6:6f:09:ef:e3:1f:d3:63:c3:73:cd:
                    3d:94:af:fe:ce:bd:41:a7:d2:8b:42:54:56:db:80:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FC:2A:60:F0:6E:CA:A4:C3:97:75:23:63:95:31:80:47:93:28:7D
            X509v3 Authority Key Identifier:
                keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f9:10:19:27:90:b5:6c:0f:f5:0c:15:f0:31:61:f2:ce:15:
         44:2f:db:37:e7:02:da:07:13:bc:b6:e7:a9:a9:ee:19:48:7d:
         72:97:43:6b:d0:93:91:77:d3:7f:2c:98:58:b0:29:17:61:b0:
         f2:08:f0:f6:1a:e0:b2:74:05:86:67:5f:ce:91:3f:eb:4f:05:
         25:52:4e:b0:a3:b4:b0:46:bb:bd:87:6a:dc:d8:bf:52:c2:76:
         9d:04:0a:db:8c:cb:7d:99:40:37:f0:60:0d:6b:51:d8:2e:11:
         34:29:db:3e:b1:ca:2e:9f:ef:4f:16:d6:0d:ea:49:98:49:44:
         03:f5:59:de:35:ff:72:c1:a2:20:5e:ca:0e:e3:39:3f:2d:cd:
         35:a2:9c:c9:7a:cd:c8:ce:0a:6c:82:ce:fd:63:fb:2d:63:cf:
         ff:92:d8:8e:d8:bb:31:26:2d:ee:d0:f2:71:e7:b1:e1:e2:78:
         b1:28:fa:1a:f0:2b:72:79:3b:7d:b5:a9:8e:eb:93:e4:8b:9f:
         63:66:88:8d:ea:e8:63:c9:50:db:4f:96:aa:4c:2e:20:7e:40:
         45:22:c3:ec:08:9b:0f:e2:1d:e7:51:38:c9:7c:ec:f8:16:df:
         1e:be:13:39:c8:2c:e8:c9:eb:19:7b:18:6d:c3:85:73:7c:f2:
         03:a6:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:51:39 2025 by rpki-client