This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.mft
File:                     F94D5F9934BDAEED4E3E42FD37544823921E5101.mft (raw, json)
Hash identifier:          umdeM3kJeQoTg+SsGf5HTyV94FBQKzWbUE8kHMlJDJA=
Subject key identifier:   90:62:A4:CC:E3:8A:BF:54:BA:D0:E3:CC:6C:98:F2:D2:BD:96:BB:19
Authority key identifier: F9:4D:5F:99:34:BD:AE:ED:4E:3E:42:FD:37:54:48:23:92:1E:51:01
Certificate issuer:       /CN=F94D5F9934BDAEED4E3E42FD37544823921E5101
Certificate serial:       18F19C0028C4FDF2B74C5D3581C362F51E339FD2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94D5F9934BDAEED4E3E42FD37544823921E5101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.mft
Manifest number:          FC
Signing time:             Tue 23 Dec 2025 19:56:22 +0000
Manifest this update:     Tue 23 Dec 2025 19:51:22 +0000
Manifest next update:     Wed 24 Dec 2025 22:57:22 +0000
Files and hashes:         1: F94D5F9934BDAEED4E3E42FD37544823921E5101.crl (hash: fepTdOdDAM0YEnijyyGqndUHKJ/9E18SFk/m9WoaVKA=)
                          2: 323830343a366132343a3a2f33322d313238203d3e20323730333135.roa (hash: aBW0Ch5kNVyBadzo8JvbjtyXOD6KiLlB0BAl/0ORyEQ=)
                          3: 3138392e3132362e302e302f32322d3332203d3e20323730333135.roa (hash: mQAwi89o2DS5s+OZyxJ+KlsoZi9VEIExyf1jmbuYohU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.crl
                          rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94D5F9934BDAEED4E3E42FD37544823921E5101.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 22:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f1:9c:00:28:c4:fd:f2:b7:4c:5d:35:81:c3:62:f5:1e:33:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94D5F9934BDAEED4E3E42FD37544823921E5101
        Validity
            Not Before: Dec 23 19:51:22 2025 GMT
            Not After : Dec 24 22:57:22 2025 GMT
        Subject: CN=9062A4CCE38ABF54BAD0E3CC6C98F2D2BD96BB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:a6:ec:c7:1b:ea:c1:a1:a9:69:50:a7:9c:
                    85:a2:33:2b:95:68:92:22:b6:dd:0c:43:16:f4:88:
                    aa:44:f9:04:69:77:b7:01:40:0f:72:7f:89:40:bf:
                    70:86:cd:7c:07:4f:b0:f0:a1:38:5c:d8:7f:8b:dc:
                    5c:52:ba:b8:42:63:4e:60:c8:77:81:a2:7e:aa:3e:
                    d1:0e:a5:09:f7:b9:69:6f:02:64:84:02:60:c5:62:
                    a1:47:28:b4:f1:17:bf:05:4e:1b:ad:5a:74:b4:73:
                    68:a8:79:be:01:f0:34:2b:1e:4d:51:49:ae:39:a2:
                    16:a8:22:11:4b:d7:bd:99:4f:0c:5a:5c:67:85:b8:
                    72:a4:11:ab:62:c6:e5:1e:5c:af:62:42:27:2b:1a:
                    ff:52:3c:d1:55:b4:61:05:15:9d:cb:cd:a8:90:f2:
                    0b:c6:39:43:f4:f4:db:a3:a1:bb:aa:b8:15:fd:50:
                    c2:92:dd:eb:9d:92:b9:49:44:8f:24:7e:f2:ff:58:
                    3a:77:eb:50:7f:c9:a5:dd:f6:f0:bf:06:c8:3c:d6:
                    fb:0a:e6:7b:aa:ba:e8:ae:a4:06:1b:15:3a:a7:9a:
                    bd:e1:b7:05:35:06:24:11:ae:bd:36:d3:76:e0:e7:
                    57:73:50:c8:50:4b:cf:ba:ee:c4:77:5e:20:ec:07:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:62:A4:CC:E3:8A:BF:54:BA:D0:E3:CC:6C:98:F2:D2:BD:96:BB:19
            X509v3 Authority Key Identifier:
                keyid:F9:4D:5F:99:34:BD:AE:ED:4E:3E:42:FD:37:54:48:23:92:1E:51:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94D5F9934BDAEED4E3E42FD37544823921E5101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:db:ac:c4:4f:53:06:b3:25:bc:a4:64:32:27:80:f9:fa:
         c4:09:d6:2a:04:be:47:de:90:41:9d:b2:7d:cd:c8:28:92:38:
         fc:49:2c:40:0b:43:71:04:8b:52:e5:39:2f:f3:77:27:99:22:
         4c:30:8f:22:f0:51:f3:9d:e6:20:75:c3:9b:7b:02:9f:34:f8:
         0d:5b:39:74:48:35:28:26:0c:ea:b4:a0:a2:d0:7b:bd:87:5e:
         c1:59:4f:1a:4e:e2:94:84:c9:8e:e2:86:2c:6a:09:f9:95:92:
         3d:00:cb:f5:38:71:89:a8:59:95:eb:4f:10:09:63:ca:09:60:
         d3:7f:f1:79:fd:b3:7c:75:0c:67:6a:2f:7c:f8:c0:5d:40:4c:
         0e:e4:8f:62:75:3b:a3:44:24:7e:4c:89:44:3e:41:0a:c6:be:
         e6:30:3f:22:81:5a:0a:f7:7f:5a:12:e4:1a:ba:2c:64:f4:e8:
         c6:cd:59:f5:54:4f:8c:7f:c4:75:c0:45:42:f6:79:82:72:94:
         55:dc:e1:23:54:25:a7:7a:ed:d2:59:78:59:69:fb:b1:e5:92:
         26:52:cd:02:00:39:8d:66:7e:97:5b:81:90:db:cb:64:0d:00:
         ec:fa:76:02:1d:2e:9a:c3:4d:b8:2c:c4:68:c2:0e:48:a3:a0:
         3d:3e:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:29:16 2025 by rpki-client