This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
File:                     A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft (raw, json)
Hash identifier:          mkLr4ShybVBWHIvcyhjr28nrDqful/SjeC71cezpJrM=
Subject key identifier:   8B:8D:7A:24:A1:C5:CB:DA:6F:F7:83:D3:A1:CF:AE:C0:B4:8F:09:66
Authority key identifier: A4:F8:A5:97:A9:21:91:9A:B3:CA:0F:05:A1:84:35:D6:D7:1E:94:0F
Certificate issuer:       /CN=A4F8A597A921919AB3CA0F05A18435D6D71E940F
Certificate serial:       360CF257677D18F6E28E8EFF0F32D4B1854861CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
Manifest number:          01A3
Signing time:             Wed 24 Dec 2025 00:02:53 +0000
Manifest this update:     Tue 23 Dec 2025 23:57:53 +0000
Manifest next update:     Thu 25 Dec 2025 13:41:53 +0000
Files and hashes:         1: 323830343a383937343a3a2f33322d313238203d3e20323733363035.roa (hash: ddEDNqk6B28Qqxa+G++UgmT8rVoFUavRTR8Nr5sWa7c=)
                          2: A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl (hash: jtZ75ckqEtJ6fyTXnc+jk8dtZtehYpzL5khGTCmgkG0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl
                          rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 13:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0c:f2:57:67:7d:18:f6:e2:8e:8e:ff:0f:32:d4:b1:85:48:61:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4F8A597A921919AB3CA0F05A18435D6D71E940F
        Validity
            Not Before: Dec 23 23:57:53 2025 GMT
            Not After : Dec 25 13:41:53 2025 GMT
        Subject: CN=8B8D7A24A1C5CBDA6FF783D3A1CFAEC0B48F0966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:40:f9:38:8b:31:2c:94:41:79:96:61:45:
                    43:82:b2:0b:1b:44:6f:18:b9:30:d3:71:a1:6f:3b:
                    00:c9:9e:b4:17:c7:a0:e6:1a:25:35:03:f4:ed:47:
                    bb:7a:9a:29:5f:d7:65:9b:59:4a:b1:29:75:1a:4e:
                    01:a1:7e:64:25:14:be:60:44:2a:db:bf:a0:ed:73:
                    1d:0c:1f:f3:1d:a1:74:75:5f:e1:a5:8c:52:8c:17:
                    08:d6:59:07:78:56:b3:ce:ae:3a:a9:f4:89:78:88:
                    6c:e2:11:a6:23:fc:34:54:17:99:57:a4:57:29:8b:
                    b8:e0:a4:ef:81:2a:16:6b:61:d6:5d:bf:c3:51:e1:
                    67:9b:cd:e5:36:a1:03:6e:10:6d:96:81:3f:a3:b7:
                    81:56:46:a6:0b:6b:9b:a7:3e:8f:47:e0:b6:aa:0b:
                    89:67:2a:94:f2:40:f9:6d:07:03:e8:0e:b5:80:4e:
                    77:99:be:47:23:82:10:63:b4:af:66:5e:5c:f4:d3:
                    d1:97:ae:a1:19:1d:43:bb:d8:38:f6:78:72:83:9e:
                    72:fb:a3:55:a4:54:cc:50:f2:57:5e:63:c0:64:af:
                    a4:34:6b:6f:96:e5:1f:08:58:d5:f5:1f:56:6d:b1:
                    6d:9f:da:65:4a:ae:4f:30:fa:cc:77:b3:81:d7:9e:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:7A:24:A1:C5:CB:DA:6F:F7:83:D3:A1:CF:AE:C0:B4:8F:09:66
            X509v3 Authority Key Identifier:
                keyid:A4:F8:A5:97:A9:21:91:9A:B3:CA:0F:05:A1:84:35:D6:D7:1E:94:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F8A597A921919AB3CA0F05A18435D6D71E940F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FETsttnPrcgQ217w2S8g1SiDadaeLoRrp5cJWpE7xQMv/0/A4F8A597A921919AB3CA0F05A18435D6D71E940F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4f:19:1d:63:b0:10:17:2f:9f:24:7a:20:1f:46:00:a9:6e:
         bf:cc:bf:35:4e:a5:ae:ef:08:34:8f:7e:78:68:cb:22:7d:78:
         e8:f2:13:12:8c:f6:2f:b2:54:67:9d:c9:69:4b:6e:0e:71:31:
         24:07:6a:72:fc:f9:75:c5:ff:ec:38:43:3b:16:09:de:45:85:
         7c:c8:9b:ac:18:f1:d2:7d:94:05:34:bf:be:c9:45:72:13:af:
         d1:6c:d6:31:21:11:41:7f:bb:f2:4e:01:9e:d1:a1:c9:cb:13:
         02:79:b0:a3:41:cc:a9:a7:b9:23:52:57:f5:86:89:70:7b:0e:
         f9:21:e5:03:89:48:46:91:6c:8d:0a:8b:98:4c:2b:58:f8:4f:
         a7:40:3e:42:ed:b8:98:1c:74:d9:57:3c:e5:f4:c8:7b:3b:bd:
         48:06:2c:e7:b8:64:2b:1a:3c:22:25:14:13:23:70:cf:9b:17:
         a8:ee:0b:d5:b4:e4:5d:fb:66:29:bd:1b:d5:78:b9:06:fa:ed:
         b5:ee:0b:b6:29:35:4c:dd:62:93:fe:e5:4a:e5:91:7b:06:27:
         4c:b1:b2:a3:46:d4:6f:37:33:9a:d6:58:bc:d4:76:4c:66:28:
         07:3c:0e:c1:3d:bc:24:8a:c9:bb:39:2a:e4:ca:ba:0a:e2:e7:
         dd:9e:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:24:39 2025 by rpki-client