This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          4alrK70SFp8YfmMilZ0m05EUeo63PDcRjX+5khoj1hk=
Subject key identifier:   79:46:6C:3D:2F:97:02:B3:F4:E9:54:0A:9F:90:D8:37:CD:36:BE:3B
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       0F8B667FC939C1D5DF646524F8ADDDCFB6E36B19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          0343
Signing time:             Sun 21 Dec 2025 17:36:26 +0000
Manifest this update:     Sun 21 Dec 2025 17:31:26 +0000
Manifest next update:     Mon 22 Dec 2025 18:57:26 +0000
Files and hashes:         1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: GP5N/ojn+CpGVA4mqG79uEfaVmGi1ccM9DHakURSDw8=)
                          2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: TmZUOww+m/aZl9Csn1X5dJJ+t2AQgdE0MhV/gVw9pUY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 18:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8b:66:7f:c9:39:c1:d5:df:64:65:24:f8:ad:dd:cf:b6:e3:6b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Dec 21 17:31:26 2025 GMT
            Not After : Dec 22 18:57:26 2025 GMT
        Subject: CN=79466C3D2F9702B3F4E9540A9F90D837CD36BE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:47:2c:e4:a4:f9:a5:35:8c:f3:25:03:c3:
                    88:e3:1e:be:96:cd:b7:e7:98:46:c4:8d:00:ee:1d:
                    c3:2e:3e:3f:53:ea:bc:44:3f:f8:72:7d:b1:79:7d:
                    a4:4d:cc:a3:6e:c7:a3:e1:d8:a8:8a:54:c9:97:ba:
                    e9:59:a0:55:af:31:c5:ad:19:06:bc:4c:04:70:fa:
                    6a:d3:c9:2a:41:d7:73:d8:23:6c:c0:ac:9c:7d:d2:
                    43:d4:d3:e8:27:20:46:19:34:f1:de:28:5b:48:ea:
                    c1:ff:ea:bc:c3:25:37:53:75:cd:2c:b8:8a:40:30:
                    22:ad:6c:4c:ee:ea:a4:5f:32:0b:b1:85:4d:53:65:
                    71:30:a7:f4:a7:f0:8a:87:cd:f2:52:4f:42:ef:e1:
                    03:69:6e:7b:1a:d4:fc:e7:cc:ca:36:73:ee:56:53:
                    27:2b:ac:1c:67:69:72:07:cb:18:b5:ae:46:22:cb:
                    09:30:df:e7:5a:91:72:05:65:76:95:fc:f3:93:f0:
                    a0:0e:a3:d6:0f:42:d1:64:a9:a2:0f:b6:5d:03:34:
                    4e:33:2e:0c:68:e5:91:57:9d:24:15:81:a0:7e:53:
                    0b:16:b1:b6:aa:8e:a2:c8:05:ec:35:85:07:25:fd:
                    3d:c2:e4:93:de:7c:78:97:89:85:76:7a:56:9e:54:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:46:6C:3D:2F:97:02:B3:F4:E9:54:0A:9F:90:D8:37:CD:36:BE:3B
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:73:55:f1:12:fe:71:66:bb:b8:49:27:32:d3:cb:d1:2a:2a:
         76:7b:55:8c:00:8e:b8:54:13:ab:7c:29:97:89:2e:86:fe:a0:
         ed:9e:d9:62:54:ce:f2:69:00:2f:73:4b:97:2c:87:5e:80:c7:
         dd:3d:34:0f:af:65:89:b2:ae:56:3c:d4:e2:c9:3c:87:31:d7:
         2b:f6:40:3f:a2:36:4a:06:79:3d:51:d3:2c:6e:e8:1a:ef:2f:
         16:63:42:6e:22:26:ac:67:b9:58:bf:97:91:19:b8:8e:9c:47:
         a2:95:d2:36:07:ed:db:70:af:f0:b0:8d:63:de:f6:28:f7:fc:
         f6:18:89:83:89:19:70:71:9b:fd:3b:3a:d2:07:ae:15:a9:1d:
         69:fc:d7:e2:d9:49:f3:66:57:ae:ae:46:85:51:be:77:17:fe:
         53:5b:96:db:43:18:79:68:e1:23:e3:dd:3d:ac:d9:ab:a3:a4:
         ca:82:4f:aa:51:85:d8:3b:f7:d9:2d:31:1f:a0:61:10:35:6f:
         f4:6e:f2:f3:88:7e:d8:c4:68:e1:01:e4:3a:69:60:c4:1d:71:
         f0:51:dd:3f:3b:af:af:d5:05:92:b0:fe:af:63:69:71:2a:33:
         42:e5:32:5b:e5:5d:03:ba:61:7f:65:75:c8:34:5f:58:87:f0:
         2c:43:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----