This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
File:                     A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft (raw, json)
Hash identifier:          nFqg0VOm1S5zc4nsPLKg7TGL4b+4SEySyf7Q+xH0EP0=
Subject key identifier:   BB:CD:B6:D7:73:4F:25:83:EE:D7:33:A4:4D:CA:95:70:73:3A:55:A2
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Certificate issuer:       /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial:       211549BFE3A83190E70BD0C4D97877F7FEF6636B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
Manifest number:          0348
Signing time:             Mon 22 Dec 2025 11:38:03 +0000
Manifest this update:     Mon 22 Dec 2025 11:33:03 +0000
Manifest next update:     Tue 23 Dec 2025 14:48:03 +0000
Files and hashes:         1: 34352e3137322e3233362e302f32322d3234203d3e20323638373831.roa (hash: 5v5P0F9NgvouEaabcgB9vUWpuKb2jwwnjoxzjLvFOb4=)
                          2: 323830343a356139303a3a2f33322d3438203d3e20323638373831.roa (hash: UHLAJtcGE2sv+L1Q8MyE2jVZq34E1kU8SyllQRCc6Qo=)
                          3: A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl (hash: I+IsOmgJDcpNROCM4Ym4RsC5lIBg937cPmC5UP9640o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
                          rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 14:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:15:49:bf:e3:a8:31:90:e7:0b:d0:c4:d9:78:77:f7:fe:f6:63:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Validity
            Not Before: Dec 22 11:33:03 2025 GMT
            Not After : Dec 23 14:48:03 2025 GMT
        Subject: CN=BBCDB6D7734F2583EED733A44DCA9570733A55A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:a0:7e:0c:9e:15:e8:7d:77:59:74:26:ad:
                    37:c6:de:95:ba:58:61:e9:67:86:a1:e6:41:c2:6d:
                    28:c0:ee:10:fe:26:86:81:fa:ab:02:d6:dc:48:c6:
                    78:34:a4:35:8c:de:82:c7:28:53:d3:90:aa:c5:f1:
                    f4:08:89:cf:1c:32:8f:e0:26:5d:1b:10:bc:f3:a7:
                    09:30:c5:5f:cb:98:5b:b3:d4:5c:d0:85:8f:24:f4:
                    9b:26:81:8d:94:82:45:57:3a:e3:31:e8:85:13:b0:
                    3a:b7:93:34:a6:a3:59:b3:a6:e2:73:46:b6:d8:96:
                    ec:98:c6:ac:b1:77:ae:81:4c:0c:fe:50:33:be:43:
                    4b:cf:bf:b2:4f:77:64:ab:b7:26:62:f7:c8:79:29:
                    2d:19:e9:91:d7:0a:40:23:55:24:0c:d8:f4:53:ab:
                    06:b9:89:64:99:60:5c:ba:db:73:9b:6a:ec:31:85:
                    1f:e7:fd:9a:f0:84:cd:58:bf:80:b0:aa:e9:f6:52:
                    46:09:ae:2e:94:22:ed:c3:9f:03:c9:ae:09:fd:1a:
                    f4:fe:b7:cc:a4:23:b7:88:4b:8b:19:8e:4f:58:a1:
                    23:3c:d8:16:b8:14:3b:09:0a:0f:0e:9d:ee:e7:14:
                    49:5b:34:b9:7d:bd:87:55:b6:a1:52:c0:7d:48:87:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:B6:D7:73:4F:25:83:EE:D7:33:A4:4D:CA:95:70:73:3A:55:A2
            X509v3 Authority Key Identifier:
                keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6f:c9:c8:bb:06:58:51:6d:92:bc:3c:91:ad:c7:f6:93:9f:
         8c:a0:26:8a:4c:0d:82:61:a7:3c:de:9a:44:d2:5c:61:f1:63:
         e8:1d:f2:27:7a:5c:b5:0e:45:26:6b:6a:ca:a1:bf:1b:41:36:
         e5:50:81:32:c4:9d:5d:91:aa:11:89:ce:54:81:87:c3:41:bd:
         fb:12:32:8a:3e:3b:c5:be:d1:1e:fa:77:f9:1b:bf:b0:29:bc:
         a5:e3:9e:78:ea:3e:5f:53:62:91:8d:5a:65:45:c5:c8:88:0d:
         c3:0a:67:06:37:19:c4:e7:20:f5:e3:e4:f6:7a:2d:b2:ce:fa:
         c2:be:93:ea:3b:44:f5:a7:dc:cb:ca:72:b8:63:f4:e0:9f:9d:
         6b:cd:90:a7:74:8e:91:d8:51:f3:6f:de:c2:7c:37:1a:9c:83:
         89:f9:7d:ae:8a:4a:34:12:9d:b0:86:69:35:31:76:61:76:bc:
         28:b0:01:a0:30:dd:63:f8:04:c6:58:3c:14:e7:31:bc:c4:4d:
         ab:c0:58:63:0a:10:66:0e:9c:2d:13:36:aa:81:4e:be:11:89:
         58:f8:18:bd:46:c3:71:1d:86:4a:6d:69:ca:56:25:d5:a1:40:
         9d:ed:86:ae:d4:87:7f:66:2a:fc:d6:ad:b4:ea:ef:34:ba:86:
         96:56:d4:53
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUIRVJv+OoMZDnC9DE2Xh39/72Y2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAz
MDVBQUI0NjAeFw0yNTEyMjIxMTMzMDNaFw0yNTEyMjMxNDQ4MDNaMDMxMTAvBgNV
BAMTKEJCQ0RCNkQ3NzM0RjI1ODNFRUQ3MzNBNDREQ0E5NTcwNzMzQTU1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4saB+DJ4V6H13WXQmrTfG3pW6
WGHpZ4ah5kHCbSjA7hD+JoaB+qsC1txIxng0pDWM3oLHKFPTkKrF8fQIic8cMo/g
Jl0bELzzpwkwxV/LmFuz1FzQhY8k9JsmgY2UgkVXOuMx6IUTsDq3kzSmo1mzpuJz
RrbYluyYxqyxd66BTAz+UDO+Q0vPv7JPd2SrtyZi98h5KS0Z6ZHXCkAjVSQM2PRT
qwa5iWSZYFy623ObauwxhR/n/ZrwhM1Yv4Cwqun2UkYJri6UIu3DnwPJrgn9GvT+
t8ykI7eIS4sZjk9YoSM82Ba4FDsJCg8One7nFElbNLl9vYdVtqFSwH1Ih9mfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUu82213NPJYPu1zOkTcqVcHM6VaIwHwYDVR0j
BBgwFoAUpU372NEG67J4C/jQMxrxIDBaq0YwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XWWdTWnY4RFVNclpWUVhlN3dmOHoyMjNNZk41dEhqSHJnZWFSZTV6cDNy
LzEvQTU0REZCRDhEMTA2RUJCMjc4MEJGOEQwMzMxQUYxMjAzMDVBQUI0Ni5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTRERkJEOEQxMDZFQkIyNzgw
QkY4RDAzMzFBRjEyMDMwNUFBQjQ2LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dZ
Z1NadjhEVU1yWlZRWGU3d2Y4ejIyM01mTjV0SGpIcmdlYVJlNXpwM3IvMS9BNTRE
RkJEOEQxMDZFQkIyNzgwQkY4RDAzMzFBRjEyMDMwNUFBQjQ2Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
k2/JyLsGWFFtkrw8ka3H9pOfjKAmikwNgmGnPN6aRNJcYfFj6B3yJ3pctQ5FJmtq
yqG/G0E25VCBMsSdXZGqEYnOVIGHw0G9+xIyij47xb7RHvp3+Ru/sCm8peOeeOo+
X1NikY1aZUXFyIgNwwpnBjcZxOcg9ePk9notss76wr6T6jtE9afcy8pyuGP04J+d
a82Qp3SOkdhR82/ewnw3GpyDifl9ropKNBKdsIZpNTF2YXa8KLABoDDdY/gExlg8
FOcxvMRNq8BYYwoQZg6cLRM2qoFOvhGJWPgYvUbDcR2GSm1pylYl1aFAne2GrtSH
f2Yq/NattOrvNLqGllbUUw==
-----END CERTIFICATE-----
Generated at Tue Dec 23 05:54:28 2025 by rpki-client