This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft
File:                     C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft (raw, json)
Hash identifier:          w56K5MdFdrjBMjIzU/vFdj8afxlrV9LjPknMMkwabkk=
Subject key identifier:   97:1C:71:4A:60:27:DC:55:E3:88:2A:DE:D3:AD:05:89:8A:DF:52:24
Authority key identifier: C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A
Certificate issuer:       /CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
Certificate serial:       143212E0242638B91656BACE42B8788BCC1AFEE1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft
Manifest number:          0112
Signing time:             Tue 23 Dec 2025 07:28:49 +0000
Manifest this update:     Tue 23 Dec 2025 07:23:49 +0000
Manifest next update:     Wed 24 Dec 2025 07:29:49 +0000
Files and hashes:         1: 34352e3136362e36372e302f32342d3234203d3e20323637393436.roa (hash: maS4nmFcdiHhy+ZX4S8/5wsNL5C7y3k1hxmjUU8OI0Q=)
                          2: 34352e3136362e36362e302f32342d3234203d3e20323637393436.roa (hash: RvTdvzlP0x9wP7y2jC1QFa8YosWand47IHE4NO7kAuA=)
                          3: C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl (hash: wUr3oQKpWSs700F7ftOfmpny/rfkC5LVcrBxtZz2g/Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl
                          rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:12:e0:24:26:38:b9:16:56:ba:ce:42:b8:78:8b:cc:1a:fe:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
        Validity
            Not Before: Dec 23 07:23:49 2025 GMT
            Not After : Dec 24 07:29:49 2025 GMT
        Subject: CN=971C714A6027DC55E3882ADED3AD05898ADF5224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:d0:08:3b:07:92:d3:e0:98:8d:0b:90:5b:
                    46:48:2a:dc:44:7c:ef:22:da:39:40:da:25:67:96:
                    d0:62:be:ab:5d:4e:74:26:df:24:43:97:e9:4c:f5:
                    2e:20:3a:f4:ed:cf:bc:2a:b1:47:74:42:af:8a:93:
                    ab:c7:1c:c6:36:dd:37:3a:da:35:0d:53:f9:84:c1:
                    28:c8:7d:e2:76:bd:86:88:7b:a5:de:62:fc:13:74:
                    c9:b7:60:42:1a:59:eb:d2:b5:c3:2b:1e:fd:97:bd:
                    ad:d8:ab:2a:f4:a1:45:cb:b2:e2:98:b1:ba:b7:43:
                    fb:20:0d:28:87:eb:2c:dc:52:88:f2:e9:f4:4a:31:
                    ae:21:28:ff:0d:4c:53:cf:a7:bc:0a:30:5f:0c:cb:
                    41:8d:78:33:b6:45:32:8e:57:f0:08:70:25:fe:47:
                    9b:82:54:3c:7f:99:bf:91:3b:c9:36:ca:7d:6a:b4:
                    9f:16:0e:7d:5e:bf:20:57:1b:72:0c:73:5d:aa:e3:
                    12:42:a7:6b:7a:19:d7:4b:4a:18:f9:de:a3:c4:2e:
                    4a:6f:6f:ad:24:89:a0:11:41:c9:50:9e:5b:ac:00:
                    7c:1b:2f:41:d6:8b:99:b4:a6:14:b3:b1:32:c8:bd:
                    6e:1e:dd:84:58:d6:fc:70:3d:8b:74:7f:5b:96:ef:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1C:71:4A:60:27:DC:55:E3:88:2A:DE:D3:AD:05:89:8A:DF:52:24
            X509v3 Authority Key Identifier:
                keyid:C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:68:58:d4:40:c6:a2:da:4b:93:6c:e2:cd:95:53:8a:38:18:
         02:ef:ae:cc:4d:7c:14:13:49:c4:4c:ff:2e:33:67:be:c9:c1:
         60:2c:30:f2:5d:c9:96:78:fc:d6:4d:87:33:cb:13:f2:2e:c7:
         09:b2:25:b0:9c:1f:cf:e9:71:8c:df:ab:1a:e1:00:97:4c:4d:
         c4:44:06:19:58:79:21:f4:d7:d9:05:59:1b:ba:aa:6f:39:39:
         cc:ca:df:c3:e0:64:b0:24:ed:61:bb:05:cd:31:d3:7f:1c:2a:
         ed:f0:5d:a5:4d:1c:fa:87:98:9e:d3:05:c9:ae:c6:e6:b4:27:
         b5:fc:92:03:cf:e5:5f:7d:e6:57:b2:04:93:71:e6:0b:ec:03:
         ad:23:4b:1b:c8:35:99:4c:ac:4b:1b:7c:34:5d:a3:09:c0:05:
         14:c8:31:05:0c:a2:40:24:a9:c9:13:30:01:fa:86:36:79:83:
         5c:cc:9f:36:b4:31:9e:f8:4f:a0:38:57:56:b6:ec:36:94:06:
         ba:24:d7:f1:7f:aa:3f:4b:c9:6c:54:f6:64:17:9d:de:2f:52:
         b9:69:80:8a:2b:a9:c3:be:e1:cb:20:7e:88:85:bf:2c:dc:cb:
         48:b5:db:9e:74:cd:ee:9a:25:f3:57:af:16:43:37:be:45:9e:
         01:26:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:28:03 2025 by rpki-client