This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
File:                     8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft (raw, json)
Hash identifier:          RPbinoRDVJVQe8bkePZ0J84Nmkuiwkfw+dHFkoLe7Kw=
Subject key identifier:   65:BF:2C:CB:AC:B1:3D:41:A1:06:B0:70:77:17:A4:F3:E7:76:B0:AE
Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF
Certificate issuer:       /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
Certificate serial:       06B8217E6798AE1B0A9A3E5AC462C974D6F6DAF6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
Manifest number:          0348
Signing time:             Thu 25 Dec 2025 08:17:45 +0000
Manifest this update:     Thu 25 Dec 2025 08:12:45 +0000
Manifest next update:     Fri 26 Dec 2025 09:18:45 +0000
Files and hashes:         1: 8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl (hash: CMrWRMXHNnbl3FVSBIbhi6fFxPlZRleWgptYrvcr++g=)
                          2: 323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (hash: mZN4AszSQT36UMwFtHkIGpU8mMiqKNrNGykEzvf6hdU=)
                          3: 3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (hash: SLEHFECRXQmMYbYlcQhzLdJpI1AWkv5FBYpLZmL4zfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl
                          rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 09:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b8:21:7e:67:98:ae:1b:0a:9a:3e:5a:c4:62:c9:74:d6:f6:da:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
        Validity
            Not Before: Dec 25 08:12:45 2025 GMT
            Not After : Dec 26 09:18:45 2025 GMT
        Subject: CN=65BF2CCBACB13D41A106B0707717A4F3E776B0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:ba:0c:69:60:53:46:8e:38:9a:62:16:76:
                    04:e8:07:7a:12:de:2f:99:3e:05:23:1b:2c:7d:59:
                    2b:1e:7c:cb:17:a2:f4:c6:d1:26:bc:04:bd:b0:17:
                    35:62:68:f3:6d:83:a2:24:54:77:47:2d:f3:0f:1d:
                    76:47:1c:05:89:ca:62:c6:3a:ca:ef:8f:59:0a:69:
                    6a:ef:2f:d5:f1:7d:7d:85:ca:e6:1d:9c:62:27:5c:
                    94:0d:33:79:07:bd:9c:34:32:83:71:45:ef:7f:3f:
                    b3:f1:74:1c:b7:7c:c9:93:48:8c:29:cb:90:c1:e9:
                    65:63:db:ba:d5:6d:92:5c:38:b2:1b:71:a7:57:2c:
                    84:23:35:b2:22:f9:b1:96:cd:09:26:96:41:6b:02:
                    04:c7:70:c6:57:0b:a5:6a:71:b7:22:78:b8:57:13:
                    3b:a8:c5:33:1e:3c:6a:a7:80:5f:f8:49:f0:92:6d:
                    70:eb:4b:61:7e:25:cf:4c:46:15:63:2d:59:7e:c4:
                    2a:5e:dd:4f:47:80:f2:d6:69:80:8f:ae:2a:e5:5b:
                    b8:b4:58:c2:6f:08:f8:24:8b:24:35:d7:a8:e6:f9:
                    2e:68:b1:c3:13:ec:61:37:56:4e:91:04:a7:57:fe:
                    6c:7a:b7:2e:a3:8d:74:d8:ef:c5:94:08:27:a4:85:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BF:2C:CB:AC:B1:3D:41:A1:06:B0:70:77:17:A4:F3:E7:76:B0:AE
            X509v3 Authority Key Identifier:
                keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:38:95:23:a4:95:e9:d7:ba:9f:60:65:88:a1:80:c0:73:
         79:d3:29:23:75:d3:f5:52:22:d4:ca:cd:04:c6:8f:12:44:e3:
         9a:b2:8a:7f:1f:35:06:5a:b0:88:af:b1:a3:9a:12:9f:0f:c9:
         39:74:07:bd:22:06:85:04:45:ef:65:6c:7d:f9:27:ec:7f:6a:
         38:89:f3:a4:f8:94:24:af:ab:ad:f5:9b:6d:5d:9d:52:93:5f:
         03:6c:99:62:31:46:95:76:d4:4b:38:a0:c4:f8:86:ba:c6:79:
         4c:f6:14:1e:78:2d:7d:16:41:9d:4a:0e:1c:81:42:68:ba:cd:
         16:43:3b:34:75:d7:91:fe:3d:b2:3a:81:04:74:f9:4e:e1:96:
         d2:ab:07:7e:6e:f5:e7:ac:72:bb:84:5a:d3:09:6c:72:d1:bf:
         46:7c:fe:1f:23:d5:d9:04:76:15:33:10:3d:e7:d0:b5:42:10:
         52:ff:16:ab:b4:60:c7:67:55:4d:b0:f8:1e:ab:22:26:ec:d7:
         62:72:9f:f9:75:11:70:02:4d:15:08:36:5e:ff:28:a9:04:18:
         d6:83:c7:fa:b0:0e:d7:61:60:9c:56:4e:89:a0:fe:0b:1a:68:
         19:14:2d:25:a8:1d:ad:5f:6f:56:1a:0d:9a:5d:42:7d:f9:85:
         27:88:22:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUBrghfmeYrhsKmj5axGLJdNb22vYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMTQxNjRCQkE5QkM0QjNBNTBBNzI5MTE2QkM3NTc0
RDJDRDZFRjAeFw0yNTEyMjUwODEyNDVaFw0yNTEyMjYwOTE4NDVaMDMxMTAvBgNV
BAMTKDY1QkYyQ0NCQUNCMTNENDFBMTA2QjA3MDc3MTdBNEYzRTc3NkIwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWLoMaWBTRo44mmIWdgToB3oS
3i+ZPgUjGyx9WSsefMsXovTG0Sa8BL2wFzViaPNtg6IkVHdHLfMPHXZHHAWJymLG
Osrvj1kKaWrvL9XxfX2FyuYdnGInXJQNM3kHvZw0MoNxRe9/P7PxdBy3fMmTSIwp
y5DB6WVj27rVbZJcOLIbcadXLIQjNbIi+bGWzQkmlkFrAgTHcMZXC6VqcbcieLhX
EzuoxTMePGqngF/4SfCSbXDrS2F+Jc9MRhVjLVl+xCpe3U9HgPLWaYCPrirlW7i0
WMJvCPgkiyQ116jm+S5oscMT7GE3Vk6RBKdX/mx6ty6jjXTY78WUCCekhZZlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUZb8sy6yxPUGhBrBwdxek8+d2sK4wHwYDVR0j
BBgwFoAUihFBZLupvEs6UKcpEWvHV00s1u8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290
YVEvMS84QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMTE0MTY0QkJBOUJDNEIz
QTUwQTcyOTExNkJDNzU3NEQyQ0Q2RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MkdRY2pTYjNQeDZNMW1wM3pSbkhhaDl6TVFBYllNQ2FRVktpdHFqc290YVEvMS84
QTExNDE2NEJCQTlCQzRCM0E1MEE3MjkxMTZCQzc1NzREMkNENkVGLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbag4lSOklenXup9gZYihgMBzedMpI3XT9VIi1MrNBMaPEkTjmrKKfx81Blqw
iK+xo5oSnw/JOXQHvSIGhQRF72Vsffkn7H9qOInzpPiUJK+rrfWbbV2dUpNfA2yZ
YjFGlXbUSzigxPiGusZ5TPYUHngtfRZBnUoOHIFCaLrNFkM7NHXXkf49sjqBBHT5
TuGW0qsHfm7156xyu4Ra0wlsctG/Rnz+HyPV2QR2FTMQPefQtUIQUv8Wq7Rgx2dV
TbD4HqsiJuzXYnKf+XURcAJNFQg2Xv8oqQQY1oPH+rAO12FgnFZOiaD+CxpoGRQt
JagdrV9vVhoNml1CffmFJ4gi/g==
-----END CERTIFICATE-----
Generated at Thu Dec 25 16:25:49 2025 by rpki-client