This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
File:                     CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json)
Hash identifier:          fuDH8G4XkxJ6D9wJIcgwslgBhDzDgXOXAtedb6hNYeE=
Subject key identifier:   B7:4D:18:0F:62:BD:DD:CE:8A:6E:86:70:1F:FC:BB:1B:B5:96:62:73
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Certificate issuer:       /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial:       5C1D9695F364F4867F0EEA12F359AAD5D70DD170
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
Manifest number:          01F2
Signing time:             Fri 19 Dec 2025 18:34:41 +0000
Manifest this update:     Fri 19 Dec 2025 18:29:41 +0000
Manifest next update:     Sat 20 Dec 2025 21:50:41 +0000
Files and hashes:         1: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=)
                          2: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: XC8Ai4vu9UcN4n8RPs/4mr9GA/v6e0iktnH1n2bN6w8=)
                          3: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: NKXUigyoNgvGw8sUtLKz4YtdCSr4kmNU60Zrw78lgfY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
                          rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1d:96:95:f3:64:f4:86:7f:0e:ea:12:f3:59:aa:d5:d7:0d:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
        Validity
            Not Before: Dec 19 18:29:41 2025 GMT
            Not After : Dec 20 21:50:41 2025 GMT
        Subject: CN=B74D180F62BDDDCE8A6E86701FFCBB1BB5966273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:15:bc:7f:32:d9:6f:b1:5b:8f:74:8c:ef:
                    3c:a9:d4:fa:38:5b:9d:59:24:47:ec:ac:f8:7c:95:
                    f0:84:4f:2f:1f:58:95:b5:84:0c:bc:b0:d8:8d:50:
                    ac:26:1d:a8:a7:8e:a9:77:a9:57:86:56:a1:cc:7d:
                    5c:81:4a:29:4c:77:90:d9:06:d2:33:4c:17:0f:68:
                    43:92:89:0f:88:9f:07:03:1b:54:22:57:36:28:b1:
                    03:55:2b:49:34:94:68:4b:fc:43:fe:0a:e8:b9:75:
                    8a:5d:79:9b:5a:3b:de:39:0c:55:48:cf:e1:0f:3c:
                    8a:18:4f:08:41:4a:a7:08:f4:7f:0d:c9:20:0b:e3:
                    c1:7c:82:4a:c5:16:d6:34:7c:9e:a3:b7:48:02:58:
                    7d:d5:1a:26:68:18:ef:b6:3b:19:a8:ef:b1:6b:31:
                    63:f1:dd:9b:66:a8:b5:12:73:6d:c2:13:3a:75:15:
                    01:57:82:e9:bc:af:c7:05:43:db:93:03:f0:6c:d6:
                    d8:94:3b:d3:f3:6f:3c:fb:89:c6:8a:df:fe:fb:4d:
                    77:07:62:f7:14:dc:0a:fc:bf:57:14:1c:47:61:13:
                    3d:22:84:c0:c1:58:bf:5d:0b:1b:c1:da:03:ca:7a:
                    50:6f:5d:8a:1f:ce:ee:1f:48:1d:26:8d:b0:a5:d6:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4D:18:0F:62:BD:DD:CE:8A:6E:86:70:1F:FC:BB:1B:B5:96:62:73
            X509v3 Authority Key Identifier:
                keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:2f:a5:4c:62:db:bd:6e:42:08:71:ad:ba:61:f8:03:83:ee:
         79:0d:54:eb:11:20:5a:39:a2:a6:46:17:48:f2:3c:83:24:18:
         cf:40:f8:de:d3:92:90:88:27:9b:04:ac:98:98:b1:12:c3:15:
         e0:d8:54:80:66:94:df:ab:70:68:56:f2:0e:49:b0:bf:b2:e5:
         78:c7:57:ee:71:04:71:19:83:17:0a:30:a0:d7:57:01:60:3f:
         48:ac:9c:a9:11:42:b0:1c:f8:ed:21:0d:9b:80:7e:67:4e:23:
         62:31:c1:2b:73:be:3b:01:f4:02:2f:6c:86:d9:d1:93:06:ad:
         73:23:b0:c4:ee:97:63:dc:3c:33:2a:af:38:e7:a3:c7:19:6e:
         f4:7c:bb:e5:be:64:7e:c5:12:fc:d1:91:98:4f:e7:33:de:e9:
         64:8c:12:f3:2a:ed:7a:d5:ec:ee:f0:88:49:32:9c:41:a8:fc:
         0d:bd:3e:a7:b3:a3:7a:46:25:9e:8d:ad:62:07:81:ba:03:aa:
         c3:32:7f:4f:7a:fb:2b:f5:19:8a:7d:0b:c5:ff:2d:34:54:3c:
         6a:bb:4b:02:fa:09:b7:e6:f4:52:4a:bd:93:1a:ab:aa:db:b5:
         95:c3:a2:79:56:be:75:13:31:93:a6:c4:7d:14:2e:12:07:da:
         2f:21:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:37:07 2025 by rpki-client