This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft
File:                     9AD736118DEE4B1A75B2C689365A87E1543247BA.mft (raw, json)
Hash identifier:          E/7+YtLsySz952+taPahcChmaDPQmy5MSdta5pfhyzI=
Subject key identifier:   F3:C5:99:9C:7A:8A:D1:60:FE:26:91:43:C2:51:38:D6:C7:FC:D9:A3
Authority key identifier: 9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA
Certificate issuer:       /CN=9AD736118DEE4B1A75B2C689365A87E1543247BA
Certificate serial:       3FAFB4D069830E976AC2FC2637272A412FE57E77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft
Manifest number:          013A
Signing time:             Fri 26 Dec 2025 14:18:43 +0000
Manifest this update:     Fri 26 Dec 2025 14:13:43 +0000
Manifest next update:     Sat 27 Dec 2025 15:14:43 +0000
Files and hashes:         1: 323830343a393162303a3a2f33322d3438203d3e20323734363538.roa (hash: OHDgjz8XKrpjYqeCeBLrr9sjRso+Et//ZZ2WnBAfncg=)
                          2: 9AD736118DEE4B1A75B2C689365A87E1543247BA.crl (hash: LHguhCfReP2CHEoH2oTzDArfSx/GBswGexxE4TfuPJM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl
                          rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Dec 2025 15:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:af:b4:d0:69:83:0e:97:6a:c2:fc:26:37:27:2a:41:2f:e5:7e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD736118DEE4B1A75B2C689365A87E1543247BA
        Validity
            Not Before: Dec 26 14:13:43 2025 GMT
            Not After : Dec 27 15:14:43 2025 GMT
        Subject: CN=F3C5999C7A8AD160FE269143C25138D6C7FCD9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:ba:e0:8f:5f:c3:86:76:15:1a:60:f2:57:
                    b8:f1:57:13:c2:24:a4:7d:75:ef:72:25:9a:43:7e:
                    d5:5a:b5:22:ea:d1:60:30:f6:28:8a:a3:84:63:2c:
                    89:b3:57:31:a3:ed:e0:92:14:18:2d:72:14:94:af:
                    6f:5a:04:1f:4b:80:7c:9f:1c:ef:30:78:ae:13:e9:
                    12:54:00:0d:d8:2b:96:fe:d1:a1:d8:5f:95:67:31:
                    92:8b:55:00:93:ab:27:07:dc:d9:c4:b1:94:71:1c:
                    6d:b8:ca:33:64:dd:c5:b6:ba:18:85:2a:d2:77:6c:
                    42:3d:df:2a:41:59:f5:de:2d:0a:c3:1b:42:8b:10:
                    12:50:bd:54:9b:01:82:3b:4c:88:a7:f9:e0:f2:7c:
                    54:d1:45:8e:5c:ec:5e:02:af:7c:09:70:56:c1:65:
                    c2:86:89:e7:19:8a:bd:64:5d:34:a1:3d:cb:64:7a:
                    4a:14:2e:34:cc:8a:a0:85:7c:6f:4d:f7:c4:14:91:
                    42:6e:19:21:d1:19:eb:b3:20:44:06:5d:ac:aa:a3:
                    19:47:0d:52:0b:66:b8:45:55:0e:e0:db:b0:39:72:
                    27:46:85:ad:a0:6b:18:54:5c:d5:2d:23:3c:0f:c7:
                    70:9c:0e:3d:96:8d:69:21:1e:ee:5d:1a:bf:c2:cc:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C5:99:9C:7A:8A:D1:60:FE:26:91:43:C2:51:38:D6:C7:FC:D9:A3
            X509v3 Authority Key Identifier:
                keyid:9A:D7:36:11:8D:EE:4B:1A:75:B2:C6:89:36:5A:87:E1:54:32:47:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD736118DEE4B1A75B2C689365A87E1543247BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nxBvrmeEhVUotFuLh937SXxpqf9Eesej4KcykRTiZog/0/9AD736118DEE4B1A75B2C689365A87E1543247BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:20:93:c7:a4:30:22:81:bd:ec:81:17:18:bb:0d:e6:75:
         f9:e1:26:28:a2:64:f7:09:5c:96:b3:be:14:32:ea:d4:ac:1c:
         60:d8:1a:eb:8e:c5:c2:9d:d6:a9:b2:3e:8c:9b:09:f7:5c:2a:
         dc:da:29:e0:4c:4e:88:af:5f:fe:c2:17:c9:86:3d:6e:7b:62:
         1b:ec:d8:f0:b1:2e:03:b4:50:a9:c5:16:32:4d:11:f3:86:a9:
         55:4a:96:02:50:a8:59:ad:c4:36:07:cc:77:2f:30:bc:05:d2:
         6f:41:64:0b:d2:59:f6:97:e5:37:be:25:fb:92:e1:4f:a0:09:
         c3:fe:fb:5b:b0:68:2e:69:57:25:f5:8d:1c:82:65:e3:99:d2:
         6d:d1:26:0f:ab:c4:3b:2d:54:a6:a2:cc:75:93:53:c0:58:40:
         b8:7c:7c:35:8f:2f:14:b2:9a:71:8d:b4:e2:9b:72:fd:7a:dd:
         c4:e9:d9:d1:81:ef:b5:69:0e:e2:ac:88:da:eb:9f:d6:de:66:
         ee:68:a4:8b:e6:15:cc:1f:16:a3:ae:cb:f2:94:9e:57:9a:96:
         5b:da:01:50:be:db:ed:bb:0c:c1:fc:30:ee:45:d9:62:24:71:
         33:14:b8:f6:7c:64:06:fa:02:bb:52:34:da:c9:8e:df:ec:d8:
         f7:5d:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:37:23 2025 by rpki-client