This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
File:                     5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft (raw, json)
Hash identifier:          fUtaqHqoS9y6UI74QwEDaci0UzOXswAcXaN2NrQ6YGM=
Subject key identifier:   30:9F:A1:4B:5F:C8:EA:92:DD:59:8E:93:09:8F:30:A5:9F:73:12:CD
Authority key identifier: 5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E
Certificate issuer:       /CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
Certificate serial:       69703C52BB0858E9B1774120865AF4799D64C86C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
Manifest number:          3A
Signing time:             Fri 19 Dec 2025 18:22:48 +0000
Manifest this update:     Fri 19 Dec 2025 18:17:48 +0000
Manifest next update:     Sat 20 Dec 2025 21:16:48 +0000
Files and hashes:         1: 5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl (hash: QDABZ7PtAzFU+k2l41soj5lyxbPZVK4DqLHTdgTn7mI=)
                          2: 34352e3137302e39322e302f32322d3332203d3e20323638313439.roa (hash: ABcV00bsmj4p/EAXwK9p2+WcufB6flOhojnHHzFZ/Ic=)
                          3: 323830343a353863383a3a2f33322d313238203d3e20323638313439.roa (hash: FfX++mMThMyA5Phf+j3yBrq+Yb9+v6+7rFQbrQ23iVY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl
                          rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 21:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:70:3c:52:bb:08:58:e9:b1:77:41:20:86:5a:f4:79:9d:64:c8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E
        Validity
            Not Before: Dec 19 18:17:48 2025 GMT
            Not After : Dec 20 21:16:48 2025 GMT
        Subject: CN=309FA14B5FC8EA92DD598E93098F30A59F7312CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:60:30:ef:51:70:b3:4f:e4:e8:89:52:55:
                    53:27:96:43:ad:9e:77:d9:84:b7:e6:22:30:d6:93:
                    3c:e6:d2:9d:c6:2a:67:8c:34:9b:3c:30:c3:2d:5d:
                    35:62:6a:95:46:8b:72:aa:93:d9:d1:62:0d:c5:ea:
                    fc:c3:f5:25:34:04:2e:8a:48:fc:82:1e:96:2b:6c:
                    7b:39:9d:40:4f:94:76:a9:7e:10:06:1c:fc:a5:67:
                    df:af:43:a6:07:ec:84:b3:1d:cb:d7:f1:12:2e:b0:
                    cb:c7:22:e5:35:f5:f5:a4:38:12:27:08:ca:73:fa:
                    7c:47:58:e4:a5:a0:64:1e:e9:a5:45:3a:46:3d:96:
                    34:67:5e:e5:01:62:0e:75:dc:22:10:92:e4:99:6a:
                    6e:19:d3:69:77:6c:15:94:3f:c0:9f:9a:29:cd:66:
                    80:da:19:28:7b:d4:c8:5f:6f:fd:39:03:83:a1:46:
                    2f:fd:4b:29:9f:86:d7:36:bf:1a:7d:a6:bc:7e:ac:
                    cb:7d:e2:50:9b:fa:f8:2c:c1:00:f7:57:79:e2:29:
                    83:21:91:29:d6:ce:2a:db:3d:16:b9:f2:18:06:dc:
                    b6:52:a7:da:c3:f2:9b:05:e7:8d:bf:f5:a5:84:c7:
                    8c:5b:9b:fc:2f:de:05:50:26:68:d8:1a:b0:2a:e0:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:A1:4B:5F:C8:EA:92:DD:59:8E:93:09:8F:30:A5:9F:73:12:CD
            X509v3 Authority Key Identifier:
                keyid:5F:A9:C0:1F:53:41:C7:DB:EC:4A:1A:09:BA:0B:2C:17:68:61:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/5FA9C01F5341C7DBEC4A1A09BA0B2C176861398E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:85:fe:03:67:12:34:d5:30:b0:e0:aa:ac:ba:0e:94:5f:dd:
         a4:13:fc:90:5e:79:46:d1:0d:1d:a7:ec:82:3c:42:fa:70:a0:
         ad:33:18:db:fe:5c:a5:37:46:0a:be:de:fc:85:d6:62:83:c2:
         2c:40:2b:43:81:de:ea:e4:8f:39:cf:4a:f8:79:8a:dc:74:cd:
         b4:b8:0e:82:e7:89:5b:f8:87:bb:90:36:a0:46:41:60:c8:4d:
         7e:20:6c:51:06:28:99:e8:29:43:29:3f:98:26:5d:db:b4:75:
         83:ab:45:c6:7f:fb:9d:71:84:21:c8:50:31:a6:a7:a8:5b:6d:
         91:c6:57:2c:44:87:a6:5e:96:9c:b3:bc:b1:ae:0b:2a:c2:1e:
         d7:b3:18:c8:ab:4f:41:2a:e0:a9:18:39:d2:7c:c1:33:e0:77:
         80:c4:e5:95:06:79:ce:65:4b:41:dd:4c:77:3a:55:9a:e9:6d:
         87:63:48:8c:27:7b:75:30:8f:97:55:bc:6f:2a:a4:ca:10:6d:
         be:ca:bc:22:82:ba:33:2c:0e:88:7f:ea:45:3d:03:69:26:a0:
         f8:f9:0e:8a:ed:c8:fd:29:4f:6c:07:f9:52:a7:47:6b:2e:21:
         25:f5:1d:57:a2:c3:cb:fe:9d:4b:c8:cf:4b:df:66:16:4b:87:
         d6:8c:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----