This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
File:                     8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft (raw, json)
Hash identifier:          z6AXRtbxFeheFQV2IQv+zWH+r4/gjQt6QNHmAimy1rE=
Subject key identifier:   31:3E:2E:BC:05:8F:49:D7:A1:13:97:74:BF:70:3A:F3:17:BE:25:06
Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
Certificate issuer:       /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Certificate serial:       4D5A5DF7EB82EC82342637F3519AD8A2E4EED003
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
Manifest number:          021F
Signing time:             Sat 20 Dec 2025 03:30:53 +0000
Manifest this update:     Sat 20 Dec 2025 03:25:53 +0000
Manifest next update:     Sun 21 Dec 2025 06:44:53 +0000
Files and hashes:         1: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl (hash: lShGWkycQoha/7uxbiCJgM98axvhk5kxEkudumTENY4=)
                          2: 323830343a353461383a3a2f33322d3438203d3e20323638363633.roa (hash: m7+hgmJslk8ghgjHVc6HPco/IHPiW92CG2MNjN+UFQs=)
                          3: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (hash: jDkzEu3dfEoW/TK85s2VDg93/wRMdxQYYXsBqd5++Ao=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
                          rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 06:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5a:5d:f7:eb:82:ec:82:34:26:37:f3:51:9a:d8:a2:e4:ee:d0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
        Validity
            Not Before: Dec 20 03:25:53 2025 GMT
            Not After : Dec 21 06:44:53 2025 GMT
        Subject: CN=313E2EBC058F49D7A1139774BF703AF317BE2506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:b8:8c:5e:09:2f:d9:76:0e:9d:b8:80:66:
                    78:f2:c3:c9:5e:58:d2:09:86:f6:b3:33:4b:c2:47:
                    01:de:f0:3f:c3:b8:7e:f9:52:9c:29:cd:6c:26:52:
                    27:dd:3a:74:4c:05:c2:91:62:27:d7:8e:d6:a5:87:
                    0f:b0:4b:bb:ca:9e:de:fc:c3:ea:4b:6e:e6:e5:f2:
                    cf:fa:8e:1b:bb:51:3f:38:57:36:3c:3b:40:b0:c2:
                    21:18:69:cd:69:68:c9:01:83:52:0d:6d:5e:09:86:
                    c5:5e:69:99:97:f2:7a:0f:92:4e:37:86:e0:22:22:
                    fa:c2:93:b5:db:ad:a4:ac:7d:5b:b6:30:a7:ce:a9:
                    10:4d:10:3a:8c:f0:1f:7e:f1:23:c2:ee:d1:44:47:
                    46:4a:8d:6e:cd:3d:cc:eb:b0:a5:23:c5:62:fa:f7:
                    3c:0c:8a:53:f8:83:12:a0:12:31:78:72:30:65:13:
                    19:44:e7:08:36:25:54:29:0b:d1:fc:d8:8a:a2:ae:
                    d9:3f:61:3b:ac:14:59:8e:85:32:48:e5:15:3f:01:
                    1d:74:0d:59:c0:8a:73:6c:72:7b:19:3f:5d:63:d4:
                    ba:ec:c6:dc:91:82:06:04:ad:04:80:cb:6a:3f:4e:
                    69:80:dd:fd:db:88:ea:b7:75:49:32:2e:ec:53:2a:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3E:2E:BC:05:8F:49:D7:A1:13:97:74:BF:70:3A:F3:17:BE:25:06
            X509v3 Authority Key Identifier:
                keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:ad:9b:a1:eb:a3:07:98:7e:d2:36:8d:5f:de:5f:0d:65:
         f0:17:c7:e6:a0:12:67:24:e1:56:7c:3f:1d:e4:3e:ff:69:48:
         3c:27:f4:4d:12:a9:ef:28:cb:0a:83:d2:81:27:f2:30:fa:bd:
         42:8d:37:ac:60:8b:5f:17:2e:31:fb:bf:42:36:4a:ad:47:68:
         a3:37:ab:95:1d:40:c3:c6:df:f0:0d:d8:26:7f:bc:fd:fb:d5:
         58:2a:3a:b8:ed:6e:81:88:17:74:94:96:03:66:ba:af:92:24:
         c7:ec:2f:6e:23:04:73:74:ab:3d:df:88:b9:26:40:47:17:4f:
         8d:0c:84:20:97:1d:98:90:61:dd:35:90:43:e1:10:27:e4:08:
         b6:f3:32:5f:f2:6a:fc:21:84:0d:5a:d8:1b:2e:27:89:71:58:
         d7:17:cc:80:17:84:97:32:60:2e:32:59:d5:aa:c3:22:c7:75:
         eb:c3:d9:a8:bd:4e:d9:c2:67:bf:a8:fd:6a:7d:bc:06:64:ed:
         18:dc:c6:7e:70:49:6b:1e:02:1a:82:6b:77:8a:b5:2f:ae:1a:
         e9:89:62:c0:e7:9b:a2:f2:0b:08:63:6b:2f:d7:2b:10:30:db:
         25:48:f4:bf:d6:b3:38:be:c4:a7:0a:7b:16:da:64:f5:f0:36:
         23:40:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:48:24 2025 by rpki-client