This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft (raw, json)
Hash identifier:          23H85X6/TK8bIQ/jNAuCzH8e8hMe/MzqoRMeUBtUF1c=
Subject key identifier:   1D:15:2F:B0:D6:DF:01:ED:00:C0:4C:AB:87:C9:F6:29:90:26:8D:7A
Authority key identifier: A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Certificate issuer:       /CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
Certificate serial:       6396A0F478296305B5C60215967D98B576A56DF8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
Manifest number:          03BD
Signing time:             Tue 30 Dec 2025 19:20:00 +0000
Manifest this update:     Tue 30 Dec 2025 19:15:00 +0000
Manifest next update:     Wed 31 Dec 2025 19:20:00 +0000
Files and hashes:         1: 34352e3232362e34362e302f32342d3234203d3e20323636393538.roa (hash: SErwqqgGaKkYiiTZSZGe1niblQP3x2+Q6HGo8mm/f7g=)
                          2: A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl (hash: VOg5b+Q1hK24fHHHKZct4+8UkbBLKzi2dZig2DEe+Ts=)
                          3: 323830343a343566383a3a2f33322d3332203d3e20323636393538.roa (hash: oIn9GZF5p5pNefIVeN0UiS8wgqn3Gv7XI5/YxvIRfSA=)
                          4: 34352e3232362e34342e302f32322d3232203d3e20323636393538.roa (hash: mFDQzS/Ad8gKFIuL0FgAwGbiz2AkpGyAGickt8RlhVc=)
                          5: 34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (hash: GxoI1DsIOHonoYDFpLsELEka4FnyR3oyfVJn+2wiMAE=)
                          6: 34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (hash: cvl9XN6D9prdMFpaUtK33s8zHTgWyCPhHvs5DTeHQOk=)
                          7: 34352e3232362e34342e302f32342d3234203d3e20323636393538.roa (hash: +K5pOFau4ZXe2MVLt8P7O8Yh0nJiT0WuYcjyq4lHU0U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl
                          rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 31 Dec 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:96:a0:f4:78:29:63:05:b5:c6:02:15:96:7d:98:b5:76:a5:6d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Validity
            Not Before: Dec 30 19:15:00 2025 GMT
            Not After : Dec 31 19:20:00 2025 GMT
        Subject: CN=3082010A0282010100B1AEF2E6C6037B0C6197B53BE3BA4E97E5B0EDD55CEEC2B2C83182E38DD35523406D97732B949EC5A90B64C79CF6019D00DCFF574E4704F9BB976A6C5C3746A19754C3B2A3CE6B03C99456CAC02CB1144E09723B058B4D0F197D4960630020959FD649F82B51F85783279A45B4F20A0AEFF4079E8C3327CCFEDFB05B8F6A925C685CB36E9A896BFCE9C1C4DF6B408F6377143A0B19A2F79754AE24CB6A364B3D0CAD32AA85BC726D837A5644498A5E91656F462D92C096F212879932E2F78FE029AB42D9748DB149FC80E09B4C46625FDA778DB36C606FD640C945C13235E908A56084A9C91013A8292337DCFA038D82D4F593117CA95530D547C2AC3D5930850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:f2:e6:c6:03:7b:0c:61:97:b5:3b:e3:ba:
                    4e:97:e5:b0:ed:d5:5c:ee:c2:b2:c8:31:82:e3:8d:
                    d3:55:23:40:6d:97:73:2b:94:9e:c5:a9:0b:64:c7:
                    9c:f6:01:9d:00:dc:ff:57:4e:47:04:f9:bb:97:6a:
                    6c:5c:37:46:a1:97:54:c3:b2:a3:ce:6b:03:c9:94:
                    56:ca:c0:2c:b1:14:4e:09:72:3b:05:8b:4d:0f:19:
                    7d:49:60:63:00:20:95:9f:d6:49:f8:2b:51:f8:57:
                    83:27:9a:45:b4:f2:0a:0a:ef:f4:07:9e:8c:33:27:
                    cc:fe:df:b0:5b:8f:6a:92:5c:68:5c:b3:6e:9a:89:
                    6b:fc:e9:c1:c4:df:6b:40:8f:63:77:14:3a:0b:19:
                    a2:f7:97:54:ae:24:cb:6a:36:4b:3d:0c:ad:32:aa:
                    85:bc:72:6d:83:7a:56:44:49:8a:5e:91:65:6f:46:
                    2d:92:c0:96:f2:12:87:99:32:e2:f7:8f:e0:29:ab:
                    42:d9:74:8d:b1:49:fc:80:e0:9b:4c:46:62:5f:da:
                    77:8d:b3:6c:60:6f:d6:40:c9:45:c1:32:35:e9:08:
                    a5:60:84:a9:c9:10:13:a8:29:23:37:dc:fa:03:8d:
                    82:d4:f5:93:11:7c:a9:55:30:d5:47:c2:ac:3d:59:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:2F:B0:D6:DF:01:ED:00:C0:4C:AB:87:C9:F6:29:90:26:8D:7A
            X509v3 Authority Key Identifier:
                keyid:A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:fc:f8:ed:fd:89:9b:87:33:c3:53:ee:b6:7d:05:42:37:ef:
         ef:84:f6:56:7b:f0:9c:c2:7b:0e:f3:a9:12:99:91:b5:8e:f7:
         47:13:04:f4:43:53:e3:a9:6a:c8:6d:b2:54:41:d9:ea:61:88:
         af:68:c1:50:84:86:e4:8f:8d:88:9a:49:53:46:f3:36:f8:bf:
         17:ce:fe:78:fa:93:47:c7:42:a9:e5:71:51:ae:a3:f0:8e:fa:
         27:5c:4d:a1:c3:89:66:91:70:db:d5:1a:4a:78:9f:1e:09:76:
         d2:d9:84:ca:a3:b3:af:6d:84:7b:16:bf:ae:4e:61:c4:12:0a:
         1b:83:b5:eb:51:25:70:6c:66:f0:ac:14:13:cf:25:23:98:f7:
         71:ca:c1:fb:2a:0a:f1:7c:30:bf:c9:d2:74:87:a3:ea:3b:4c:
         c0:ee:c2:a5:ea:b4:87:7f:1b:b5:b3:7c:16:da:31:5a:c8:5f:
         d3:3e:b2:a9:46:f5:a8:e2:17:73:dc:34:30:b6:01:86:84:4c:
         f6:b3:ad:af:15:8c:7f:24:8c:0d:43:d9:4f:22:f6:fc:e4:1b:
         17:5c:3b:1e:3e:d9:4c:e6:8f:27:6a:a7:d9:ce:3d:3f:92:15:
         c1:c0:3e:9e:35:5a:59:d4:3b:0c:73:55:2f:83:72:e0:b6:b6:
         10:90:9e:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 31 04:01:51 2025 by rpki-client