This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
File:                     BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft (raw, json)
Hash identifier:          eYFE1c/i8G+/tp7MouKweM5mdIruGEg6gwy+rUPAwzA=
Subject key identifier:   DA:C7:D4:4D:D3:6A:6B:AA:F5:A5:11:F8:BA:D3:51:60:6E:53:DD:6A
Authority key identifier: BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
Certificate issuer:       /CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Certificate serial:       9CDDE549A167A9F46B3196BFDF42BB7F48D534
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
Manifest number:          01A9
Signing time:             Sat 20 Dec 2025 04:46:17 +0000
Manifest this update:     Sat 20 Dec 2025 04:41:17 +0000
Manifest next update:     Sun 21 Dec 2025 04:53:17 +0000
Files and hashes:         1: 323830343a356635303a3a2f33322d3332203d3e20323639303931.roa (hash: JjfpvZ/a8rn6RTfBN/eKydi2OqnLDF2aPd2lyChWMm4=)
                          2: 34352e3137382e3139302e302f32332d3233203d3e20323639303931.roa (hash: SbDiPiw0zgFwokUFBdhrKqHyKSsK+ALqomP5kAXUCs4=)
                          3: 34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa (hash: 37SvGuZe58jpzCszJAEDfr+qlabxrvB4pp9ZajuFtQ4=)
                          4: BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl (hash: k3qTCj7WgCCDkvLswDIeZEmhkXV6cQSPL5nal6eSQac=)
                          5: 34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa (hash: R9nE7BqBERJ9SCyqfUr8ziWc17ryihiqm8fi5mviSqM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl
                          rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9c:dd:e5:49:a1:67:a9:f4:6b:31:96:bf:df:42:bb:7f:48:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
        Validity
            Not Before: Dec 20 04:41:17 2025 GMT
            Not After : Dec 21 04:53:17 2025 GMT
        Subject: CN=DAC7D44DD36A6BAAF5A511F8BAD351606E53DD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:36:16:6e:d2:77:6f:e5:f7:19:c5:05:5e:b8:
                    78:ce:cb:51:b3:13:16:50:c5:cd:5f:d7:0a:79:f0:
                    76:fb:88:69:0a:26:a2:8d:92:62:ef:79:7b:36:64:
                    be:c5:cd:4b:36:13:fc:5e:f8:94:39:14:63:6c:d7:
                    d3:ff:67:40:92:94:94:ca:44:5e:be:ac:4f:a2:d9:
                    86:dc:00:78:68:86:d8:4b:cd:7f:98:b7:14:3c:c0:
                    99:f3:6f:e2:d4:10:4c:f3:ab:26:75:a1:48:3c:5a:
                    ee:58:d5:d9:9a:b2:e9:55:67:9c:04:4e:6b:a4:18:
                    fb:3e:3a:b1:75:7c:da:f9:02:04:03:93:f0:91:15:
                    83:76:b6:88:95:8c:f4:a5:32:cd:74:5d:0a:b8:53:
                    43:e6:b9:1b:7c:81:09:e6:9f:3f:6d:c9:20:71:6f:
                    dd:4f:b2:1d:83:45:3e:fa:39:5e:4f:b1:6c:fd:40:
                    c2:3f:23:32:c0:fb:5e:39:70:ae:51:73:0a:ff:c2:
                    f0:d2:4f:2c:5f:02:d0:cc:a1:c1:da:17:4f:35:8b:
                    1f:3e:0d:fc:20:fb:af:37:01:09:94:ab:39:0e:0a:
                    fc:35:7b:51:cc:ca:c4:ad:7a:da:88:b6:c7:10:d2:
                    fb:40:19:6e:7f:1e:84:cd:b5:9f:22:4b:d6:13:6c:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C7:D4:4D:D3:6A:6B:AA:F5:A5:11:F8:BA:D3:51:60:6E:53:DD:6A
            X509v3 Authority Key Identifier:
                keyid:BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:08:ea:d0:89:73:88:e5:34:46:50:57:8b:9d:6c:d0:21:c8:
         83:d9:91:8a:58:f0:1c:9c:b9:3c:95:c2:ca:4f:26:fc:bb:be:
         d5:c5:97:e9:22:b4:f1:20:50:99:6b:b8:16:e1:58:f0:8c:6b:
         f7:e3:02:fd:6a:54:05:bd:29:ef:06:05:85:69:7e:d4:ca:7b:
         5c:62:7c:af:9c:db:fd:8d:4e:3b:87:2b:2f:b5:85:28:cd:10:
         37:f7:2b:96:a8:09:8a:36:ef:a3:c8:79:61:a4:19:34:33:2e:
         7e:b6:95:38:08:d4:ed:d6:3c:d7:5f:24:80:27:51:e7:03:24:
         d7:23:5e:34:25:d2:1f:31:90:78:26:1e:5b:5a:11:89:65:f2:
         a3:50:10:47:d3:de:cc:47:a6:06:e0:37:a1:5e:ce:90:de:b0:
         34:fa:6c:33:81:58:aa:00:a9:36:05:d2:e9:2d:d8:1c:e5:fc:
         dc:30:b7:51:fb:4b:4c:6b:b8:d9:e4:e6:10:8f:a6:a7:a2:57:
         40:a5:31:a3:8e:d6:c0:98:50:1e:af:9f:d8:d6:11:eb:94:e2:
         92:e0:21:6f:01:53:60:4a:c9:13:19:fa:4e:67:5b:55:4a:f2:
         0f:bf:74:e7:50:b6:51:9a:90:77:54:bb:1d:6f:a7:bd:c7:42:
         f6:95:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:48:55 2025 by rpki-client