This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
File:                     D5A1856A52E7F9EBF280FCB86750839A6466C111.mft (raw, json)
Hash identifier:          4dgUtaSbfNu+RLNdYaINjP1YJEK/teMyb/ab8tH5fk0=
Subject key identifier:   78:C7:1C:93:DC:1E:E3:FA:4B:37:AE:FC:4C:D1:05:94:29:A1:D6:15
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Certificate issuer:       /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial:       6DE23146BFE9BBD81247DE4F82576B1674267AE5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
Manifest number:          84
Signing time:             Sat 20 Dec 2025 06:11:48 +0000
Manifest this update:     Sat 20 Dec 2025 06:06:48 +0000
Manifest next update:     Sun 21 Dec 2025 07:50:48 +0000
Files and hashes:         1: 3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (hash: KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=)
                          2: D5A1856A52E7F9EBF280FCB86750839A6466C111.crl (hash: Ug9zrdZcyJ7Pmlhj4YUK+nK3HsLhU5iKM2NZac5JfzU=)
                          3: 323830343a383237633a3a2f33322d313238203d3e20323632393337.roa (hash: w7mrlzP9adJiyFUUgR0vUJKBTlOPeWaDs+XqI7y8EJY=)
                          4: 3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (hash: iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
                          rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e2:31:46:bf:e9:bb:d8:12:47:de:4f:82:57:6b:16:74:26:7a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
        Validity
            Not Before: Dec 20 06:06:48 2025 GMT
            Not After : Dec 21 07:50:48 2025 GMT
        Subject: CN=78C71C93DC1EE3FA4B37AEFC4CD1059429A1D615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:3c:ec:5d:9f:bc:62:b8:06:4f:b9:42:e1:
                    61:df:bd:5c:92:d5:7b:4f:74:4f:8b:d6:b9:8a:9a:
                    ad:c3:fb:45:39:d9:b3:5d:9e:09:8c:80:9a:e2:82:
                    37:fb:81:2a:8e:b7:de:a0:85:94:11:61:3b:fa:38:
                    66:e4:c9:36:ba:f3:d1:4e:9c:5d:ed:b4:7e:83:28:
                    03:51:74:51:a3:86:b9:7f:d2:5a:06:3b:14:d9:67:
                    49:3d:31:66:f2:f6:9d:a0:a1:ba:35:50:bf:1c:33:
                    a6:64:f0:87:23:2c:56:7a:7b:d7:bf:73:d7:1f:af:
                    3d:19:32:7d:c6:88:48:42:af:3e:d6:74:bd:1c:9a:
                    63:a0:bd:cf:cb:14:47:fa:c8:ae:4f:a9:16:db:91:
                    25:7c:7a:f5:fb:77:47:ae:ad:2e:01:91:6e:96:b8:
                    ee:89:f3:b1:3b:53:c5:fb:62:b2:54:bd:c2:24:31:
                    cb:88:18:d7:de:96:f8:16:8b:cf:79:ce:a6:ba:8c:
                    a8:29:c5:82:fe:34:a3:01:04:e1:d0:af:41:39:75:
                    91:82:28:25:a5:a3:d0:97:7d:77:02:3b:fb:2b:04:
                    2d:c9:1d:4a:f3:41:77:5e:5a:15:bf:26:9a:3b:51:
                    e7:0c:df:ab:53:37:14:62:e7:b6:0f:39:7d:95:b8:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:1C:93:DC:1E:E3:FA:4B:37:AE:FC:4C:D1:05:94:29:A1:D6:15
            X509v3 Authority Key Identifier:
                keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:dd:90:a3:a6:5c:c4:59:45:25:08:db:e4:0a:6e:1f:43:e9:
         41:69:ca:10:35:7c:da:ff:47:7a:71:77:10:18:83:21:e1:0a:
         eb:19:c0:7f:b7:28:a6:5a:28:0b:f7:a5:23:c3:e7:3c:3e:96:
         07:8b:36:90:1d:0b:75:fc:78:9f:15:d4:33:e3:ce:a2:13:e2:
         73:85:7b:a7:50:25:65:7b:bb:37:89:f1:ad:2f:47:39:8e:60:
         8e:a3:07:9a:f3:0c:f6:27:e7:d5:ca:cb:29:38:43:6e:36:2b:
         0f:e0:b0:a8:c1:cd:1a:90:ac:31:fc:2b:44:7b:0d:74:11:aa:
         61:d1:8f:c2:64:be:ad:ba:e9:3c:e3:9e:bd:b3:45:ab:ce:95:
         2f:94:1e:c7:39:49:29:b3:c9:31:55:7b:98:43:73:68:b4:0c:
         87:08:be:59:16:05:db:65:ed:dc:bd:4f:b4:0e:5c:74:39:89:
         81:52:83:f7:d3:86:55:49:87:fa:6d:a7:99:05:d3:3f:fa:0f:
         13:3e:a8:a8:9d:26:3b:53:0c:68:de:04:08:21:50:3d:15:45:
         6f:b7:3a:44:e0:66:30:bc:72:54:9f:c7:14:63:73:15:90:c0:
         38:1a:fc:75:68:4c:11:81:61:44:17:8b:f5:70:85:2d:32:a9:
         58:4d:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:28:35 2025 by rpki-client