This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
File:                     98EA20A009301C2358E08E395002F34F079AC9D0.mft (raw, json)
Hash identifier:          /NURMfSCoIKQ+9OI1SZjWQ+GpGk++0vJI35dIh8EYlE=
Subject key identifier:   A2:B2:52:D8:C3:E8:93:4B:54:6F:95:4B:E2:64:AB:05:6A:BC:EE:00
Authority key identifier: 98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
Certificate issuer:       /CN=98EA20A009301C2358E08E395002F34F079AC9D0
Certificate serial:       7F8EC21AA568DEF2AEEABCF7BE97D1BC42F7E834
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
Manifest number:          0344
Signing time:             Sun 21 Dec 2025 17:43:33 +0000
Manifest this update:     Sun 21 Dec 2025 17:38:33 +0000
Manifest next update:     Mon 22 Dec 2025 18:07:33 +0000
Files and hashes:         1: 323830343a363234303a3a2f33322d3438203d3e20323639323836.roa (hash: OpCaSDNWIkJJX1q6+UuMG93CxmavK5wHmbySPC6n2WY=)
                          2: 34352e3138332e3131322e302f32322d3234203d3e20323639323836.roa (hash: CZZEDVHduUUEBthIPvdRuTnZE46NaFhsPK5hlYKeCDo=)
                          3: 98EA20A009301C2358E08E395002F34F079AC9D0.crl (hash: SsAOhDvt+lIuFeCtbVXZyFpzDse/3+At733yE9QTxwk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl
                          rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 18:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8e:c2:1a:a5:68:de:f2:ae:ea:bc:f7:be:97:d1:bc:42:f7:e8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98EA20A009301C2358E08E395002F34F079AC9D0
        Validity
            Not Before: Dec 21 17:38:33 2025 GMT
            Not After : Dec 22 18:07:33 2025 GMT
        Subject: CN=A2B252D8C3E8934B546F954BE264AB056ABCEE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:d0:8f:88:26:7c:67:38:0e:21:fa:7f:7c:
                    f8:3f:09:6b:82:dd:ec:1f:d3:f2:a4:dd:43:2d:aa:
                    90:3c:e4:d7:9f:5c:78:7c:00:eb:53:37:02:dc:86:
                    df:9c:c8:f9:fb:64:db:b3:3c:5a:4d:9b:b0:dc:f3:
                    ef:de:86:88:fd:75:98:98:77:65:52:c9:9d:fc:2b:
                    4c:90:b2:86:ae:50:d9:9c:c9:f1:d1:0c:39:a3:80:
                    ef:fd:92:a5:dc:48:2b:7c:83:f1:d6:17:37:b9:91:
                    f1:95:62:a9:5b:65:75:e6:89:af:69:75:05:8f:50:
                    80:3c:bf:70:02:75:53:46:33:e5:fe:e9:3e:26:0a:
                    9e:27:07:23:2c:fd:a3:16:a2:1d:19:63:a4:57:0e:
                    be:fe:70:84:0b:93:0a:9f:57:c5:7e:f4:4d:9d:a5:
                    90:d5:bc:04:b8:8e:0e:31:9c:8f:46:c9:08:5b:16:
                    e0:fb:b1:fa:dd:e9:2d:4f:ed:35:ba:f7:ec:13:1e:
                    0f:db:6a:23:a7:1b:9e:7b:6c:92:3d:5a:85:a2:76:
                    ef:8a:a0:d5:87:88:95:d3:25:50:c9:f2:a7:d5:e8:
                    4d:63:4c:76:90:ba:26:11:5a:4b:3a:14:cd:26:29:
                    ee:dc:1e:83:90:b0:bb:a1:7a:c8:ca:c3:30:12:6d:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B2:52:D8:C3:E8:93:4B:54:6F:95:4B:E2:64:AB:05:6A:BC:EE:00
            X509v3 Authority Key Identifier:
                keyid:98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:db:06:36:e5:22:2b:e6:8a:da:72:2d:dd:cf:02:87:53:
         61:2b:20:01:1d:5b:a2:71:44:78:97:2a:0d:b3:56:55:34:a2:
         87:4a:10:6a:bc:8d:94:8e:7c:2c:bb:f5:1f:62:3d:66:8f:52:
         68:62:ad:fb:4d:44:63:c7:89:3d:3c:b1:34:c2:d0:18:6f:83:
         98:67:68:eb:bf:e4:9d:f0:07:83:16:fe:f1:c2:c1:09:16:82:
         cc:51:20:a8:ee:93:dd:2c:a9:26:bf:a9:d6:4a:7e:06:48:58:
         7e:77:9b:60:c6:cf:74:ec:a2:ea:8b:58:7c:58:9d:f5:82:36:
         59:36:56:2a:66:04:13:ac:d9:54:6a:53:5d:b1:bf:3c:52:59:
         f7:5e:fe:e7:ae:02:37:d3:e5:2b:e9:77:eb:cc:45:99:be:be:
         e5:54:d1:65:b7:5d:12:96:d2:95:dd:4a:f7:02:ea:9b:ee:36:
         a8:17:b4:76:16:0f:b9:54:87:89:bc:e7:6c:25:ff:10:3f:df:
         8e:16:64:0e:87:d6:fb:fa:b4:ed:ca:4d:e8:a5:9a:7e:f4:f4:
         38:72:ca:c5:f7:51:30:b4:d0:4e:8d:e8:78:19:d1:21:55:2f:
         9d:61:4b:0c:5f:44:a1:d4:aa:f3:21:0f:34:96:45:24:d4:82:
         76:95:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 20:37:56 2025 by rpki-client