This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
File:                     08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft (raw, json)
Hash identifier:          0KGsuixe0CByzrBHhsNh4yYQxMqgCHP/V4q4dtaTqw4=
Subject key identifier:   57:62:3A:06:28:E1:3A:55:72:9B:FB:C6:15:E8:FF:F4:07:D2:35:3D
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       1FB194C2557CB3A78CAD9AC92A2767E3F21A28C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
Manifest number:          0286
Signing time:             Sat 20 Dec 2025 09:05:52 +0000
Manifest this update:     Sat 20 Dec 2025 09:00:52 +0000
Manifest next update:     Sun 21 Dec 2025 12:48:52 +0000
Files and hashes:         1: 08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl (hash: jOu9irzxNlxFwfC5nFGIx3SMQPq12/DHcIOs+wSJx7s=)
                          2: 323830343a316466383a3a2f33322d313238203d3e20323634343034.roa (hash: ec1Zk7JGNh5slBLz+PZID/Uvujfx1n692BGaXyzD6Jg=)
                          3: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (hash: W81QTTTQzuhYSuk1FTdnaq94J/D0E+fE04/OEQhe72M=)
                          4: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (hash: TtZY2HkDxWkCvGI4HqDn8AnGzlPaFTi1kjMjjf0hwqo=)
                          5: 3137302e38322e3134302e302f32322d3332203d3e20323634343034.roa (hash: Pr3FB6N7/fnnubm+xzlGWqAog5Eg3D0n86eXpZJwgjA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 12:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b1:94:c2:55:7c:b3:a7:8c:ad:9a:c9:2a:27:67:e3:f2:1a:28:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Dec 20 09:00:52 2025 GMT
            Not After : Dec 21 12:48:52 2025 GMT
        Subject: CN=57623A0628E13A55729BFBC615E8FFF407D2353D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:a6:c7:40:90:32:a1:95:f2:10:68:6f:91:
                    ca:30:3b:1e:76:d8:d7:bd:4e:3d:5e:4e:e4:67:5b:
                    23:4a:76:37:5e:e9:82:f0:6e:4f:08:ff:52:6a:7d:
                    2f:ff:c7:2f:b8:5f:33:cc:0f:59:f1:a8:4c:56:79:
                    ba:0d:07:c2:d4:18:63:30:79:c1:de:cd:36:d6:3f:
                    b6:52:b2:18:57:10:2f:46:62:f2:19:d3:62:7c:32:
                    e2:2c:4a:b6:e3:a4:91:ac:b2:25:77:cd:91:21:32:
                    f3:f0:43:d1:f0:4d:5d:08:1e:b8:41:1d:bf:32:35:
                    bc:63:53:04:ad:3c:02:90:c7:38:15:f7:af:c4:27:
                    5e:c7:c8:e1:e0:f5:88:d3:02:b6:2f:ef:1d:41:1b:
                    e7:7e:98:dc:d6:e0:23:0f:aa:8f:eb:f0:f4:fd:06:
                    7a:f7:66:3c:c1:3a:bc:27:77:ee:2a:2f:3f:99:97:
                    22:df:c6:7b:b7:33:b4:d1:7b:20:36:05:88:d2:af:
                    5f:63:3e:a5:93:dd:a1:8b:94:0b:ec:c3:f2:fd:68:
                    33:80:76:96:e9:32:ea:bd:d6:1b:5f:5e:62:6f:6a:
                    96:55:64:91:f0:51:87:94:cb:37:15:25:ec:fd:8b:
                    f0:a8:91:65:ac:8d:2d:7b:f8:ae:76:96:d3:80:78:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:62:3A:06:28:E1:3A:55:72:9B:FB:C6:15:E8:FF:F4:07:D2:35:3D
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:3e:41:52:45:0e:f2:23:b9:b4:6f:55:75:e6:bd:49:eb:
         57:10:cd:b7:5c:a0:e4:f1:84:78:ae:49:41:b1:4c:d4:59:01:
         5e:f3:27:84:2b:4a:de:ae:7c:db:03:d4:1d:fb:d0:00:e6:3c:
         00:6f:0e:b6:94:24:e7:ac:2b:aa:ac:ca:68:f5:46:bf:ad:3a:
         14:1c:69:26:f2:6f:b2:ba:e9:40:f9:f9:fd:b4:df:84:c8:01:
         22:cf:96:5c:a6:ea:cf:67:14:e0:71:48:70:d9:02:1c:aa:f1:
         71:28:66:3d:22:1d:09:1a:f3:4c:9b:5c:a8:00:d5:31:72:b8:
         b0:74:62:8f:37:a5:d9:97:7a:2e:bd:6e:47:95:a1:53:e9:b5:
         0e:60:10:27:18:7d:b8:71:5c:91:61:b7:99:5e:2d:86:b5:64:
         02:c8:d6:21:a5:e7:31:09:96:24:cc:25:f1:22:27:0a:99:28:
         65:59:d3:df:de:0e:2c:09:1f:43:e1:75:17:b2:c8:b0:9a:ce:
         89:8c:e2:27:e5:95:2b:cd:c2:72:99:10:0f:c6:ba:d2:e4:e8:
         c0:db:c5:6d:26:e3:96:2c:00:d2:fe:7c:51:0a:9b:e6:a1:db:
         66:b7:a4:20:4f:65:22:40:b6:4d:6f:af:91:f9:2f:77:e6:46:
         17:d0:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:11:59 2025 by rpki-client