This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
File:                     A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft (raw, json)
Hash identifier:          gnYAkd7kI6o4+hqD5xsWnGgjjWw2XkaKacPXnMa67AM=
Subject key identifier:   72:50:6B:E6:E9:F3:F7:42:90:EB:98:E5:47:32:F6:3B:D2:7A:54:88
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       69E8F73014D1F4BD8A74051AB6A04C24492275CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
Manifest number:          0123
Signing time:             Mon 22 Dec 2025 23:30:00 +0000
Manifest this update:     Mon 22 Dec 2025 23:25:00 +0000
Manifest next update:     Wed 24 Dec 2025 02:19:00 +0000
Files and hashes:         1: 3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa (hash: 51fzVoQ1zVy4SSYy6ehKq52OVPnkfTk9v5R7Sj54s9w=)
                          2: 3230302e302e34382e302f32312d3234203d3e20323632343334.roa (hash: HclPkReG2zDh8+BAPtYLpfT+vvHecYOSWWZEdOxxmMA=)
                          3: 3138362e3233352e31362e302f32302d3233203d3e20323632343334.roa (hash: 9fM53yCb9jOW8WbWE27fKnFkJRycFAdO2RryZJPbgWs=)
                          4: 323830343a313762383a3a2f33322d3438203d3e20323632343334.roa (hash: uYS1aO3/xsk1lGHaoKa2baH+NIprgqZUS8Z1Ir0oies=)
                          5: A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl (hash: u3A08TrsKotSP6ZexUuxm8YV4MeIKnvo8JZ8T0jwP7A=)
                          6: 3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa (hash: l6glcDirqUkV9kT+UKpXjY11Eew42e+6+ebYq8xKQRw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 02:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e8:f7:30:14:d1:f4:bd:8a:74:05:1a:b6:a0:4c:24:49:22:75:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Dec 22 23:25:00 2025 GMT
            Not After : Dec 24 02:19:00 2025 GMT
        Subject: CN=72506BE6E9F3F74290EB98E54732F63BD27A5488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:f1:c8:23:74:34:0c:2b:c4:f4:b8:cb:d5:
                    c6:a6:44:52:12:be:73:ea:00:86:24:a8:fd:14:72:
                    d1:e9:09:3d:fd:1e:9e:7a:89:76:c4:31:73:4c:0e:
                    3c:0c:31:12:28:d3:0a:b7:56:9a:90:ac:55:97:f4:
                    dd:7e:4a:de:36:05:c7:bf:0b:58:80:01:dd:5c:c3:
                    42:42:6f:df:81:6d:29:81:52:aa:00:e1:ce:3e:7c:
                    45:4e:84:03:e3:44:73:1b:63:af:0d:a9:81:0a:09:
                    d3:63:03:62:28:22:a0:94:b3:30:e1:31:9c:7b:bd:
                    c6:75:91:61:2b:5f:41:54:1d:8b:1c:d4:ef:d8:51:
                    b9:13:3e:a4:d3:be:4b:9b:49:cd:4b:37:f1:94:df:
                    dc:9b:ff:76:de:02:63:78:5b:ab:fe:4b:f3:2a:ba:
                    ba:89:6f:26:1a:ca:7f:db:45:4f:00:e8:ee:7d:7d:
                    eb:56:3f:02:a7:00:48:b7:50:d5:5f:dc:00:94:cb:
                    ba:b9:f9:c8:fe:86:8e:4d:52:57:34:a2:c0:88:41:
                    e6:c5:6d:7a:e3:ae:6e:65:10:4d:ab:dd:91:e7:99:
                    c6:17:07:8a:8c:f4:93:1d:50:6a:91:0d:04:34:e3:
                    a8:61:76:a7:f7:dc:62:4d:57:0f:08:d1:81:8a:3a:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:6B:E6:E9:F3:F7:42:90:EB:98:E5:47:32:F6:3B:D2:7A:54:88
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:dc:49:f5:81:37:45:a8:da:a8:77:51:17:f1:89:a5:4c:
         01:7a:2d:07:a6:e4:1b:9a:82:19:4b:04:17:3c:06:b2:41:3d:
         18:a6:c7:27:bf:15:19:6d:46:54:fc:14:b2:1f:5c:13:50:ca:
         ce:e0:d1:10:3c:26:5d:40:0e:45:76:c8:de:52:1a:cf:09:0c:
         f7:b8:6a:fa:4a:e6:70:1c:15:d4:96:43:54:60:37:3f:c1:74:
         ef:d8:4f:b6:c4:10:95:ab:0d:de:37:67:65:77:b2:de:12:c3:
         ce:86:ad:03:b3:93:3d:6e:47:37:9c:31:fe:3a:40:4a:31:85:
         41:e4:53:c0:fc:58:f4:cc:b1:af:39:20:17:26:a2:25:9c:ca:
         95:90:3b:62:94:bd:f5:4a:dc:6d:1c:78:aa:81:a0:90:4c:8a:
         a2:46:53:e2:ff:57:91:c7:87:c3:38:c2:b4:f9:1b:f9:5d:07:
         d8:02:d9:f4:e1:1f:48:ca:ca:d5:81:03:2d:ce:1c:a6:8e:33:
         a8:6a:1b:b0:1e:55:b8:7c:90:70:03:5d:22:67:33:fe:61:1d:
         f1:a7:a8:8a:27:c2:97:6a:c0:d8:1a:5d:c5:f8:8a:37:eb:71:
         46:60:92:01:fb:6d:4d:21:d7:be:55:2d:0b:71:ba:d5:53:a1:
         8b:f2:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:55:50 2025 by rpki-client