This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
File:                     D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft (raw, json)
Hash identifier:          OrStUDi8BqKZgf4tabo/wdyWgeWCkeMoM5VOpYiQouQ=
Subject key identifier:   F6:E0:F2:2F:2E:6A:0B:3B:70:50:DC:41:C2:6F:D3:90:1E:55:00:6E
Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC
Certificate issuer:       /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
Certificate serial:       2132B5B4615783C22E9FAFD64ACFADD35D36D790
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
Manifest number:          86
Signing time:             Fri 19 Dec 2025 13:22:14 +0000
Manifest this update:     Fri 19 Dec 2025 13:17:14 +0000
Manifest next update:     Sat 20 Dec 2025 16:24:14 +0000
Files and hashes:         1: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (hash: aDikW3K0yc2BZC8ObSuWS0WVAHPD+SNZGwOY1KqGk4M=)
                          2: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (hash: a/8o7Q2W9We/0XL+WJuVwmMVe5Tjw2P18g5zdZR9wYo=)
                          3: D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl (hash: jTkOD32UQdaztAeBBB7UWbME7/giLHs30c57Nh/7D9c=)
                          4: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (hash: m5CoR7Fq0M+qjSqPMr7/zS3iw9JAykuD5v+oIlFdbX0=)
                          5: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (hash: 4NR4fcpgDlb5r7pUpuC26l2DBqMGwlvWFeJSAq28Lg0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 16:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:b5:b4:61:57:83:c2:2e:9f:af:d6:4a:cf:ad:d3:5d:36:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
        Validity
            Not Before: Dec 19 13:17:14 2025 GMT
            Not After : Dec 20 16:24:14 2025 GMT
        Subject: CN=F6E0F22F2E6A0B3B7050DC41C26FD3901E55006E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:14:4c:d5:bb:51:44:ee:06:5c:0e:b7:67:
                    3d:58:69:fa:ac:9d:af:d4:f0:5a:d7:4a:2c:a6:4f:
                    74:30:22:37:e4:60:75:08:27:10:c3:c9:52:59:04:
                    98:c3:b5:65:d6:be:b2:bb:25:7c:3f:b3:a3:89:83:
                    76:c8:fd:cb:d0:8e:ea:ce:e7:05:2a:e2:a4:5e:32:
                    e3:e2:da:20:bb:f9:b7:97:76:a8:57:09:76:0b:5b:
                    11:a8:53:9f:ce:b3:8a:ae:74:ae:46:47:57:1e:75:
                    86:d1:f2:ff:aa:5a:39:2e:6f:05:8f:38:ba:e4:1d:
                    6e:8f:e6:45:cb:80:8c:2a:63:98:3c:a6:81:21:b7:
                    82:2f:24:f4:1b:6e:f4:fa:d4:2c:28:a5:6a:bb:3c:
                    04:97:77:48:d3:15:bb:9e:88:fd:0f:50:dc:b7:f9:
                    bf:1f:79:93:e2:ce:45:1b:65:2c:23:9f:97:8e:f4:
                    7d:c5:b1:47:55:ff:ee:3e:f6:e3:72:79:23:c7:e8:
                    b1:0b:89:74:19:12:66:83:10:c5:f6:c0:5e:5f:b0:
                    86:ce:f4:de:aa:81:02:29:35:bf:0a:b0:2b:e4:5b:
                    ab:54:05:05:93:42:0b:11:8f:89:d2:c0:96:3c:7d:
                    19:36:89:74:fa:a3:a0:f1:cb:d4:4c:88:18:1c:fb:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E0:F2:2F:2E:6A:0B:3B:70:50:DC:41:C2:6F:D3:90:1E:55:00:6E
            X509v3 Authority Key Identifier:
                keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:4c:55:dd:2b:77:dd:87:58:23:af:d7:d2:be:e2:88:d5:
         50:a3:47:8a:a7:b3:a3:cb:73:db:7d:b5:d3:12:75:a6:2e:ea:
         ca:e4:d4:6e:08:77:76:cb:01:a0:56:f3:ef:fd:a0:74:12:aa:
         65:6d:f1:2c:c2:6c:c7:77:c0:58:f4:39:f8:4e:e9:cc:92:0b:
         a3:b8:69:9c:e7:90:17:b6:e3:e5:c2:48:d3:c7:74:e4:88:88:
         4a:3f:92:81:c8:cc:97:59:c2:12:67:1b:85:d3:62:5c:03:c1:
         98:d7:ec:66:44:77:b4:ec:c4:03:b1:06:9a:97:38:d9:d1:ec:
         d8:14:36:ac:6e:2a:84:d2:a2:09:b6:ca:21:44:3c:e5:be:4e:
         4c:1a:3b:cc:d2:98:e1:d3:bf:ce:1a:30:73:a6:27:c9:37:92:
         86:40:45:c1:18:1e:b3:d1:60:3a:ee:c3:93:b0:9e:4e:12:05:
         d3:ff:2a:7c:72:93:43:58:2a:67:ef:d8:5f:a6:b0:78:a3:1b:
         3c:f2:be:98:1c:f3:d2:55:ec:eb:11:02:b3:8c:ad:ac:77:e3:
         34:45:85:66:35:af:cf:67:fd:8a:c7:fc:75:5d:95:d6:87:73:
         d2:12:2f:d9:ba:f7:da:16:cc:83:5a:10:b8:9d:82:1d:19:d0:
         67:ba:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:49:35 2025 by rpki-client