This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
File:                     D7845391014F7F9470788EC727561382C9EE8439.mft (raw, json)
Hash identifier:          jWf5iNyEHcZIcN2LHYMlhs7xtOd/Sj35DC3dIEVswmg=
Subject key identifier:   AC:69:87:39:D7:A8:51:23:16:B9:AE:47:39:E3:A3:8D:35:7B:B9:E9
Authority key identifier: D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39
Certificate issuer:       /CN=D7845391014F7F9470788EC727561382C9EE8439
Certificate serial:       0BC26AE5E0F78E3A00D890026552FBEF411ECCB3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
Manifest number:          0159
Signing time:             Sat 20 Dec 2025 04:52:42 +0000
Manifest this update:     Sat 20 Dec 2025 04:47:42 +0000
Manifest next update:     Sun 21 Dec 2025 07:24:42 +0000
Files and hashes:         1: 323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (hash: R7pr90YgpFFP5Nc7qri0o39IOqCfCC6qNNTtfKj76zk=)
                          2: D7845391014F7F9470788EC727561382C9EE8439.crl (hash: UM44LFPicfTfMKiUeHusG/mR2qB3BJ+lFGvfOPDXdro=)
                          3: 323830343a383336343a343030303a3a2f33342d3334203d3e20323732313935.roa (hash: hMS/g2zUJ8tEuCLfr1w0Pne2zylTOnyo12ThqYKt5gY=)
                          4: 323830343a383336343a3a2f33342d3334203d3e20323732313935.roa (hash: OVa1a5v+QoZlIYGiHT9SrqRCIw87bhwKdHhHZ59h0Vw=)
                          5: 323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (hash: GHlEJYoOK3UZfIQkY3Z0DdCy5FiSdSOVhsz6I91euIc=)
                          6: 323830343a383336343a3a2f33322d3332203d3e20323732313935.roa (hash: rgvbKpGGOBBwQiU4IYW5VEIzyEidbzoZXS4wrkDPyRQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c2:6a:e5:e0:f7:8e:3a:00:d8:90:02:65:52:fb:ef:41:1e:cc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7845391014F7F9470788EC727561382C9EE8439
        Validity
            Not Before: Dec 20 04:47:42 2025 GMT
            Not After : Dec 21 07:24:42 2025 GMT
        Subject: CN=AC698739D7A8512316B9AE4739E3A38D357BB9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:37:95:61:76:14:b0:cb:9e:ab:d4:7c:ca:
                    34:d7:1a:8f:55:2f:db:a1:68:eb:89:9d:03:39:4f:
                    32:ca:c6:c3:2b:71:c6:4b:07:65:6c:dc:9d:ee:91:
                    2e:cb:e5:62:1c:1c:bd:de:03:d8:9c:b0:db:89:42:
                    7f:14:7f:78:ba:28:4e:78:03:1a:ce:13:24:92:27:
                    35:1d:98:63:9a:5c:19:7e:95:4b:88:4f:4e:03:22:
                    60:17:8f:be:1b:78:fa:fd:4a:8a:d1:d5:cc:db:d2:
                    d9:37:4c:85:a6:a6:14:65:36:c0:e3:25:83:1f:cb:
                    4f:59:fb:16:b1:ec:6a:15:21:28:59:95:ce:a2:2e:
                    c6:61:76:d9:7d:c7:66:2c:55:13:fa:95:09:04:3b:
                    26:b0:53:27:e6:1c:03:da:8f:fe:0a:64:67:c6:64:
                    55:29:65:a4:a0:b2:80:44:07:63:bd:8a:ab:e3:ef:
                    d3:90:cc:da:fb:e4:49:31:fd:e8:9b:de:ed:23:8f:
                    0d:c0:52:8a:3a:78:d5:14:3a:92:a3:79:c2:5d:6e:
                    dd:f4:f5:a2:08:04:17:d1:27:1b:d4:76:14:76:ca:
                    c4:41:6d:f2:05:e8:49:5b:7a:23:ea:0b:71:74:eb:
                    a1:03:4d:91:37:b0:da:ea:4d:bd:ab:8a:75:e9:9a:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:87:39:D7:A8:51:23:16:B9:AE:47:39:E3:A3:8D:35:7B:B9:E9
            X509v3 Authority Key Identifier:
                keyid:D7:84:53:91:01:4F:7F:94:70:78:8E:C7:27:56:13:82:C9:EE:84:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7845391014F7F9470788EC727561382C9EE8439.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D7845391014F7F9470788EC727561382C9EE8439.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:56:72:26:31:3f:92:04:c3:26:af:b9:5c:d8:0c:18:0b:
         9c:23:55:b5:f2:44:24:16:96:fc:02:fa:e0:56:28:c3:7f:a1:
         cf:36:e7:37:a5:3e:b5:af:e6:b8:fe:a3:43:9f:9d:de:02:1f:
         d6:32:07:02:a3:55:ab:1c:28:64:2f:f0:8a:dc:19:fa:3e:f4:
         16:5a:54:b9:cd:71:80:25:69:cc:0f:8e:d7:67:9c:13:e4:b8:
         0f:69:8d:ba:d2:d4:a5:55:93:54:f2:48:4a:c7:4e:79:43:6a:
         5a:c8:81:6b:69:19:f7:d8:6f:35:c6:db:6a:8c:78:71:b5:87:
         cc:21:56:02:13:12:9e:a6:cf:d5:31:48:3b:ed:68:08:f8:36:
         c0:50:fd:ab:08:03:8f:4d:5d:8d:54:37:f7:d2:71:c8:5c:5b:
         77:f0:65:36:bc:80:32:0f:ee:13:0c:7e:6e:5c:40:2b:aa:63:
         8a:0e:32:74:46:ff:0a:75:df:47:61:9c:88:f2:68:e5:7f:e4:
         29:8a:c1:53:60:19:2b:46:2b:dc:d7:04:df:62:d4:40:82:76:
         87:21:37:f5:b1:5c:aa:c2:98:3f:db:0a:6b:1e:88:cd:92:ae:
         4f:ee:7b:81:f5:a4:05:2d:dd:fe:97:95:6a:61:b7:1c:e8:e8:
         63:b2:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:43:54 2025 by rpki-client