This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
File:                     8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft (raw, json)
Hash identifier:          Imhh8yVZilc/8eUTx7OHF0x0aW/asOavvb9n9IejFhk=
Subject key identifier:   CD:1B:F3:36:BA:39:2D:37:61:F2:90:19:3A:2D:57:6E:D5:21:36:76
Authority key identifier: 8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3
Certificate issuer:       /CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
Certificate serial:       4B9BF4ACB33FBFA8FB6639FA584EA1176BED8FA2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
Manifest number:          BE
Signing time:             Thu 25 Dec 2025 11:34:30 +0000
Manifest this update:     Thu 25 Dec 2025 11:29:30 +0000
Manifest next update:     Fri 26 Dec 2025 12:18:30 +0000
Files and hashes:         1: 323830343a353439303a3a2f33322d3438203d3e20323638363538.roa (hash: i83s5u9huhbJHapQ9/OBbf/QCqrm4HELSWsH4LVEbM4=)
                          2: 34352e3136352e36302e302f32322d3234203d3e20323638363538.roa (hash: /ReUzT2vFRsB7AzdAhivYPC6glBsbzMTBCpkRANlGEQ=)
                          3: 8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl (hash: W4JH41czU4KiiWtk4Vgk2YQ4a+ryprTKgIN44UeVyvE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl
                          rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 26 Dec 2025 12:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9b:f4:ac:b3:3f:bf:a8:fb:66:39:fa:58:4e:a1:17:6b:ed:8f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A69DBA77EB0808EB688E651EBCCCE0049B548D3
        Validity
            Not Before: Dec 25 11:29:30 2025 GMT
            Not After : Dec 26 12:18:30 2025 GMT
        Subject: CN=CD1BF336BA392D3761F290193A2D576ED5213676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:8c:79:71:e8:4f:cd:51:cc:9b:0d:b5:7d:
                    30:0c:23:27:5d:65:51:e2:c7:e5:bf:5a:42:0f:65:
                    3d:25:a8:df:cd:40:96:73:6b:23:c1:ab:96:81:a1:
                    3f:b7:92:f2:d8:ad:4c:dc:03:e8:59:fb:32:f0:f6:
                    10:5e:75:8c:fa:ec:8c:66:2f:c6:39:50:3c:bd:f0:
                    23:ce:aa:b0:ea:36:4a:14:56:0b:72:73:b6:50:cd:
                    96:24:b0:9d:89:fc:51:e5:e3:73:73:89:35:c3:5e:
                    43:7e:8d:35:64:4a:55:9d:89:1f:af:1e:05:c8:7a:
                    d6:6d:09:f0:c1:2b:32:55:3f:79:3b:34:bf:e9:73:
                    c8:f4:8a:dc:ff:99:c7:29:54:de:3f:c9:14:fd:79:
                    49:80:5c:84:f6:86:c8:df:f0:ee:e2:f7:ec:3e:dd:
                    d1:77:96:cf:a2:e8:10:04:a3:16:ff:c2:0a:4b:a8:
                    8e:2d:e1:00:30:c6:a9:17:cb:13:b8:cd:7d:1d:6b:
                    05:3e:3e:27:b6:94:05:12:d0:31:f0:6c:77:0d:75:
                    d6:e9:23:4e:04:99:5a:b8:47:15:c4:40:83:12:19:
                    ff:bc:b5:75:f6:e4:55:bf:49:c3:cd:5b:3a:70:2f:
                    99:cb:f1:fa:ed:92:78:8a:c2:47:2f:9c:ad:1a:19:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1B:F3:36:BA:39:2D:37:61:F2:90:19:3A:2D:57:6E:D5:21:36:76
            X509v3 Authority Key Identifier:
                keyid:8A:69:DB:A7:7E:B0:80:8E:B6:88:E6:51:EB:CC:CE:00:49:B5:48:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/8A69DBA77EB0808EB688E651EBCCCE0049B548D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:c4:a6:8f:77:0e:28:d2:08:25:9f:0e:93:d5:9c:56:bb:
         74:d7:61:61:ce:4d:96:d7:cd:f4:b6:19:08:37:c2:9a:5f:09:
         74:88:1a:4f:a0:32:cd:44:db:e0:3a:35:e9:0d:87:dc:06:4c:
         0a:6b:4b:92:82:75:65:1d:79:71:16:1a:7c:3f:54:ee:d8:93:
         4b:72:de:57:55:0f:af:3b:f3:64:3f:52:98:f2:16:79:3b:34:
         29:26:95:14:06:f5:1f:93:1b:95:08:e7:cd:0b:a2:eb:59:bd:
         76:42:ef:e4:f4:61:1c:20:97:53:4d:58:4b:dc:77:40:2b:ec:
         92:28:56:fb:03:cd:7c:e5:51:05:83:c0:d8:9b:ce:3d:fc:75:
         8a:a9:2b:08:7e:8c:f4:a9:97:a2:32:08:27:0d:8e:4b:e2:b0:
         14:85:40:c0:15:d0:1a:69:76:0f:7f:38:ed:37:95:db:4d:52:
         cf:92:c6:8e:0f:19:b4:2a:e9:ac:f4:e8:72:4c:aa:fc:cb:31:
         6d:26:2f:b3:1b:77:8c:88:be:21:1f:b9:63:7a:00:21:1a:f3:
         43:98:c9:a1:29:bd:64:86:f1:81:57:01:9e:60:85:44:e3:59:
         19:1b:63:b7:9a:57:f2:23:ec:82:e1:62:c4:f1:33:4a:b0:97:
         b7:b9:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 14:19:26 2025 by rpki-client