This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
File:                     86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft (raw, json)
Hash identifier:          fpJZDKOhtehPst2IJaRO+kRnjoH0nFhCUU3stDJNdlA=
Subject key identifier:   F4:E4:2E:6B:AC:1A:27:5E:74:31:F2:06:2D:DB:8B:0A:FB:16:00:5E
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Certificate issuer:       /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial:       798CBA9E6BEB339B073FEE2BB7256B550A76206B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
Manifest number:          033B
Signing time:             Fri 19 Dec 2025 20:00:27 +0000
Manifest this update:     Fri 19 Dec 2025 19:55:27 +0000
Manifest next update:     Sat 20 Dec 2025 23:05:27 +0000
Files and hashes:         1: 323830343a316532383a3a2f33322d3332203d3e20323634343131.roa (hash: m2PBMQKU8NQc93M8YXjyFcsXcKv0f5fOdB8Y9Zou1dQ=)
                          2: 3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (hash: uzUgxx5oWbw3KsMb5vfeJgcgzAfj8JVn/VQixWQjHMk=)
                          3: 86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl (hash: vha7eaoVLANh2Y7YXK/O89MKVxyqTrbmm1eMQZikZkg=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Dec 2025 23:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8c:ba:9e:6b:eb:33:9b:07:3f:ee:2b:b7:25:6b:55:0a:76:20:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
        Validity
            Not Before: Dec 19 19:55:27 2025 GMT
            Not After : Dec 20 23:05:27 2025 GMT
        Subject: CN=F4E42E6BAC1A275E7431F2062DDB8B0AFB16005E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:86:3d:76:94:e0:95:b7:e7:6c:7e:20:25:
                    e5:a5:de:21:99:dd:5e:24:30:55:e8:53:f5:7e:6a:
                    f7:fb:da:3b:2b:9a:51:b4:3d:9c:dc:11:3f:68:9d:
                    27:1e:57:c9:d0:2c:ea:3a:ff:88:ec:4b:a5:27:9a:
                    d5:c1:b9:cc:67:9e:15:a8:d6:c8:8f:15:25:3f:a6:
                    4e:e8:82:d4:3d:e6:68:b4:08:ba:78:e6:34:8e:8d:
                    2d:7b:fa:25:3b:10:53:5a:c5:d0:a4:ba:d8:aa:ed:
                    1c:a0:59:03:12:ce:ac:51:e2:93:9d:ed:94:98:dd:
                    b9:12:04:7a:e0:a5:67:1b:d3:33:09:46:66:1b:21:
                    94:52:e7:2a:80:b6:56:98:71:f4:b3:99:aa:2d:eb:
                    1f:56:57:33:3e:3a:af:21:75:d3:82:a8:d3:61:24:
                    2a:9f:ed:b3:23:c0:02:15:7b:94:e1:fe:f7:22:80:
                    40:5e:0d:51:39:c6:82:ea:68:05:a3:f3:f0:b9:be:
                    e1:7b:b9:d1:43:87:b3:05:cd:6e:45:b5:ed:37:fe:
                    de:eb:12:3d:73:2e:ac:26:f8:22:45:35:10:70:62:
                    26:61:60:70:59:c6:87:e2:e3:9c:e6:17:03:b1:77:
                    30:8d:e1:46:52:a8:e0:59:25:31:21:46:1f:0e:a3:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E4:2E:6B:AC:1A:27:5E:74:31:F2:06:2D:DB:8B:0A:FB:16:00:5E
            X509v3 Authority Key Identifier:
                keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:4d:0c:4e:11:7d:94:dc:a8:e9:6d:05:c1:27:53:8c:2b:
         f5:19:6f:db:27:88:32:34:a0:d0:88:a5:00:2c:f8:b4:4a:dd:
         12:a7:f6:dc:33:62:1c:2e:ab:2f:05:e1:12:4d:ba:01:a3:92:
         37:bd:db:8b:42:14:e2:5f:fa:ed:48:95:3b:c3:ba:53:c8:d0:
         99:f2:2f:42:84:a9:99:ad:e2:13:12:26:fd:cb:65:95:ba:ae:
         20:91:fa:7c:df:63:09:59:3c:05:6e:62:3d:b1:c9:40:45:36:
         f3:63:31:b6:28:1f:3e:bd:fb:28:86:ef:8d:f0:51:22:61:6b:
         b6:14:fc:63:2b:9b:ae:03:13:9b:c5:b0:9f:b9:99:74:55:a1:
         ee:67:b6:be:34:cc:63:4b:68:95:16:90:b7:d8:e1:25:ee:6e:
         8f:34:8a:3d:09:de:17:8d:2a:9c:2d:e0:7b:73:22:0b:9d:28:
         6e:6b:c3:e1:cd:45:79:fb:f8:60:26:fa:02:8c:05:ac:e8:15:
         f4:e5:d7:18:21:c8:c7:0b:8c:2d:a5:a5:d0:3a:11:bf:0c:27:
         80:1a:fb:b2:8e:30:e7:81:1e:ef:31:b1:77:ba:d9:e6:99:7b:
         b7:e5:df:78:62:41:d4:23:ed:d9:d7:2c:45:58:98:e9:8c:ff:
         bd:1b:9f:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeYy6nmvrM5sHP+4rtyVrVQp2IGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODZCNUNFOTg2RkFERjUyMDVBRkQyNjU2MUVFRUMy
MkIzQTM1OTAeFw0yNTEyMTkxOTU1MjdaFw0yNTEyMjAyMzA1MjdaMDMxMTAvBgNV
BAMTKEY0RTQyRTZCQUMxQTI3NUU3NDMxRjIwNjJEREI4QjBBRkIxNjAwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzWIY9dpTglbfnbH4gJeWl3iGZ
3V4kMFXoU/V+avf72jsrmlG0PZzcET9onSceV8nQLOo6/4jsS6UnmtXBucxnnhWo
1siPFSU/pk7ogtQ95mi0CLp45jSOjS17+iU7EFNaxdCkutiq7RygWQMSzqxR4pOd
7ZSY3bkSBHrgpWcb0zMJRmYbIZRS5yqAtlaYcfSzmaot6x9WVzM+Oq8hddOCqNNh
JCqf7bMjwAIVe5Th/vcigEBeDVE5xoLqaAWj8/C5vuF7udFDh7MFzW5Fte03/t7r
Ej1zLqwm+CJFNRBwYiZhYHBZxofi45zmFwOxdzCN4UZSqOBZJTEhRh8Oo8NtAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU9OQua6waJ150MfIGLduLCvsWAF4wHwYDVR0j
BBgwFoAUhrhrXOmG+t9SBa/SZWHu7CKzo1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFr
ZXcvMS84NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2QjVDRTk4NkZBREY1
MjA1QUZEMjY1NjFFRUVDMjJCM0EzNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
REtEdDFGMkRUbnV0U1l4UmZxaERHdnJ0QjlEZkVjcUdSUHJSTHVXUWFrZXcvMS84
NkI4NkI1Q0U5ODZGQURGNTIwNUFGRDI2NTYxRUVFQzIyQjNBMzU5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATYxNDE4RfZTcqOltBcEnU4wr9Rlv2yeIMjSg0IilACz4tErdEqf23DNiHC6r
LwXhEk26AaOSN73bi0IU4l/67UiVO8O6U8jQmfIvQoSpma3iExIm/ctllbquIJH6
fN9jCVk8BW5iPbHJQEU282MxtigfPr37KIbvjfBRImFrthT8YyubrgMTm8Wwn7mZ
dFWh7me2vjTMY0tolRaQt9jhJe5ujzSKPQneF40qnC3ge3MiC50obmvD4c1Fefv4
YCb6AowFrOgV9OXXGCHIxwuMLaWl0DoRvwwngBr7so4w54Ee7zGxd7rZ5pl7t+Xf
eGJB1CPt2dcsRViY6Yz/vRuf6Q==
-----END CERTIFICATE-----
Generated at Sat Dec 20 15:14:25 2025 by rpki-client