This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
File:                     BF58315949907054B5E7AB00ED192423448BF8DF.mft (raw, json)
Hash identifier:          WU92jVRbiE2J5gc6fDh9r+klzx9LxHvWiIBL1mjB/Sg=
Subject key identifier:   DC:EF:7F:24:E0:3C:6C:82:35:E7:7B:89:06:E5:07:44:85:A8:71:56
Authority key identifier: BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF
Certificate issuer:       /CN=BF58315949907054B5E7AB00ED192423448BF8DF
Certificate serial:       14A08C85D35F1E599F82FA79B2008E538D1CB905
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
Manifest number:          0162
Signing time:             Wed 24 Dec 2025 05:57:07 +0000
Manifest this update:     Wed 24 Dec 2025 05:52:07 +0000
Manifest next update:     Thu 25 Dec 2025 07:26:07 +0000
Files and hashes:         1: 323830343a343535383a3a2f33322d313238203d3e20323636393230.roa (hash: SPg37X9HpYU1Mt8gD99oDWByKw9zLUF5J0c60Pm4idQ=)
                          2: BF58315949907054B5E7AB00ED192423448BF8DF.crl (hash: sJayEV3kG0xyND1w6w7ZB2XVb4GecSfvIeS/Gc2DlkY=)
                          3: 3138372e38342e3135362e302f32322d3234203d3e20323636393230.roa (hash: lNitRz9NWj7nm604e/b92Cd34seydWhPejAiEzH2QwA=)
                          4: 34352e3232352e31362e302f32322d3234203d3e20323636393230.roa (hash: bEHw/g2xlpQTVWEKx+sLNZE+6Bt7xQ5DnjygATMSuDs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 07:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:8c:85:d3:5f:1e:59:9f:82:fa:79:b2:00:8e:53:8d:1c:b9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF58315949907054B5E7AB00ED192423448BF8DF
        Validity
            Not Before: Dec 24 05:52:07 2025 GMT
            Not After : Dec 25 07:26:07 2025 GMT
        Subject: CN=DCEF7F24E03C6C8235E77B8906E5074485A87156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:2e:87:4d:b8:a8:24:69:ae:c9:78:2b:a6:
                    a2:fc:90:d4:9b:7e:32:46:6c:f6:66:81:c4:4b:7a:
                    a0:60:1b:bc:fe:fc:f7:77:68:da:97:14:27:33:cd:
                    c0:e5:42:40:5b:a9:8a:1b:5c:41:9f:71:d2:02:94:
                    86:6c:eb:57:8e:89:05:f2:44:a8:1c:d8:bf:59:f5:
                    50:23:b3:13:c2:c4:c2:4c:c6:1d:8c:25:23:c3:21:
                    be:27:b0:30:7b:de:d2:c6:2d:14:7d:44:1c:7d:17:
                    96:47:40:06:5f:34:e2:9d:f9:06:d2:14:63:bc:02:
                    e6:f2:c2:30:67:60:75:fc:28:50:21:75:b4:9e:96:
                    46:a6:29:94:4f:65:b3:c7:ef:77:04:d7:69:92:69:
                    49:0f:4f:1d:4a:de:1b:21:9d:8e:aa:e2:2f:1e:92:
                    cd:22:12:cd:4f:ba:b5:fb:f4:8a:d6:23:74:1b:e1:
                    03:a0:15:4f:ff:37:6a:12:50:0b:6e:6b:82:12:67:
                    e9:6b:82:47:7c:b7:1d:49:33:a1:f0:8a:42:a8:fd:
                    a8:05:f6:02:42:4f:de:e2:57:15:c3:59:ec:65:e9:
                    ce:72:36:8c:e8:4b:cb:7a:d3:e7:f4:c8:61:d1:22:
                    f8:45:67:43:ef:61:53:31:8e:17:25:b2:14:33:8d:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:7F:24:E0:3C:6C:82:35:E7:7B:89:06:E5:07:44:85:A8:71:56
            X509v3 Authority Key Identifier:
                keyid:BF:58:31:59:49:90:70:54:B5:E7:AB:00:ED:19:24:23:44:8B:F8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF58315949907054B5E7AB00ED192423448BF8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/3/BF58315949907054B5E7AB00ED192423448BF8DF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:48:30:23:30:77:11:3b:5d:c4:e8:90:48:ec:2f:c0:4d:4d:
         88:7e:a1:9d:49:55:3b:3e:2d:2c:b6:be:50:92:70:f6:dc:ae:
         7a:e8:33:cd:8b:85:56:e3:54:d3:47:b7:9a:e2:db:b1:cb:11:
         1d:d5:ee:85:a9:fa:6d:2c:d4:d3:c0:7b:2c:ff:f7:d6:1a:1e:
         e0:21:aa:83:a7:db:76:39:b3:78:de:60:6b:48:b3:97:70:ed:
         c5:dd:cc:83:97:ed:2f:f1:8d:ac:ba:6e:6b:7b:91:8c:58:d2:
         12:d0:19:43:2c:2f:81:04:e7:be:2d:8d:3d:72:3e:90:00:83:
         6c:0f:60:6e:60:ed:3a:fc:fa:e6:4e:ab:23:c3:37:c0:78:fd:
         ef:95:3e:9d:98:cb:66:2c:7e:64:1c:07:22:87:ef:8f:1b:a6:
         eb:2d:90:28:c1:76:9c:7b:af:21:bd:f2:9d:34:fb:d3:0a:5e:
         eb:8a:0c:13:98:33:dd:6e:28:a6:93:69:dd:5f:de:b5:75:98:
         d5:34:d3:6f:ed:9a:8b:e8:d1:5a:dd:d4:af:6a:fd:63:2f:28:
         e1:e9:d4:ce:a0:ba:cf:df:af:ef:93:f0:03:0d:96:05:0e:72:
         54:30:71:ab:a1:72:33:a6:ea:b4:6a:a8:dd:25:30:74:2a:67:
         99:ce:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:46 2025 by rpki-client