This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
File:                     DA9315F122902DBF06A55537C7FDDC0362C259E1.mft (raw, json)
Hash identifier:          WTINpxYwLQXtptNmw7PDy6VLa6MSbGGDkgDqZN2wj5g=
Subject key identifier:   D1:24:6D:08:B4:F6:6F:82:D2:37:F5:B7:EE:EB:6F:2C:2B:1E:18:E1
Authority key identifier: DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1
Certificate issuer:       /CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
Certificate serial:       5977103A3C5557A9501EE4F06A6802953BBB995F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
Manifest number:          0200
Signing time:             Sat 20 Dec 2025 05:03:51 +0000
Manifest this update:     Sat 20 Dec 2025 04:58:51 +0000
Manifest next update:     Sun 21 Dec 2025 07:45:51 +0000
Files and hashes:         1: 323830343a363037303a3a2f33322d313238203d3e20323639313637.roa (hash: KOFA/+flNTtq410cKgupksTsi77mLVSyVot/nn5HOI8=)
                          2: 34352e3138302e39322e302f32322d3332203d3e20323639313637.roa (hash: HIXVG5Kv9o5dOjGwNkBl5JYxEXklC/w+RP20VpHk/hw=)
                          3: 3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa (hash: FZrzzEA3tHoEJhmOLPING6ijWgQX3KdmCOnnPQMFovU=)
                          4: DA9315F122902DBF06A55537C7FDDC0362C259E1.crl (hash: rN0sNo6EandZFlpXaFzGxWGe+pSuBznUA2LSGVNJ1zQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl
                          rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 07:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:77:10:3a:3c:55:57:a9:50:1e:e4:f0:6a:68:02:95:3b:bb:99:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
        Validity
            Not Before: Dec 20 04:58:51 2025 GMT
            Not After : Dec 21 07:45:51 2025 GMT
        Subject: CN=D1246D08B4F66F82D237F5B7EEEB6F2C2B1E18E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5d:87:43:3d:d8:cc:c1:73:9c:43:84:5f:39:
                    6d:1a:11:cc:8e:22:a3:cb:9e:ea:c7:c3:55:1f:23:
                    89:9b:bf:cb:e1:87:90:e5:a8:d1:c8:9a:6d:ab:e6:
                    64:fb:df:4e:9f:56:e0:ed:57:0b:87:dd:63:f0:44:
                    b1:68:b2:ce:d8:1b:e7:fa:5f:7c:8b:68:fb:b3:3b:
                    0e:ac:ea:c6:61:c0:c2:a6:e7:70:b2:c6:91:ff:d7:
                    d1:6f:12:81:a2:91:d6:b0:a5:7c:27:2b:1a:ce:30:
                    a3:dc:71:dc:de:a4:64:24:cb:ad:49:1e:fa:70:96:
                    90:2f:21:c1:82:6d:ae:ba:cb:10:ec:6c:a3:fd:7e:
                    41:cf:88:bb:4d:a9:e8:6b:37:af:83:7b:36:21:3d:
                    f5:50:91:62:78:6e:b0:fd:88:e5:e0:e1:0f:d3:81:
                    42:fa:0c:ac:ac:66:da:09:fa:93:19:4b:2c:5a:bc:
                    61:de:16:32:7b:07:d1:9a:d4:cf:7f:79:83:a0:66:
                    23:8f:45:a3:f3:1e:76:70:e2:a2:c1:7e:cc:ba:83:
                    90:1c:36:b4:46:53:84:35:30:46:df:6d:dd:b4:5c:
                    4a:ef:51:de:ae:28:91:cc:7e:51:84:bc:d8:d1:61:
                    d3:8c:43:5f:eb:8e:66:49:4b:36:8b:c4:a3:59:40:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:6D:08:B4:F6:6F:82:D2:37:F5:B7:EE:EB:6F:2C:2B:1E:18:E1
            X509v3 Authority Key Identifier:
                keyid:DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:f9:99:14:68:94:cd:9f:01:57:9e:4c:9f:35:fd:9e:8f:
         8f:0b:3a:21:a3:09:92:6a:77:18:52:c2:56:8c:9c:05:71:0c:
         0d:e3:6e:48:db:87:2c:6a:74:67:55:43:97:98:92:b2:fe:17:
         5b:c4:f9:05:a4:61:20:0c:84:e4:2a:e0:1c:5b:e3:5d:56:89:
         81:6f:57:b9:d7:77:ea:04:2e:bb:2a:aa:d8:7d:99:b7:e8:1a:
         d0:c2:dd:3e:bf:62:68:a5:02:d3:63:5b:2b:3b:38:fb:71:44:
         e2:05:4a:43:b8:59:9a:e8:eb:69:84:6b:76:88:e3:4f:67:47:
         46:2f:ac:c0:91:f7:5d:79:05:ee:48:35:9a:7c:10:08:fe:fe:
         e8:04:22:cb:37:e9:e1:db:4e:b5:93:86:d8:d8:eb:f3:c0:b8:
         75:78:2c:c4:6e:62:df:e0:d0:c2:f0:a5:52:86:33:55:f8:b6:
         e4:bc:7f:14:7d:2e:6a:26:b6:cd:14:82:6f:27:3b:cd:00:5d:
         81:52:4e:cb:ef:e4:d0:e8:ab:f9:d1:3e:92:77:a3:79:10:c7:
         4d:7c:b6:75:60:ce:c6:82:83:08:14:54:4b:2a:44:d7:43:63:
         eb:1f:c4:e5:9d:8f:c3:32:c9:c9:27:8b:29:48:fe:12:e5:43:
         d2:55:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:08:52 2025 by rpki-client