This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          m3hfasOpAbc73tcDbs7iBaA7UGSUPwcZjcCAUCqGMX8=
Subject key identifier:   2F:20:6C:3A:4C:0B:A7:70:7D:FE:9A:E1:71:41:2A:59:2A:8A:C0:80
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       5AEC084AACD3C82795BB49A1AC770AB559DD0DA8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          034E
Signing time:             Mon 29 Dec 2025 23:12:00 +0000
Manifest this update:     Mon 29 Dec 2025 23:07:00 +0000
Manifest next update:     Tue 30 Dec 2025 23:48:00 +0000
Files and hashes:         1: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: bGX7DLnWOdJFIs1GQnhyDVoFkRZNttl//6pbTHE3mPQ=)
                          2: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: GP5N/ojn+CpGVA4mqG79uEfaVmGi1ccM9DHakURSDw8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ec:08:4a:ac:d3:c8:27:95:bb:49:a1:ac:77:0a:b5:59:dd:0d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Dec 29 23:07:00 2025 GMT
            Not After : Dec 30 23:48:00 2025 GMT
        Subject: CN=2F206C3A4C0BA7707DFE9AE171412A592A8AC080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:be:92:da:ce:6c:2a:25:81:13:e0:48:99:
                    5d:1f:92:94:f5:7f:27:f6:40:a9:44:0f:b2:ef:9c:
                    5c:9a:4b:f6:14:8d:54:06:81:d1:56:24:c4:36:c4:
                    25:5e:43:2e:e3:7e:05:e8:ce:4e:34:d4:9e:8d:1a:
                    bb:af:b5:f1:8a:70:35:23:ca:af:50:78:20:9b:aa:
                    06:e1:f0:f6:6b:d3:5d:ec:03:21:70:0a:84:44:a1:
                    d5:a1:66:ef:3f:90:72:1c:85:fa:0f:c3:09:e0:0b:
                    1d:1b:37:6f:8b:9c:9a:13:3e:ba:2c:98:3e:4b:4e:
                    3a:2b:46:2a:2c:16:a2:e4:07:cc:fa:60:ca:7d:6d:
                    a1:5b:8c:25:40:bf:29:be:0f:d1:8b:53:37:91:0f:
                    b1:2e:5f:c7:ed:7d:c0:d6:79:e5:d7:ea:eb:0c:ee:
                    a1:15:e7:42:24:bf:92:ec:57:86:dd:35:c6:c1:4c:
                    28:76:06:f2:87:07:82:85:aa:d2:75:69:b8:f1:e8:
                    dc:63:ba:fd:82:1e:0b:c4:9e:a5:a2:fe:41:e5:f9:
                    b2:1b:aa:1d:9d:08:a5:f4:81:7e:45:5e:d8:b1:fa:
                    c6:c3:a0:c4:72:81:24:64:b4:bd:c0:9a:40:84:21:
                    7a:4d:37:85:af:9e:35:58:94:57:f5:fe:5c:59:53:
                    e1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:6C:3A:4C:0B:A7:70:7D:FE:9A:E1:71:41:2A:59:2A:8A:C0:80
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c6:73:cd:1e:4d:34:79:c2:48:db:b6:6a:69:fc:9f:c2:28:
         3a:b5:b2:42:e1:0b:ed:70:5d:56:cf:57:a6:c8:7a:3f:be:fb:
         3b:9e:c6:05:e9:29:ed:3d:38:53:b4:2c:a7:92:9f:c3:dd:c2:
         29:bb:c9:4e:85:ab:56:e7:3e:8a:df:10:fa:68:30:e7:5d:e0:
         9c:7a:0f:d9:97:28:84:b7:7a:e0:0c:b9:9f:ca:0a:43:47:c6:
         0c:59:a8:8f:88:54:f8:a6:1a:9d:35:cd:a9:b0:96:0a:fa:64:
         87:2b:fb:b4:95:3e:45:ff:f0:4e:d2:26:8e:88:59:9e:b1:95:
         7d:ac:24:d6:a4:fb:f4:ca:86:bf:97:2f:e7:20:09:7b:5e:b7:
         22:7e:76:a1:ce:0a:f2:a4:ed:d8:c2:aa:64:cf:89:40:f9:da:
         21:5d:d8:0a:4b:bb:38:6a:f7:71:48:8a:0f:2a:94:d3:5d:12:
         40:f7:e4:f9:93:77:21:85:db:7a:51:fc:f7:d7:e9:3b:97:d9:
         b2:8e:df:aa:bc:cb:c5:4a:b6:ed:1c:2e:47:5d:82:b6:a9:fe:
         80:f5:ae:cb:04:17:ee:39:29:07:a5:d1:84:58:8f:7a:44:e2:
         84:4d:73:d1:a2:30:f2:51:96:50:c3:a6:88:5a:46:54:e6:7c:
         92:31:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 06:40:19 2025 by rpki-client