This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
File:                     8528771E1676E945AC313E0774A23D878A92C3DD.mft (raw, json)
Hash identifier:          XW5o3uUrr+g7cViQXUT3ljDRCRc+u6Ec9pbLhFjgJ6g=
Subject key identifier:   25:D1:F1:9E:0A:08:E7:32:8B:75:86:50:95:82:05:D0:48:9A:A0:43
Authority key identifier: 85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
Certificate issuer:       /CN=8528771E1676E945AC313E0774A23D878A92C3DD
Certificate serial:       45E78104E95C50D2FFE4ECD4072B28373783B270
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
Manifest number:          01F6
Signing time:             Mon 29 Dec 2025 02:09:55 +0000
Manifest this update:     Mon 29 Dec 2025 02:04:55 +0000
Manifest next update:     Tue 30 Dec 2025 05:53:55 +0000
Files and hashes:         1: 3230312e372e3231322e302f32342d3234203d3e203631363937.roa (hash: n4x+KyXSzejtuXrnzRFSKvCRy/Is/Ipk32M8gprrrq4=)
                          2: 8528771E1676E945AC313E0774A23D878A92C3DD.crl (hash: lpvwVAzDm4syv0Im4J53Ll5gSbzAOo1XaengnKoJBho=)
                          3: 3230312e372e3231352e302f32342d3234203d3e203631363937.roa (hash: yoBiemtv75+UFIwxWsrn5+uJnrOypZWYa4nHenn2ZTA=)
                          4: 3230312e372e3231332e302f32342d3234203d3e203631363937.roa (hash: JkhOaVry2ajobzAeBXe4X0gtzkbogSluCQ1k55Z76lM=)
                          5: 3230312e372e3231342e302f32342d3234203d3e203631363937.roa (hash: kkQCsXQVLM6QFGe5whbUJgOhbrexmwtlFkNzJi7TPGM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl
                          rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Dec 2025 05:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e7:81:04:e9:5c:50:d2:ff:e4:ec:d4:07:2b:28:37:37:83:b2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8528771E1676E945AC313E0774A23D878A92C3DD
        Validity
            Not Before: Dec 29 02:04:55 2025 GMT
            Not After : Dec 30 05:53:55 2025 GMT
        Subject: CN=25D1F19E0A08E7328B758650958205D0489AA043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:4f:88:a0:a1:59:a2:51:41:1d:32:ac:af:
                    03:d9:8b:05:0e:a4:e9:2a:53:63:ce:36:fa:0a:09:
                    95:65:0d:e2:a3:37:ac:6a:7b:07:48:73:ce:82:ac:
                    a7:e2:8a:6c:57:8a:17:46:2d:01:62:34:44:01:5f:
                    89:9a:63:ff:66:f1:9f:e5:81:4a:ab:1d:48:b3:14:
                    0a:ed:dc:2b:40:5c:c2:8c:df:4d:5a:31:fa:11:0c:
                    6f:a7:10:a8:ca:f7:ee:7e:47:f1:fa:23:f5:5d:54:
                    dc:71:6d:b2:d8:33:91:6e:41:0d:60:b0:73:be:99:
                    c1:03:95:39:79:ba:79:a0:43:97:a1:91:d2:39:31:
                    5b:2f:16:80:67:3a:6d:e3:97:a8:c7:ff:e3:60:a6:
                    3d:67:c4:5f:34:13:5b:e2:29:e8:1d:3f:95:63:37:
                    ea:ac:d9:b4:59:06:20:c8:77:c3:10:6f:fb:7d:f9:
                    43:87:93:64:33:57:88:c5:33:8b:a0:26:62:a2:67:
                    26:78:de:ca:2e:fe:e5:28:27:a2:de:b2:34:62:3a:
                    e2:5f:ea:75:1a:81:27:43:9a:52:6a:f4:06:ce:d9:
                    1d:d3:4c:aa:61:e6:b3:f0:e4:0b:e7:85:d6:0e:51:
                    89:d1:0e:92:9f:48:21:39:a6:b8:4c:61:b0:9e:39:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D1:F1:9E:0A:08:E7:32:8B:75:86:50:95:82:05:D0:48:9A:A0:43
            X509v3 Authority Key Identifier:
                keyid:85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:65:78:a5:ae:6a:e1:22:88:28:a3:b3:4f:f4:6b:aa:6e:d4:
         9d:b2:0b:db:73:46:e6:69:b4:17:fe:a4:47:f7:0e:9e:95:2d:
         71:3b:21:24:45:b2:0f:3c:c9:36:c5:75:7b:f8:9f:39:47:cd:
         ed:89:39:38:80:d2:82:e0:c5:be:55:d2:95:93:d2:40:ec:c7:
         03:2e:b2:00:ee:72:85:6e:e1:4e:fe:22:39:f6:fd:85:fa:a1:
         cc:cb:8b:f6:45:67:8c:44:c0:01:79:62:e5:fa:f8:c5:fe:10:
         19:3c:ed:5b:7e:59:01:7f:62:f3:8b:8a:f7:24:ea:12:6e:be:
         b1:93:f8:7d:ce:73:03:39:3b:f3:2e:e6:23:2c:b0:3d:f5:13:
         09:0d:f5:5e:db:89:a4:36:cc:17:4c:59:9e:b4:27:d5:3a:9c:
         53:2b:26:74:70:50:1a:d7:30:42:40:a7:1b:0b:45:e8:5a:f9:
         ff:f4:97:fa:0b:60:a9:89:d8:14:35:47:79:7f:95:96:0f:6f:
         1d:74:9b:55:c9:2a:8d:cf:d4:14:f6:a9:61:f9:76:29:35:38:
         5f:5f:46:6c:49:3b:af:b6:f1:46:cb:16:f1:70:88:af:08:ad:
         d4:44:b0:c4:a5:f1:bc:67:5e:b0:f0:01:e8:b5:52:b7:1a:a6:
         7e:82:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:30:28 2025 by rpki-client