This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
File:                     98BC0C92855F76759D28CD06035C9FF965BDF09F.mft (raw, json)
Hash identifier:          Q6IIjCs7IuQRAH2E4K7Lm4bPRlaoNF2wP/wdbo5e7Gw=
Subject key identifier:   EA:FE:EC:BC:CB:90:F4:32:DA:EB:E9:51:D8:2F:AD:07:AD:2C:1B:3E
Authority key identifier: 98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F
Certificate issuer:       /CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
Certificate serial:       2955B982F8F4D2970CCAB1F793071BC899BB2034
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
Manifest number:          0224
Signing time:             Sat 20 Dec 2025 14:17:03 +0000
Manifest this update:     Sat 20 Dec 2025 14:12:03 +0000
Manifest next update:     Sun 21 Dec 2025 15:33:03 +0000
Files and hashes:         1: 34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (hash: t+XjGLzXBnXntotjRrTq9Lj8Z53+sgV/xlqOeTYWMzk=)
                          2: 98BC0C92855F76759D28CD06035C9FF965BDF09F.crl (hash: 3KIm1kG3aiiaG7xhGuFiAAsOj+NAaDf2y+EVe50aB6c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl
                          rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 15:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:55:b9:82:f8:f4:d2:97:0c:ca:b1:f7:93:07:1b:c8:99:bb:20:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BC0C92855F76759D28CD06035C9FF965BDF09F
        Validity
            Not Before: Dec 20 14:12:03 2025 GMT
            Not After : Dec 21 15:33:03 2025 GMT
        Subject: CN=EAFEECBCCB90F432DAEBE951D82FAD07AD2C1B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:7a:1b:b0:03:89:c4:b9:ea:7b:5d:c9:8a:
                    e1:91:2e:0d:a2:ca:b7:32:7e:58:01:76:c6:01:a8:
                    b2:02:0d:9b:a4:6e:e4:dd:f5:b1:53:3f:0e:76:24:
                    c4:4a:31:d0:9b:a2:8a:b1:75:b8:e0:23:91:4c:10:
                    08:a9:66:a8:d4:ef:e9:10:44:02:99:76:eb:df:28:
                    70:1c:3e:30:3e:ab:ae:64:18:1b:66:69:e9:e6:79:
                    a6:ab:a5:d5:8c:6a:cc:88:ae:11:d7:2c:3c:2a:7c:
                    91:4e:d1:95:61:25:37:f8:91:a9:53:db:d1:d6:c5:
                    3b:b6:c9:c8:f6:f2:31:a7:25:30:b3:bf:c6:5b:95:
                    10:a6:33:d3:65:52:d3:b2:fe:61:87:99:f4:1c:90:
                    11:68:dd:eb:a3:91:69:1a:17:b2:ea:22:c8:94:47:
                    18:f4:ce:b8:c4:c9:be:3d:7c:4b:1f:49:2a:29:b9:
                    e3:0e:7f:38:ac:a1:c5:cd:f9:0e:ad:4b:ba:11:ba:
                    c1:17:0f:ed:8b:e5:d3:7e:a8:94:6a:c0:95:d8:67:
                    db:3c:35:0b:85:08:b8:f4:df:05:76:22:da:72:c0:
                    16:78:21:20:81:69:ae:6d:87:38:ae:35:00:df:a4:
                    39:ba:1b:4b:cf:14:c2:eb:b8:10:d5:38:48:ad:81:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FE:EC:BC:CB:90:F4:32:DA:EB:E9:51:D8:2F:AD:07:AD:2C:1B:3E
            X509v3 Authority Key Identifier:
                keyid:98:BC:0C:92:85:5F:76:75:9D:28:CD:06:03:5C:9F:F9:65:BD:F0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98BC0C92855F76759D28CD06035C9FF965BDF09F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/98BC0C92855F76759D28CD06035C9FF965BDF09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:12:d6:fe:f2:7a:a4:e8:88:5b:19:e0:2e:f3:8e:21:44:
         f3:43:ef:9d:1c:66:df:ca:6b:b9:d2:31:72:e2:f3:fa:64:c7:
         c3:88:ff:0f:30:df:70:ac:71:ab:31:82:34:46:b9:45:5e:62:
         e2:81:41:c7:82:29:7e:76:39:65:3d:90:3e:6f:95:a1:16:98:
         e8:25:85:1b:a9:2d:4f:6e:41:9f:60:2e:09:b7:e8:72:99:c1:
         2a:95:d0:97:cd:51:44:7c:da:e1:95:46:42:05:43:15:7a:34:
         39:2d:55:c5:52:ce:7e:47:d0:f3:1b:25:9b:a1:27:eb:30:46:
         cd:e1:56:93:25:f0:8f:b5:64:65:b0:34:9f:c1:79:48:9f:a2:
         fa:b1:4f:8a:43:85:26:d9:50:5f:40:8c:a9:db:3c:d3:d7:f4:
         31:61:0c:85:b6:81:54:fa:e3:82:68:cf:83:2c:41:a7:5f:5f:
         c5:82:ec:8c:22:fb:31:e6:33:a2:f4:7f:8d:39:89:af:0a:3b:
         6c:03:df:35:11:4a:12:ae:4c:7d:18:c6:94:68:4d:a2:5f:74:
         49:b4:ed:d9:c3:d4:49:22:ee:6a:d9:b0:54:f1:b1:7d:60:b7:
         ad:8c:58:c1:e0:91:a2:f3:f0:84:bf:68:20:c7:62:3b:3e:d5:
         28:62:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----