This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft
File:                     A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft (raw, json)
Hash identifier:          BRxdqfSiyEXx46sL3f1EI4BhOvg9DrI9/a70kqOJ8dw=
Subject key identifier:   E9:59:32:62:F9:11:EA:66:F3:74:19:05:FC:E2:BD:4D:E6:B3:55:0E
Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA
Certificate issuer:       /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
Certificate serial:       389A23CBEDCFE7B1ECE73573D0D8F0D753F00A69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft
Manifest number:          01ED
Signing time:             Sat 20 Dec 2025 05:18:10 +0000
Manifest this update:     Sat 20 Dec 2025 05:13:10 +0000
Manifest next update:     Sun 21 Dec 2025 08:45:10 +0000
Files and hashes:         1: 3133312e37322e3138342e302f32322d3234203d3e203631373530.roa (hash: rlYyc6yEdxXp4H7VL+luNr1heYYTwR6d2waLIkIJbA4=)
                          2: 323830343a316263383a3a2f33322d3438203d3e203631373530.roa (hash: lZ7SG/A5VI7Mylm/uSbFvd14517TZc/Wrbqe4U1PrjM=)
                          3: A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl (hash: Wxka2043ACTXy/UM5H2E+uLw4oPQ34pfe9teCk0c53k=)
                          4: 3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa (hash: iremhYBncJnwxrRWVbmnNN4GbwCDa8kxJGolFYpl4FQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl
                          rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 08:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9a:23:cb:ed:cf:e7:b1:ec:e7:35:73:d0:d8:f0:d7:53:f0:0a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
        Validity
            Not Before: Dec 20 05:13:10 2025 GMT
            Not After : Dec 21 08:45:10 2025 GMT
        Subject: CN=E9593262F911EA66F3741905FCE2BD4DE6B3550E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a1:78:fc:32:dd:d9:65:0c:4f:7b:a2:17:67:
                    60:3a:b3:8f:f8:88:d0:58:e9:63:79:69:4c:30:9d:
                    44:9b:b7:5b:07:4e:4f:e9:01:20:55:ee:30:97:4e:
                    f4:75:c8:c1:a6:42:c2:fb:76:f6:4f:b3:99:9f:d1:
                    14:5c:e9:f9:0c:39:ca:90:a9:c6:59:ca:68:13:fd:
                    39:24:bb:91:49:c8:6c:5a:40:2c:e0:4a:5f:0d:99:
                    ef:66:e5:32:a2:e5:6c:70:e1:66:54:03:95:fd:6d:
                    22:c8:4a:86:6c:a9:f1:9b:64:3f:4d:0c:ba:7c:0d:
                    a6:64:3a:25:93:2d:44:ef:4b:4d:c3:a6:2d:be:92:
                    94:9a:c8:b4:51:b2:89:09:5f:fc:c4:89:65:19:4b:
                    db:d0:61:12:b5:e0:e8:c8:0c:1e:64:87:f7:95:4c:
                    78:71:71:bf:f3:c8:9f:dc:eb:1d:0d:cf:7d:2f:58:
                    fa:26:04:30:b0:5c:c0:a0:fa:21:c4:27:41:39:fd:
                    f6:89:24:16:44:79:67:c7:57:ee:77:25:24:97:9e:
                    61:fd:db:d1:45:45:e8:c0:b4:4e:ab:41:45:dc:11:
                    d6:26:1c:ac:aa:10:b1:0e:0a:20:1b:6e:1b:9c:1f:
                    21:da:f0:73:ce:03:77:5a:fb:c0:e8:c5:a6:3c:60:
                    67:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:59:32:62:F9:11:EA:66:F3:74:19:05:FC:E2:BD:4D:E6:B3:55:0E
            X509v3 Authority Key Identifier:
                keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a6:a9:4e:48:ee:c7:0f:ba:c7:87:ac:bc:e8:00:21:6e:aa:
         aa:56:ad:01:4a:78:ba:32:57:4b:38:be:1b:63:c1:da:1e:bb:
         38:5c:6a:c2:12:8e:01:3e:d0:cc:66:ad:29:8c:c6:72:e0:f8:
         91:75:06:53:49:f5:36:77:d3:03:d9:b6:d3:df:25:56:fd:f0:
         23:c7:13:ba:81:68:e1:ab:64:0a:59:62:7a:51:a1:6d:90:3f:
         5f:00:ab:02:0e:1d:9a:5c:c8:58:8f:ea:af:f0:ac:d2:8e:03:
         69:8b:0c:7a:20:4a:d9:6a:50:b7:ff:df:31:6d:6d:6c:a3:97:
         f1:eb:97:f0:65:50:04:e1:d4:7c:a2:31:2e:65:16:2d:76:e5:
         14:92:aa:8d:78:56:67:fd:46:1f:69:f7:9e:6f:27:fa:d7:4a:
         fc:c4:53:25:5b:0e:6b:11:11:34:d5:0f:39:6d:bd:dd:60:4c:
         56:1a:a2:78:84:dc:da:d1:46:6a:21:72:75:90:6f:4c:12:05:
         b4:96:7e:da:1e:da:1b:cf:f2:58:7a:50:f3:f4:7f:88:27:f5:
         29:cf:69:e3:a8:ec:44:cf:2b:6c:01:25:46:f9:0e:02:48:07:
         c3:74:9a:2f:95:4f:8b:e8:b5:4f:ee:ec:ce:ea:9a:fb:90:c5:
         2d:f8:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:14:32 2025 by rpki-client