This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
File:                     B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft (raw, json)
Hash identifier:          skK7B3y//yXXdYk0JkD1WL2bORZg81Cf81uJhRJQ5rE=
Subject key identifier:   6C:63:47:74:0B:BC:F8:B6:F7:2E:2B:F2:19:6B:BB:3F:CF:FE:41:72
Authority key identifier: B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86
Certificate issuer:       /CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
Certificate serial:       6BB5B0D8A625BE9F6ED491EBC08CD67C4FFA8F8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
Manifest number:          A3
Signing time:             Sat 20 Dec 2025 01:10:00 +0000
Manifest this update:     Sat 20 Dec 2025 01:05:00 +0000
Manifest next update:     Sun 21 Dec 2025 04:50:00 +0000
Files and hashes:         1: 323830343a366638383a3a2f33322d313238203d3e20323730363637.roa (hash: 3h6SfhzIPmrfXblR02cl5n5u6+4bnzhiT4vzZuMnS64=)
                          2: 3137372e31302e3133322e302f32322d3332203d3e20323730363637.roa (hash: VyE9iHz3xhEfhzvHNmYrZfWFUzLKuAQo+FzkgAdY7ME=)
                          3: B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl (hash: kJ4hxE/ZGrEnzHXWCW9LSJT4ORWVr4alMwd4jlwV81w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl
                          rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 04:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:b0:d8:a6:25:be:9f:6e:d4:91:eb:c0:8c:d6:7c:4f:fa:8f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86
        Validity
            Not Before: Dec 20 01:05:00 2025 GMT
            Not After : Dec 21 04:50:00 2025 GMT
        Subject: CN=6C6347740BBCF8B6F72E2BF2196BBB3FCFFE4172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:e3:20:42:4b:b7:41:07:29:59:85:0b:4d:
                    fc:0d:24:9e:fd:b0:3e:84:45:46:56:4d:ba:df:8c:
                    3b:4b:45:1e:04:30:d5:2f:69:a1:ad:40:9d:3c:40:
                    d9:16:84:bb:e9:25:ee:49:5c:3e:c5:e9:06:6b:d6:
                    e9:64:b2:81:cd:23:6d:1d:90:52:11:9f:e0:c7:36:
                    9d:e1:d9:83:87:e3:c2:9a:93:d2:af:e6:76:e9:c6:
                    e3:8a:26:1b:e0:61:2e:37:68:5e:36:d1:c9:4d:ad:
                    d3:5d:22:7e:0a:b8:99:f5:f5:78:ad:34:15:e6:07:
                    6e:8c:f6:f5:ad:3d:f2:52:0f:f9:65:18:48:30:0a:
                    cb:43:88:9d:a0:9f:2b:a0:d5:35:3b:ae:e0:4b:55:
                    b3:18:cf:3a:65:9e:88:b5:f9:c0:92:81:16:9a:ac:
                    62:1c:d8:83:55:6c:c9:4b:c4:ef:8f:37:d3:77:e9:
                    43:31:5c:c9:8d:df:bb:49:26:02:3c:12:bf:35:48:
                    ca:91:17:57:c9:77:6a:b2:f3:da:50:76:28:e2:aa:
                    a4:fd:ec:6d:48:07:4a:d3:cf:34:37:59:6a:fe:54:
                    02:9d:95:88:69:18:14:b3:88:30:9b:8c:5a:eb:93:
                    15:1c:cb:52:60:c0:7a:8a:5f:98:1e:13:ec:59:f3:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:63:47:74:0B:BC:F8:B6:F7:2E:2B:F2:19:6B:BB:3F:CF:FE:41:72
            X509v3 Authority Key Identifier:
                keyid:B8:93:6E:9B:A1:4A:90:AC:46:01:D5:CF:48:9A:1E:02:CD:FA:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fK9sdHs9ebYomrLZQZMH1kVuLWyV6Wz5pxdbC7r29DZ/0/B8936E9BA14A90AC4601D5CF489A1E02CDFAFA86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:08:35:45:20:79:9b:4f:1d:b4:e0:61:54:47:87:16:e7:dc:
         39:01:46:a7:55:75:ba:7f:56:f4:78:1e:1f:8a:07:e9:16:67:
         89:99:ba:d9:7c:99:f2:86:ad:40:e2:ba:25:28:19:1f:e9:89:
         0f:db:e3:02:d5:9f:95:6d:85:56:55:dd:62:89:84:7f:3c:2f:
         b3:c0:24:1a:58:4c:a7:4a:60:6f:0d:59:70:ce:66:2a:11:74:
         51:b2:73:d2:e5:75:0f:0e:01:34:ff:66:02:13:ce:23:80:7e:
         01:75:57:8b:f8:9c:b3:0f:15:75:e8:07:1a:4e:a5:a6:99:c9:
         55:2d:82:d5:48:b0:0f:84:c4:f6:59:d7:73:19:32:c2:23:c7:
         43:f7:fb:43:96:6f:7a:01:9c:48:57:75:90:09:f8:6a:e8:69:
         23:22:e9:d1:50:44:1a:83:57:bc:6d:95:07:ed:80:b2:63:bd:
         81:19:f8:14:62:23:f2:55:2c:d8:41:bd:b9:d5:af:3a:cf:00:
         d8:ec:26:46:d5:0e:56:b9:9d:df:ea:08:fc:4b:82:2a:0e:a4:
         1e:d3:02:75:18:48:16:0a:6d:8a:f2:a9:72:05:69:06:55:ea:
         de:d2:2d:9f:11:29:be:71:67:76:97:02:46:6b:e3:6b:cb:30:
         00:d5:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----