This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
File:                     86B2810A6C4EB421987C3396698910082BEA85F9.mft (raw, json)
Hash identifier:          WVf78a7C87QypkVf7GaQsQiGlWKvF0SP8VSb4Ddyjf4=
Subject key identifier:   30:24:AD:A8:B8:A1:94:08:AD:B3:0A:0C:7F:B0:AE:22:96:DC:A4:DA
Authority key identifier: 86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9
Certificate issuer:       /CN=86B2810A6C4EB421987C3396698910082BEA85F9
Certificate serial:       30B24735B75FBDB5BB53C29F2F37C96BD0C81398
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
Manifest number:          91
Signing time:             Sat 06 Dec 2025 02:06:42 +0000
Manifest this update:     Sat 06 Dec 2025 02:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 02:53:42 +0000
Files and hashes:         1: 34352e3136312e36372e302f32342d3234203d3e20323638343434.roa (hash: 0egYk00yhfNAsWtX77B7UJzjpdWYJzXm9OxeJpA2exg=)
                          2: 323830343a353134633a3a2f33332d3333203d3e20323638343434.roa (hash: 0tKT0hmw4ukQ0+/EyfsQekM38ZKvZKpvXHeczBv3RtU=)
                          3: 34352e3136312e36362e302f32342d3234203d3e20323638343434.roa (hash: ItEyvd0bBA6hnfxLg9xzL3gGae4YFWM05KJfBAFfRCA=)
                          4: 323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa (hash: AEKRQ/5XfHq7feFa23x6BNuywuCE4831EZnSnQ1ej9g=)
                          5: 323830343a353134633a3a2f33322d3332203d3e20323638343434.roa (hash: MkNwHyBeHjjx6MrP4jlNocS//YBZt/fyVgQGGoUV9W8=)
                          6: 86B2810A6C4EB421987C3396698910082BEA85F9.crl (hash: xD78XlzFYL/fMZbwg+c3jmDF5puPIjRmsBd43pMuqo0=)
                          7: 34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (hash: 1YqklDYP/n1RZgRlYx1W7MOZlkN40BrMgtxRYCtmFUc=)
                          8: 323830343a353134633a343030303a3a2f33342d3334203d3e20323638343434.roa (hash: WM24ggMzIvL1akgaP6TBXJL88cMabi0mQ4JHzGJT/kQ=)
                          9: 34352e3136312e36352e302f32342d3234203d3e20323638343434.roa (hash: 7voV/3P555pp8E4DYMA5jgT8xfe9H+nHMPMTXozVC4c=)
                          10: 323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa (hash: 4mt7dYfRonQTs8kzD6Da1koeoE+EpGvEsW9spYMZ1H4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b2:47:35:b7:5f:bd:b5:bb:53:c2:9f:2f:37:c9:6b:d0:c8:13:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B2810A6C4EB421987C3396698910082BEA85F9
        Validity
            Not Before: Dec  6 02:01:42 2025 GMT
            Not After : Dec  7 02:53:42 2025 GMT
        Subject: CN=3024ADA8B8A19408ADB30A0C7FB0AE2296DCA4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:4e:91:b8:eb:f6:69:8c:c4:66:cf:2e:c1:
                    d0:45:6d:17:af:22:e4:3f:27:00:ff:4f:11:d4:9d:
                    54:d8:27:f5:ef:67:78:ee:c5:8e:7c:ca:b8:e5:fc:
                    a8:a8:ec:6e:96:b7:a8:6c:78:bf:37:30:14:31:b7:
                    40:ef:c4:23:b2:d6:d3:3b:e8:1c:12:4c:b5:18:76:
                    9c:84:04:b4:0e:f1:fc:ac:ca:9a:73:d4:d2:03:e9:
                    8d:b5:3f:d3:8a:56:a2:a3:8f:3a:81:ce:11:1f:d0:
                    39:7b:8b:61:87:42:7d:74:b3:30:ba:06:ee:db:7c:
                    77:02:d6:03:c9:93:9c:76:4c:3d:7e:4a:a3:6e:95:
                    b2:5d:f7:0f:be:e1:f8:00:0b:f4:a6:44:0d:41:e6:
                    8b:07:b0:20:a9:fc:51:d8:cd:87:15:1f:e5:be:6c:
                    63:b7:ea:06:20:1d:76:61:52:4f:21:29:d3:04:4c:
                    69:31:8d:86:50:52:3f:7c:6e:8b:f3:a6:e5:de:2a:
                    43:3b:6d:34:e4:69:66:3e:3d:20:93:ac:a3:63:5f:
                    75:a5:7d:67:a6:fb:3b:64:79:be:56:1f:94:29:65:
                    69:55:99:d4:1f:2d:ee:a4:d0:5a:3a:1f:b6:40:a2:
                    2a:76:59:05:ab:ef:a2:d9:3e:ef:3f:de:1b:2b:25:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:AD:A8:B8:A1:94:08:AD:B3:0A:0C:7F:B0:AE:22:96:DC:A4:DA
            X509v3 Authority Key Identifier:
                keyid:86:B2:81:0A:6C:4E:B4:21:98:7C:33:96:69:89:10:08:2B:EA:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B2810A6C4EB421987C3396698910082BEA85F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/86B2810A6C4EB421987C3396698910082BEA85F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:e9:1f:0d:96:ab:c5:d8:bf:7b:99:6e:f5:37:c2:ba:87:
         d0:ed:31:19:67:20:c8:e4:28:9c:ee:e8:f1:d9:f0:b1:49:96:
         d4:fb:77:d2:24:25:1e:e6:6b:03:d4:8c:28:e1:30:c2:9c:c7:
         27:eb:47:6a:eb:4c:35:ed:9e:4a:c7:a8:33:31:12:09:fd:80:
         57:52:65:2c:7f:69:c5:8e:8b:f0:ae:b6:a0:18:8f:c8:bd:15:
         d8:3c:f6:fc:ee:7a:dd:bb:71:29:c4:14:c8:d4:74:43:da:e8:
         14:79:0b:d2:a8:a9:b6:6e:6f:57:db:8f:9d:0c:ee:47:40:cb:
         43:4b:34:c0:3f:ea:a5:a4:60:8a:c0:f2:bc:45:5f:9c:f5:a8:
         bb:bf:08:89:9e:2f:11:18:1c:d6:bd:dc:50:8d:92:95:34:60:
         cc:85:3c:10:0d:65:41:55:3c:6d:1c:17:5c:54:30:a5:c9:b2:
         69:9e:13:d4:05:52:34:d2:7b:e4:0b:7b:16:09:f6:46:0f:df:
         25:d2:25:54:4f:92:9f:b3:5e:76:e5:4a:3e:1b:a7:2b:19:38:
         27:1c:7d:a9:83:f8:a8:9c:7f:e7:0d:83:96:fa:be:cf:2e:0c:
         a9:70:73:6e:6c:6c:2b:22:37:15:0a:ed:ac:37:f0:a3:a2:91:
         ac:4b:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:16:07 2025 by rpki-client