This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
File:                     2028B4F00526FFD4A6479245C26F87EECD0F5352.mft (raw, json)
Hash identifier:          c96S3rdIFEDLFIQ66vLRocNNECyjkD3ZdMloWECuBQ8=
Subject key identifier:   BD:06:CD:6C:A0:8D:AF:92:2D:63:75:AF:9B:7E:A3:12:81:F6:EB:DC
Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
Certificate issuer:       /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Certificate serial:       2AE7C10A81F014F8790A7A056EACCE5FA81A465A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
Manifest number:          5B
Signing time:             Fri 05 Dec 2025 22:25:24 +0000
Manifest this update:     Fri 05 Dec 2025 22:20:24 +0000
Manifest next update:     Sun 07 Dec 2025 00:28:24 +0000
Files and hashes:         1: 3138362e3235302e3232302e302f32322d3235203d3e20323633353535.roa (hash: /pSGbcZQfzxrZjLlHHAawO1s5pR+V02yK59IB2ACSXE=)
                          2: 2028B4F00526FFD4A6479245C26F87EECD0F5352.crl (hash: qKLQ6NMYFHxX9JPGuBMfD7STeQGOczlqtWj/MVVQcNQ=)
                          3: 3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (hash: unb7feFenHIIwOwVCWy8s62+GYdR241xnz1H4IZGT1E=)
                          4: 323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (hash: 1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
                          rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e7:c1:0a:81:f0:14:f8:79:0a:7a:05:6e:ac:ce:5f:a8:1a:46:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
        Validity
            Not Before: Dec  5 22:20:24 2025 GMT
            Not After : Dec  7 00:28:24 2025 GMT
        Subject: CN=BD06CD6CA08DAF922D6375AF9B7EA31281F6EBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:3b:8a:98:0d:13:88:31:e1:65:b1:93:8c:
                    eb:57:b3:ae:3c:9e:c4:54:ee:29:66:62:e5:eb:f0:
                    37:5d:15:e1:88:6d:13:64:ef:40:f7:93:aa:54:20:
                    7a:e8:25:7e:34:fa:8f:9b:fd:71:65:84:fc:09:6c:
                    a3:97:8e:cc:f8:f9:18:71:bf:6c:20:63:ed:5b:a1:
                    53:a2:f8:80:5f:58:8e:bb:69:8a:40:f4:53:a7:74:
                    92:9c:06:d9:b9:32:37:c8:bf:d9:e0:2a:1b:c7:ab:
                    a5:86:fe:75:a0:3b:f3:2d:b3:6b:e9:ff:93:99:0f:
                    b4:7e:b5:d1:f0:54:85:85:0f:77:fb:d8:c0:6b:c2:
                    61:0a:d4:be:74:75:a7:ba:18:3c:09:72:ce:64:47:
                    a7:8c:fc:f6:de:a3:ff:4f:a2:57:28:8e:dc:2e:f7:
                    24:d2:c5:42:6a:57:51:e1:e2:c5:de:22:13:fb:e0:
                    06:42:10:78:26:3b:2a:8c:49:de:a8:08:ff:3f:b2:
                    1b:12:61:65:2d:3e:b5:cf:d1:21:dd:46:17:23:70:
                    b9:5c:1d:bf:dd:dc:58:24:4d:b1:5a:68:87:30:5c:
                    82:b8:fd:85:f5:fb:b5:a2:28:18:b2:3b:8f:78:fa:
                    e7:95:1b:81:da:b6:2f:9a:0c:35:d2:2e:4e:b7:78:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:06:CD:6C:A0:8D:AF:92:2D:63:75:AF:9B:7E:A3:12:81:F6:EB:DC
            X509v3 Authority Key Identifier:
                keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:d0:42:02:bd:c0:2f:1c:81:bf:b4:62:ea:0d:06:bc:d2:
         75:94:8a:f7:2f:dc:34:35:cc:5c:23:be:fe:55:9d:80:3b:e3:
         b1:a0:1f:1c:7c:73:46:5f:83:72:32:e2:17:30:c1:e2:d6:9e:
         43:4c:f0:d4:78:c9:5f:d0:d4:56:80:82:15:78:06:ca:eb:1c:
         a8:38:9e:e5:c8:f8:e7:da:45:11:73:bb:ac:2a:56:9c:5e:26:
         b2:05:ab:96:4d:69:6b:26:5f:8f:63:17:89:b5:9d:6f:b4:a3:
         03:8d:e3:f3:27:eb:d0:7f:40:f6:25:50:53:5d:a7:bc:6b:c0:
         5a:bd:b9:1a:93:b0:b7:62:67:64:ee:32:e9:cd:73:43:20:54:
         71:23:0d:b0:9e:0a:9e:a2:17:88:cd:dc:95:55:4f:e0:0c:10:
         92:1e:fc:37:95:65:10:54:ed:13:49:6a:a1:23:fb:3b:52:17:
         cc:e8:1d:2e:0a:6d:b2:90:e0:a5:c8:75:a2:34:18:55:4f:5b:
         b0:76:2d:78:90:ca:0b:c4:0b:12:bb:6c:ef:32:5f:ef:f8:f3:
         04:1c:0f:45:5a:90:01:d2:12:9a:b5:e6:1d:36:18:3b:75:b2:
         59:77:50:7b:3e:28:19:e3:27:11:90:11:f4:d4:d5:87:43:67:
         02:93:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:01:12 2025 by rpki-client