This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
File:                     CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft (raw, json)
Hash identifier:          RVSQjapxyVYBHjcZyqtSDXu0EYQbEVzOUC+IBpWR1+Q=
Subject key identifier:   76:B5:40:0F:CA:0F:F7:74:05:E9:9B:01:49:34:2B:4C:FB:1C:2F:C2
Authority key identifier: CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A
Certificate issuer:       /CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
Certificate serial:       2AD584F3888ED2F5B29D2C9519AA509EEB1AC1A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
Manifest number:          0A
Signing time:             Thu 18 Dec 2025 00:59:18 +0000
Manifest this update:     Thu 18 Dec 2025 00:54:18 +0000
Manifest next update:     Fri 19 Dec 2025 03:38:18 +0000
Files and hashes:         1: 323830343a373034303a3a2f33322d313238203d3e20323730373135.roa (hash: sNgEF06hBcueOscjyGonLqPiAr/nqxGOmW+2KVDrBsY=)
                          2: 3138392e3132372e3138302e302f32322d3234203d3e20323730373135.roa (hash: RhjZm2uSbdJQigxky7M1jCcFaL9XEEChqLcnVSTm+sM=)
                          3: CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl (hash: Rthwly2scUaJ+uSOND3l0NJzmficWEC3BE0QboD1sOA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl
                          rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 03:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d5:84:f3:88:8e:d2:f5:b2:9d:2c:95:19:aa:50:9e:eb:1a:c1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD020BA5F404BCD8D9C9489D33465A251DE5D72A
        Validity
            Not Before: Dec 18 00:54:18 2025 GMT
            Not After : Dec 19 03:38:18 2025 GMT
        Subject: CN=76B5400FCA0FF77405E99B0149342B4CFB1C2FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:f0:f0:5d:db:14:75:a1:17:ab:a6:3a:13:
                    68:bd:35:69:fa:21:8b:ac:04:ef:84:a6:56:58:13:
                    35:e1:1f:ac:bd:ef:89:73:32:d4:1b:7a:b1:31:0a:
                    d7:19:6a:8d:d0:87:3a:0e:8c:5c:2f:45:33:c2:93:
                    d0:73:8b:cf:c0:b8:c7:4a:4f:a7:f3:87:a8:97:e8:
                    54:8b:6a:d1:75:be:f1:50:24:1a:10:5e:3b:ee:85:
                    a0:2f:85:16:5f:8e:8a:58:3c:7e:37:6f:86:7a:71:
                    90:80:c5:27:f4:99:dd:6b:9f:43:27:8d:7c:39:b5:
                    3d:92:eb:56:b8:97:f0:32:61:b7:89:06:00:7b:32:
                    42:62:18:08:51:5c:37:63:f3:93:59:bd:30:da:4e:
                    a7:76:18:a3:eb:9e:17:e5:4d:52:44:56:ce:09:a9:
                    eb:1d:7a:fe:27:84:ca:42:23:03:4a:62:0a:17:c7:
                    ed:be:79:e0:41:19:01:70:5c:2c:a3:82:ed:6b:6c:
                    e1:19:26:46:d8:7e:d9:c5:bd:da:2b:18:ce:19:16:
                    d3:74:f9:3f:23:c4:1d:ff:a4:97:27:9b:a0:0a:7a:
                    a6:cb:71:ed:0f:52:df:7f:9c:4f:56:2b:54:8e:cc:
                    81:3e:b7:7d:0e:0a:85:bb:f1:5d:ea:a9:90:53:ae:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:40:0F:CA:0F:F7:74:05:E9:9B:01:49:34:2B:4C:FB:1C:2F:C2
            X509v3 Authority Key Identifier:
                keyid:CD:02:0B:A5:F4:04:BC:D8:D9:C9:48:9D:33:46:5A:25:1D:E5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5q8V1ZqFRhaDaeqFQsHQ9FjBLjQs7jLE1MiSykb7PkKT/0/CD020BA5F404BCD8D9C9489D33465A251DE5D72A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:f1:64:ee:73:a2:b3:c8:0f:89:76:fa:b6:46:86:04:ad:
         2f:63:24:65:00:01:93:59:2b:8c:09:71:77:61:4d:fc:f7:9d:
         a2:7d:11:26:ca:e5:25:eb:6b:39:6f:65:88:f5:60:0f:f9:1d:
         55:50:f0:e1:09:12:bc:20:72:68:f3:c1:ed:8f:85:bb:ee:dd:
         a1:0c:dc:62:82:04:4d:a9:9e:7a:df:31:2d:c5:4f:5a:cf:87:
         5e:3f:11:c6:15:cc:da:5c:d0:cf:82:3f:e8:51:62:85:10:95:
         7b:aa:78:65:28:81:a0:e3:ee:64:bd:14:18:ad:07:3a:b1:7a:
         e2:84:e5:e7:1d:93:04:41:b6:bd:55:8f:94:00:8a:11:cd:07:
         2c:57:df:6d:6e:96:c4:00:8c:fb:e8:31:0a:76:6f:df:af:b8:
         f8:2f:94:f4:51:35:7a:4e:8f:ee:14:7d:6b:35:00:1c:33:7f:
         8a:ed:47:5a:ec:12:da:6b:32:ee:4c:75:49:f6:83:21:b6:66:
         61:99:88:be:9c:9d:db:7b:1b:c6:4d:8f:f2:b4:8e:72:86:c1:
         75:80:c3:f8:51:33:8a:6e:01:cf:44:a2:f9:8b:b3:49:35:29:
         09:fc:64:6b:ff:2f:c7:15:9d:4c:bf:9d:28:6e:c2:8b:99:13:
         18:a2:f2:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUKtWE84iO0vWynSyVGapQnusawacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QwMjBCQTVGNDA0QkNEOEQ5Qzk0ODlEMzM0NjVBMjUx
REU1RDcyQTAeFw0yNTEyMTgwMDU0MThaFw0yNTEyMTkwMzM4MThaMDMxMTAvBgNV
BAMTKDc2QjU0MDBGQ0EwRkY3NzQwNUU5OUIwMTQ5MzQyQjRDRkIxQzJGQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8fDwXdsUdaEXq6Y6E2i9NWn6
IYusBO+EplZYEzXhH6y974lzMtQberExCtcZao3QhzoOjFwvRTPCk9Bzi8/AuMdK
T6fzh6iX6FSLatF1vvFQJBoQXjvuhaAvhRZfjopYPH43b4Z6cZCAxSf0md1rn0Mn
jXw5tT2S61a4l/AyYbeJBgB7MkJiGAhRXDdj85NZvTDaTqd2GKPrnhflTVJEVs4J
qesdev4nhMpCIwNKYgoXx+2+eeBBGQFwXCyjgu1rbOEZJkbYftnFvdorGM4ZFtN0
+T8jxB3/pJcnm6AKeqbLce0PUt9/nE9WK1SOzIE+t30OCoW78V3qqZBTrqipAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUdrVAD8oP93QF6ZsBSTQrTPscL8IwHwYDVR0j
BBgwFoAUzQILpfQEvNjZyUidM0ZaJR3l1yowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXE4VjFacUZSaGFEYWVxRlFzSFE5RmpCTGpRczdqTEUxTWlTeWtiN1Br
S1QvMC9DRDAyMEJBNUY0MDRCQ0Q4RDlDOTQ4OUQzMzQ2NUEyNTFERTVENzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMDIwQkE1RjQwNEJDRDhE
OUM5NDg5RDMzNDY1QTI1MURFNUQ3MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NXE4VjFacUZSaGFEYWVxRlFzSFE5RmpCTGpRczdqTEUxTWlTeWtiN1BrS1QvMC9D
RDAyMEJBNUY0MDRCQ0Q4RDlDOTQ4OUQzMzQ2NUEyNTFERTVENzJBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjHLxZO5zorPID4l2+rZGhgStL2MkZQABk1krjAlxd2FN/Pedon0RJsrlJetr
OW9liPVgD/kdVVDw4QkSvCByaPPB7Y+Fu+7doQzcYoIETameet8xLcVPWs+HXj8R
xhXM2lzQz4I/6FFihRCVe6p4ZSiBoOPuZL0UGK0HOrF64oTl5x2TBEG2vVWPlACK
Ec0HLFffbW6WxACM++gxCnZv36+4+C+U9FE1ek6P7hR9azUAHDN/iu1HWuwS2msy
7kx1SfaDIbZmYZmIvpyd23sbxk2P8rSOcobBdYDD+FEzim4Bz0Si+YuzSTUpCfxk
a/8vxxWdTL+dKG7Ci5kTGKLyLg==
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:55:29 2025 by rpki-client