This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
File:                     10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft (raw, json)
Hash identifier:          m4sl/W91w1QquzB9Augg/JnnfgZul+aDYZg/clxIWbw=
Subject key identifier:   81:D7:AE:B9:89:59:1A:BB:C0:34:19:EE:16:A2:70:DB:27:ED:6C:FD
Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Certificate issuer:       /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Certificate serial:       6A58E1C9DE99C04678DB737072DFDACD0F268E70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
Manifest number:          032F
Signing time:             Sat 06 Dec 2025 08:27:16 +0000
Manifest this update:     Sat 06 Dec 2025 08:22:16 +0000
Manifest next update:     Sun 07 Dec 2025 09:19:16 +0000
Files and hashes:         1: 34352e3137392e34382e302f32322d3234203d3e20323639303630.roa (hash: ic5gQ39rVAGkoh7+jevjyH4AIMeS6mEZxIju3r050V4=)
                          2: 323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (hash: HFns4FaaAXYNTXt/UMi3YM6904uJyBfBr5hlMSKRdwc=)
                          3: 10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl (hash: DNqlY5OXo3g5tNF1GIpIJg+d4LkB2cX/11v40GbvM2A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
                          rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:58:e1:c9:de:99:c0:46:78:db:73:70:72:df:da:cd:0f:26:8e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
        Validity
            Not Before: Dec  6 08:22:16 2025 GMT
            Not After : Dec  7 09:19:16 2025 GMT
        Subject: CN=81D7AEB989591ABBC03419EE16A270DB27ED6CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:7d:a6:36:56:8f:8a:5d:b9:0f:fa:b1:d4:
                    78:97:43:c2:90:04:fa:c4:13:94:3b:3f:a3:49:1b:
                    17:0f:0a:91:e3:81:0f:b8:ad:a9:aa:62:31:f1:4a:
                    3b:26:e0:9c:b1:5d:a0:a5:51:3c:e9:78:4e:42:53:
                    be:02:60:8f:e7:f4:f1:38:52:70:c9:52:a9:3a:e5:
                    13:dd:ea:59:a0:0a:8b:4f:95:47:5a:ea:e9:ad:0a:
                    31:7c:41:2f:1b:3f:0a:cb:14:95:fd:d2:36:9c:4c:
                    f7:fd:82:83:9a:71:27:91:c4:c6:ed:e3:ff:1b:bb:
                    a9:6f:e5:e2:44:46:e8:25:e4:b6:29:e8:0c:95:da:
                    55:a4:f8:da:39:22:a2:8b:ad:34:8e:a5:e8:b5:68:
                    6f:2e:a2:11:01:64:64:b0:5e:bd:b3:c0:a5:b5:74:
                    16:23:e7:9f:84:5e:3d:d5:28:9c:2b:1f:22:a2:09:
                    6d:89:8c:8b:3b:39:3c:06:dc:0f:b3:d1:97:df:4a:
                    2e:ee:49:c0:e8:19:ae:4c:4f:01:50:3e:a0:73:9f:
                    d1:a8:6d:61:57:e3:c7:0a:8d:da:48:c6:6e:aa:4f:
                    97:d7:40:bf:1c:27:0b:70:00:10:05:57:c0:81:94:
                    f0:80:fe:e4:59:91:29:6a:5c:ab:d8:40:4f:18:b9:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D7:AE:B9:89:59:1A:BB:C0:34:19:EE:16:A2:70:DB:27:ED:6C:FD
            X509v3 Authority Key Identifier:
                keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:c9:a2:48:26:5f:66:e8:a4:c0:88:57:f1:2b:21:1a:9c:
         f2:d7:15:25:31:ab:e2:bd:9e:c3:5e:38:a4:16:c0:fe:ba:da:
         14:10:3d:b6:bc:8c:d4:38:48:22:45:af:c6:38:52:b9:c5:81:
         98:bc:48:08:65:75:38:e0:41:52:2e:2e:0a:1c:04:bb:16:5b:
         05:47:b7:e1:04:11:b1:20:0c:54:bd:4f:3e:a8:f5:b6:6b:93:
         7f:fa:d9:cf:b0:f5:d1:e7:48:aa:40:3d:14:0f:61:21:ca:13:
         cc:50:60:81:96:1c:71:92:3f:97:f3:54:ce:df:f6:39:be:2f:
         06:c9:28:af:5f:88:b7:13:a7:6d:20:8e:dc:ff:df:c1:ee:c3:
         9d:58:62:c5:09:d8:88:bf:31:a4:4d:bf:d2:52:91:80:35:11:
         35:65:57:19:38:d9:1e:24:f9:e8:d5:52:e4:df:5c:0e:6a:c8:
         a8:af:54:36:1a:c0:80:f9:ad:25:43:79:06:97:46:ef:2a:cc:
         51:86:31:65:85:9e:96:b1:7c:1a:0d:8b:69:ab:7f:a0:f5:ad:
         76:5c:6b:92:63:b6:b9:0f:35:05:e1:5e:f8:56:c1:76:2b:c5:
         c9:6a:e9:71:45:eb:f0:e8:33:93:10:af:e1:47:b1:ec:3e:84:
         18:26:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----