This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
File:                     54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft (raw, json)
Hash identifier:          Fa4Bx7KWETMbxSFuDiDAwU0bRtKUqdLyhEcKKwGsLWA=
Subject key identifier:   64:F9:BD:50:3B:52:25:DB:35:61:CD:04:53:ED:DA:DC:AE:61:75:E2
Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A
Certificate issuer:       /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
Certificate serial:       22815307F5389073AB1E40BADEAB1FDF2D8EA97B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
Manifest number:          0309
Signing time:             Sat 06 Dec 2025 03:33:29 +0000
Manifest this update:     Sat 06 Dec 2025 03:28:29 +0000
Manifest next update:     Sun 07 Dec 2025 04:50:29 +0000
Files and hashes:         1: 323830343a333932383a3a2f33322d313238203d3e20323636303135.roa (hash: 6mQqP6vwEYKsyAizhYGj/YcrcMRHF+AZmBDLXF0Fj1I=)
                          2: 3137302e3234352e37362e302f32322d3332203d3e20323636303135.roa (hash: FMts0WWmRfv3uIJr6sQoqG85fvB8sMOGzi7yG5qk4oU=)
                          3: 54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl (hash: saf+85RktzOC30a35jbVy972XLT5WNT9NG307eB8Lo0=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:81:53:07:f5:38:90:73:ab:1e:40:ba:de:ab:1f:df:2d:8e:a9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
        Validity
            Not Before: Dec  6 03:28:29 2025 GMT
            Not After : Dec  7 04:50:29 2025 GMT
        Subject: CN=64F9BD503B5225DB3561CD0453EDDADCAE6175E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:d1:37:ed:17:b2:88:f1:08:29:84:99:0a:
                    35:78:e6:0f:48:3d:00:b7:c0:9d:fb:5c:11:59:17:
                    a4:1c:f4:2a:57:19:a3:94:cc:6a:fc:6d:1d:9e:83:
                    bd:61:59:16:59:c7:aa:57:53:13:d8:e9:48:cf:5e:
                    54:4b:d5:e2:54:37:50:56:83:35:51:6c:b4:8f:2b:
                    bb:99:e5:de:e1:7b:69:24:be:41:ef:b8:c9:54:a8:
                    bf:d3:51:b6:79:25:ae:4f:fc:0f:c1:98:f2:c4:92:
                    e9:de:03:7d:e8:cf:1e:14:9c:40:09:92:1d:5a:62:
                    3c:e9:45:4e:46:fe:e3:b3:1b:f6:53:a1:5c:f1:8a:
                    f7:ad:ba:d9:9b:3f:08:5f:16:c2:80:76:5d:6f:b2:
                    8a:75:9b:af:51:2c:1c:b2:7a:46:ef:d7:c2:ab:c8:
                    84:2d:af:bc:b6:f1:c1:11:fd:b8:f4:34:cc:27:f4:
                    43:12:18:93:3b:a5:ac:88:57:75:07:bb:40:ff:45:
                    b5:b9:49:d1:6a:96:e8:87:51:bf:66:ff:4a:68:8a:
                    89:00:a9:d2:97:4f:ef:0d:bd:0a:64:4b:d4:06:00:
                    db:2e:f7:25:04:15:7d:ea:0c:21:13:df:be:69:aa:
                    52:93:e8:89:00:03:30:22:3c:32:15:d9:a7:16:cd:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F9:BD:50:3B:52:25:DB:35:61:CD:04:53:ED:DA:DC:AE:61:75:E2
            X509v3 Authority Key Identifier:
                keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:59:d2:10:ad:14:e7:6a:eb:2c:a4:23:f3:42:b7:d3:06:
         bb:58:81:00:b6:71:5e:1e:a0:3f:99:99:a9:dc:24:6f:0e:8f:
         56:48:26:df:03:bf:4a:bd:00:c0:0a:4f:0a:ae:26:c3:cc:a3:
         ab:e7:5c:b3:d0:08:23:7b:ce:5d:85:ee:d3:61:c2:df:38:8a:
         f4:71:09:db:cb:52:a4:a8:9d:3c:f5:e1:d4:67:86:26:12:df:
         e0:f3:00:ee:45:2f:b6:ef:df:33:c3:be:4e:a5:53:68:52:8b:
         bd:8e:73:85:d3:48:52:33:b1:ae:b3:46:56:89:c7:ca:dd:a2:
         88:ad:ac:e7:34:12:2a:31:eb:29:02:fb:5a:3b:52:ea:d2:89:
         ae:de:18:8e:42:d9:d4:d1:68:0f:32:2c:a3:15:c8:fa:c5:66:
         4f:3b:69:dc:ac:7d:2d:cf:dd:e2:ca:59:50:aa:e8:4d:99:ba:
         ac:f3:eb:a1:99:99:fd:f2:a4:a7:32:bb:ef:72:54:cf:d9:8a:
         1e:58:4e:04:c5:f8:a9:8f:c5:aa:c1:a2:46:57:07:d1:10:e9:
         58:75:a1:f0:f8:46:14:b1:3d:37:ff:60:40:b8:8a:83:69:26:
         d7:38:4e:ef:07:6b:80:55:a8:c3:f5:00:4a:41:3c:93:8a:0f:
         45:b2:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:31:33 2025 by rpki-client