This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
File:                     BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft (raw, json)
Hash identifier:          bE5FUge6Skxq+SjWJdBcYGv4HAAOazTBOHlTJoxSybU=
Subject key identifier:   4D:9D:79:DD:51:F6:EA:9C:BD:3A:90:A9:51:13:F1:06:51:6E:81:13
Authority key identifier: BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED
Certificate issuer:       /CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
Certificate serial:       52FF1D2B8165B1BD156CBC636E1371E263590D6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
Manifest number:          0196
Signing time:             Fri 05 Dec 2025 20:10:14 +0000
Manifest this update:     Fri 05 Dec 2025 20:05:14 +0000
Manifest next update:     Sat 06 Dec 2025 20:32:14 +0000
Files and hashes:         1: 323830343a356635303a3a2f33322d3332203d3e20323639303931.roa (hash: JjfpvZ/a8rn6RTfBN/eKydi2OqnLDF2aPd2lyChWMm4=)
                          2: 34352e3137382e3138382e302f32322d3232203d3e20323639303931.roa (hash: R9nE7BqBERJ9SCyqfUr8ziWc17ryihiqm8fi5mviSqM=)
                          3: BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl (hash: YUy8k4CAJ3gg8KhPry+ayU/BIS6K/uW/j1ZUTexhtJc=)
                          4: 34352e3137382e3139302e302f32332d3233203d3e20323639303931.roa (hash: SbDiPiw0zgFwokUFBdhrKqHyKSsK+ALqomP5kAXUCs4=)
                          5: 34352e3137382e3138382e302f32332d3233203d3e20323639303931.roa (hash: 37SvGuZe58jpzCszJAEDfr+qlabxrvB4pp9ZajuFtQ4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl
                          rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:1d:2b:81:65:b1:bd:15:6c:bc:63:6e:13:71:e2:63:59:0d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1D92CC61E951D8FC0BC47254B3C399B04418ED
        Validity
            Not Before: Dec  5 20:05:14 2025 GMT
            Not After : Dec  6 20:32:14 2025 GMT
        Subject: CN=4D9D79DD51F6EA9CBD3A90A95113F106516E8113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:f2:92:be:9a:f4:f2:9f:c0:78:78:3f:bf:
                    a4:02:69:e4:21:6e:a6:26:d3:ca:bc:0a:54:68:70:
                    3a:06:78:f9:67:ed:70:87:9a:f3:ba:d6:6b:14:6d:
                    24:6c:19:90:a8:0f:48:4b:c0:18:74:7a:c0:26:2c:
                    52:26:e6:40:6e:79:d2:89:dd:6a:c0:18:f2:27:8b:
                    ee:36:73:13:d6:b6:c4:8f:72:84:3c:8f:41:19:38:
                    58:50:75:c8:37:0f:ab:f1:01:d7:d2:ee:b7:e3:41:
                    0a:5b:75:0d:fe:96:a6:38:30:69:39:02:3e:8f:90:
                    95:ab:7c:67:4e:a5:52:de:ba:7a:98:21:65:81:5a:
                    b5:39:23:38:16:47:77:ce:18:42:31:1d:37:10:b0:
                    bd:3a:99:35:67:a0:30:5b:9f:26:5b:87:c8:23:bf:
                    62:2f:2a:b4:23:39:b7:4a:01:c0:87:64:03:d0:8b:
                    98:1c:96:17:98:7b:08:fc:6a:fa:d8:ae:17:c8:51:
                    a4:cf:da:34:39:28:2c:8d:e7:ff:48:ec:b9:55:ba:
                    90:7c:f2:38:ea:65:61:7d:f9:88:b0:3f:b6:8c:21:
                    26:c6:a6:83:6b:8d:a1:46:37:32:d7:86:92:fd:39:
                    ce:ee:89:6b:77:ba:5c:66:7b:75:ef:4c:b5:6d:03:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:79:DD:51:F6:EA:9C:BD:3A:90:A9:51:13:F1:06:51:6E:81:13
            X509v3 Authority Key Identifier:
                keyid:BD:1D:92:CC:61:E9:51:D8:FC:0B:C4:72:54:B3:C3:99:B0:44:18:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9i4NKEVji1s5E4pp6hdsjwno4Ca44HmZh5XWc1iJKsfQ/0/BD1D92CC61E951D8FC0BC47254B3C399B04418ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ef:5a:ef:ae:62:9d:b4:d5:da:fc:66:ce:3a:78:7e:cc:02:
         09:b0:6a:23:d0:a1:de:86:a6:3f:e0:c8:26:cc:19:6e:64:d7:
         ef:61:18:57:55:6c:63:c9:2a:48:5e:52:b8:56:e3:c0:16:93:
         00:f8:2f:be:e7:2e:c8:2a:6e:12:c0:ea:e6:fa:c4:9c:2c:51:
         b5:43:23:22:09:0f:2a:56:f9:c4:42:29:96:11:12:e5:1a:70:
         aa:06:93:eb:cb:2c:27:e9:2d:9a:0e:45:3d:75:52:9d:9d:93:
         18:16:df:b1:e1:59:45:45:86:f9:99:fd:d1:d6:12:66:45:aa:
         e4:c9:80:e6:4c:90:1e:84:d6:a9:7c:45:b1:16:c9:17:b5:c3:
         8a:f2:a8:ab:2f:83:21:3e:9a:14:9b:cf:49:c1:4c:6a:d7:ca:
         db:80:30:ca:76:3f:aa:e6:46:ae:0a:07:2c:eb:b7:67:09:bc:
         94:dd:f8:c1:d9:a1:51:01:61:f8:ac:c5:3f:90:be:47:83:7c:
         6b:4f:92:65:fa:5f:87:54:28:c3:14:31:53:85:ca:18:93:35:
         3b:b2:36:d2:31:e3:f8:93:36:b3:1c:fb:13:47:6d:5c:f5:ba:
         fe:bb:cc:64:90:10:fb:90:65:97:93:af:33:73:4f:e6:8f:fd:
         10:46:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:52:09 2025 by rpki-client