This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
File:                     5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json)
Hash identifier:          PhjY/x6bQ9Y7K5PeNBPGjBrIXbmCbo0Iyd9zdpGm1n4=
Subject key identifier:   08:31:8F:69:4E:48:59:17:6C:BD:11:12:89:9F:68:3D:22:EB:9C:40
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       3C5BB9820C26A569AFCA540F269C43AA18A15F9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
Manifest number:          0389
Signing time:             Sat 06 Dec 2025 08:03:56 +0000
Manifest this update:     Sat 06 Dec 2025 07:58:56 +0000
Manifest next update:     Sun 07 Dec 2025 10:10:56 +0000
Files and hashes:         1: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: QGRW6VB1VBMr4D4z8D1/bQcy5Z8hPuZHP/kzcTbGTuQ=)
                          2: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=)
                          3: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 10:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5b:b9:82:0c:26:a5:69:af:ca:54:0f:26:9c:43:aa:18:a1:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Dec  6 07:58:56 2025 GMT
            Not After : Dec  7 10:10:56 2025 GMT
        Subject: CN=08318F694E4859176CBD1112899F683D22EB9C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:9a:c4:8c:7f:0a:31:1e:8f:8c:6f:7c:2b:
                    9e:27:2b:91:2b:60:a8:ca:b2:03:7b:8b:1e:a8:95:
                    e2:48:51:c7:f8:a5:05:a8:3d:c6:a1:80:b8:79:09:
                    30:a3:1b:68:8a:48:6f:13:77:93:b8:86:c4:46:b7:
                    be:f9:d1:08:d8:aa:5b:21:26:8b:c4:a0:21:b2:3f:
                    53:81:45:e9:52:b7:8a:1a:ab:42:17:65:bd:1d:af:
                    9d:b0:8b:e4:7e:60:a5:cb:97:b2:29:7a:eb:57:07:
                    db:38:79:40:a8:57:30:a7:8a:96:df:4a:25:7b:96:
                    9e:d3:df:64:b3:23:66:91:e2:58:03:7f:4f:b1:aa:
                    43:0f:cd:af:7d:62:dc:84:c6:91:bf:67:e9:3c:87:
                    2b:0c:e8:d8:86:68:97:4f:3f:b5:d3:ca:37:b8:c2:
                    a5:a1:29:60:e2:97:45:ef:08:24:63:6b:68:69:96:
                    96:c7:ca:12:2b:35:78:28:8c:d5:14:04:f6:e4:0d:
                    ad:97:05:fa:eb:20:af:48:3a:20:1e:7c:c4:20:25:
                    b1:53:03:bb:63:24:c6:66:80:c7:03:58:a7:61:82:
                    2a:76:47:e2:6c:7b:d8:1b:90:a7:f2:99:91:bb:8c:
                    8c:b2:9b:2d:d1:2d:72:64:66:3e:d9:06:cd:b1:de:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:31:8F:69:4E:48:59:17:6C:BD:11:12:89:9F:68:3D:22:EB:9C:40
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:74:cd:ce:68:1c:e2:17:d5:6b:a8:3f:1e:34:5e:e8:54:72:
         d0:53:c2:42:54:ae:48:a3:8e:76:8c:c5:2b:ba:a6:8f:f7:94:
         f2:ea:b9:c0:09:e4:77:0e:d5:25:e1:25:21:13:d4:81:26:bb:
         38:68:0e:20:33:df:55:b5:81:01:51:be:cd:cb:8e:54:eb:0a:
         bf:0f:5d:0d:15:63:9e:f3:25:4a:53:29:5b:81:0c:10:93:c3:
         29:9f:a0:5a:47:cc:9d:a9:8f:9b:b0:ba:03:22:c6:6a:3a:1b:
         03:f3:bb:2d:ab:a9:90:59:22:26:f8:41:2c:d3:e7:b5:70:0e:
         55:10:bf:9f:71:59:63:df:2c:76:65:e4:4c:58:c2:8d:29:ab:
         0d:83:d7:0c:4a:9a:e9:7a:cd:44:45:d1:64:6e:db:62:d7:bc:
         d1:b9:47:7d:45:23:a0:b8:ab:fa:8b:86:24:14:fe:9e:58:ce:
         3c:45:f7:8b:02:fd:64:ef:14:78:50:7c:97:3e:46:90:87:0a:
         7d:f8:97:20:cd:20:60:a4:ab:85:05:56:62:a4:87:7b:61:f1:
         92:7a:a8:a8:86:d2:e2:d0:3a:c7:fb:60:f1:ac:42:17:78:0d:
         ab:4a:0a:12:9e:35:f6:fe:a1:f0:34:d0:91:58:77:f9:f4:80:
         46:e2:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:18 2025 by rpki-client