This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
File:                     D5A1856A52E7F9EBF280FCB86750839A6466C111.mft (raw, json)
Hash identifier:          QPrznAE5Il5jX2qSArJiOI9hWgaZE0OyjfBdEbtvpNY=
Subject key identifier:   5C:8C:0B:80:45:DC:4E:02:A7:86:85:C9:0E:69:2A:AF:A7:B3:7F:00
Authority key identifier: D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11
Certificate issuer:       /CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
Certificate serial:       2319DEBB83CF25C9CEDD3D51CD56DD7921019698
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
Manifest number:          75
Signing time:             Mon 08 Dec 2025 18:33:55 +0000
Manifest this update:     Mon 08 Dec 2025 18:28:55 +0000
Manifest next update:     Tue 09 Dec 2025 22:29:55 +0000
Files and hashes:         1: 3137372e3132392e3137322e302f32322d3332203d3e20323632393337.roa (hash: iqNa56tx//+u9qieIK9DOLwqegcy4lUTN5G/wjF6sJ0=)
                          2: 3137372e3132392e3137322e302f32322d3332203d3e20313938393439.roa (hash: KWOcoR9hqLH7384p+O+WHFWxKloI3EeqvgQB7yfHZGs=)
                          3: D5A1856A52E7F9EBF280FCB86750839A6466C111.crl (hash: 4CHq9lwgOlFUYNQOQYlz8H5eBiKnMcbjRq97Ipg2kI0=)
                          4: 323830343a383237633a3a2f33322d313238203d3e20323632393337.roa (hash: w7mrlzP9adJiyFUUgR0vUJKBTlOPeWaDs+XqI7y8EJY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl
                          rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 21:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:de:bb:83:cf:25:c9:ce:dd:3d:51:cd:56:dd:79:21:01:96:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A1856A52E7F9EBF280FCB86750839A6466C111
        Validity
            Not Before: Dec  8 18:28:55 2025 GMT
            Not After : Dec  9 22:29:55 2025 GMT
        Subject: CN=5C8C0B8045DC4E02A78685C90E692AAFA7B37F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:14:43:96:b0:b9:de:7a:c0:c9:98:06:03:
                    f7:45:0a:c3:44:99:3f:08:b8:2e:26:eb:69:08:ea:
                    68:2a:5b:89:7a:21:37:a0:fd:e9:8b:a2:7f:bf:bd:
                    70:c7:9b:32:d6:3b:ee:57:24:5e:fa:60:f0:ba:02:
                    b3:01:0f:85:b5:38:fb:9e:18:98:0a:72:bf:26:a8:
                    1e:98:9f:c9:58:ed:ae:64:9c:b5:9c:b9:dc:b7:09:
                    dc:dc:c2:9c:ac:3f:46:78:91:0c:d9:fb:d2:9a:ff:
                    a9:24:89:54:4d:83:70:81:6a:53:29:81:dd:8b:88:
                    41:79:ec:75:33:60:54:1b:61:85:6a:5d:be:cc:b1:
                    bc:dc:20:fa:cb:bd:87:bc:0c:75:ab:f4:52:4f:ff:
                    a2:1a:b5:4e:99:84:19:7e:7d:00:6a:27:7d:31:a6:
                    f6:aa:38:55:31:1a:15:89:91:dc:5c:c3:0c:d5:ca:
                    90:5c:b2:28:22:0a:19:23:5b:16:5f:42:35:2d:1d:
                    a5:14:23:02:93:b2:47:b1:ea:f3:ed:0b:0d:b5:ef:
                    37:10:0f:a3:b9:1e:22:f0:ab:fa:ab:de:28:dd:b8:
                    28:e9:fb:8b:68:ea:9e:7c:6b:2c:32:99:d7:39:79:
                    c9:79:1b:57:1d:dc:d2:ed:ab:63:73:21:7c:2a:25:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8C:0B:80:45:DC:4E:02:A7:86:85:C9:0E:69:2A:AF:A7:B3:7F:00
            X509v3 Authority Key Identifier:
                keyid:D5:A1:85:6A:52:E7:F9:EB:F2:80:FC:B8:67:50:83:9A:64:66:C1:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A1856A52E7F9EBF280FCB86750839A6466C111.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8BqXLQ1NFn1ptqFe7ZySjEXZMsnDRguX5C5UeGFDAG7/0/D5A1856A52E7F9EBF280FCB86750839A6466C111.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:42:0d:5a:14:b1:c4:6c:34:a5:38:9e:63:36:bb:b5:74:
         de:9c:d0:2f:1c:d7:20:a7:ca:e6:89:ac:0e:c9:bd:a3:31:66:
         82:c7:d7:13:97:0a:74:6a:41:87:f3:c7:63:94:9a:0a:10:ad:
         e6:b3:f5:e9:58:cd:cc:9c:17:6b:a4:ab:9a:ad:36:b2:d3:eb:
         1b:ef:57:61:6b:16:96:3d:90:fe:ac:35:1b:f8:da:47:81:ff:
         4b:3e:a4:f8:64:0c:68:7f:1a:1b:45:0d:05:44:b4:1e:0a:19:
         34:35:95:e1:5b:1d:36:59:b2:f4:61:11:d6:9d:a5:1a:7b:72:
         de:2c:26:a9:85:13:ae:83:2e:55:bd:25:43:ab:bb:23:71:f5:
         d0:a0:82:4e:7d:ff:f5:9e:61:b7:68:c0:02:8e:99:db:08:10:
         3c:02:fa:7f:44:89:09:5f:82:df:4d:46:db:75:39:c6:ce:6f:
         cd:75:6b:9e:88:cb:33:cc:dc:e1:a2:b5:ab:45:20:b6:7f:e5:
         1a:0e:74:0c:03:57:46:7a:f5:75:60:44:ff:e3:7a:f1:af:c7:
         15:46:09:1a:b6:70:a2:fa:a0:5c:b2:b6:35:7f:04:ea:79:91:
         29:86:4c:cb:00:af:bd:36:b8:c9:bd:dd:83:12:22:b8:b8:c3:
         fc:9f:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 21:59:47 2025 by rpki-client