This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
File:                     5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft (raw, json)
Hash identifier:          lphlkldE4qIvDDJwKpLQf3wpf8HLFUcrV2WfNxPmma4=
Subject key identifier:   A3:8D:2E:9B:23:3D:82:35:18:6B:B9:AC:19:33:37:72:41:7E:7A:D4
Authority key identifier: 53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50
Certificate issuer:       /CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
Certificate serial:       2236D63F22FCB3C7F8ED0C6A8E704F54E355A7AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
Manifest number:          016B
Signing time:             Mon 22 Dec 2025 14:52:02 +0000
Manifest this update:     Mon 22 Dec 2025 14:47:02 +0000
Manifest next update:     Tue 23 Dec 2025 15:15:02 +0000
Files and hashes:         1: 3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (hash: CijY/x6+D8joAqsuz8leADzcy10p8WZ0yiPQhbQPUfE=)
                          2: 3230312e3134382e3235322e302f32322d3234203d3e203238313533.roa (hash: /sqM7c+yfY3dj6gOKT1QCBbetiEWE4aTZ9+G4l1+RoA=)
                          3: 3136342e3136332e3134302e302f32322d3234203d3e203238313533.roa (hash: 51n3ayew2h/v7obVWbgYFaLOL9OhzyAWSOIqWxXONuY=)
                          4: 3137302e3233332e36302e302f32322d3234203d3e203238313533.roa (hash: I3Edz0N7BkPOy03876avlis+79tYwC4DD47mOHaDbCI=)
                          5: 323830343a316131343a3a2f33322d3438203d3e203238313533.roa (hash: sICBEbPkhEpTj1NGD/5Ilx722zpX8Op3r4MzgNRxF1o=)
                          6: 3138372e36302e3134342e302f32302d3234203d3e203238313533.roa (hash: 2/hRqsuQ/FHgaSrA97sa0U5IEyEyB8zh1AVYNTassEk=)
                          7: 5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl (hash: L/lB7Kz+B7m8FfNWrN55jVufnc+mxa++767m5wskh2o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl
                          rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 15:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:36:d6:3f:22:fc:b3:c7:f8:ed:0c:6a:8e:70:4f:54:e3:55:a7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50
        Validity
            Not Before: Dec 22 14:47:02 2025 GMT
            Not After : Dec 23 15:15:02 2025 GMT
        Subject: CN=A38D2E9B233D8235186BB9AC19333772417E7AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:90:0d:7e:a0:68:35:99:fe:36:49:ef:3b:
                    55:f1:9f:37:3a:98:2f:9c:f5:5a:5c:b5:c8:c8:7d:
                    8e:a9:ec:54:ef:ce:b9:a1:c8:c7:0e:91:db:6e:d5:
                    73:66:e1:52:dd:3e:25:0f:9a:f8:20:66:64:20:e2:
                    fd:35:b0:ac:6c:14:8f:39:f7:25:66:fe:55:0c:3b:
                    ae:44:42:a7:7a:85:aa:fb:23:69:ba:9d:e1:40:07:
                    2d:79:7e:76:94:98:95:30:74:16:f3:aa:cf:4b:9a:
                    85:5c:74:0c:19:56:ac:b0:d7:83:68:2e:5f:2f:bc:
                    85:79:12:1b:8b:76:7c:dd:8c:6d:96:0a:8f:65:ca:
                    f3:94:5b:dc:14:42:c4:f8:1c:d6:6f:89:23:03:72:
                    ff:18:2a:d3:48:9d:a0:3a:b4:4a:6d:81:8f:b3:fb:
                    e4:c3:1e:9c:2a:bf:ee:aa:b9:c3:9b:bf:40:d9:24:
                    d3:b7:89:bc:2c:b1:d8:f6:7b:5b:d4:21:78:75:8c:
                    21:65:a1:98:0c:88:68:d2:b2:5c:7f:00:c1:e1:5d:
                    45:26:4d:6c:26:11:c6:fd:98:04:52:05:85:b1:89:
                    b4:f1:4d:0f:f0:df:11:09:75:17:d1:f2:10:69:1f:
                    56:00:5a:98:e7:1d:79:4f:b1:db:bd:ae:a4:ba:7a:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8D:2E:9B:23:3D:82:35:18:6B:B9:AC:19:33:37:72:41:7E:7A:D4
            X509v3 Authority Key Identifier:
                keyid:53:00:AE:48:AF:BB:B3:79:3D:0E:14:25:B8:FC:6D:38:F4:3B:DC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/0/5300AE48AFBBB3793D0E1425B8FC6D38F43BDC50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:69:17:5e:e9:0f:34:41:b8:cf:ab:19:55:f3:22:1f:9b:32:
         07:8d:16:14:7d:75:ae:c3:2b:a9:ff:40:46:c3:e3:82:a8:41:
         c9:ca:9d:e6:42:b3:ba:01:ba:4d:5e:28:0f:f2:18:3a:9e:8d:
         8f:8e:a5:00:80:16:2c:26:78:2f:82:71:d5:06:fd:f9:97:27:
         27:c8:8e:0c:17:d2:aa:ef:1e:3f:c3:85:5c:63:0e:75:43:f5:
         00:f5:42:a4:55:5b:4d:78:77:26:fc:40:3c:53:1d:3a:a7:ca:
         0d:d8:62:cd:e3:2b:a5:cc:3c:dd:3f:80:d6:8d:d8:10:e8:4f:
         98:6c:f7:ce:b0:b3:f3:3d:50:4d:c6:60:c3:e8:7a:32:fb:c5:
         46:e8:8e:c4:2c:42:b7:81:3d:b2:2b:79:58:95:f1:5b:52:af:
         15:23:b7:8a:4d:7a:df:f4:cd:00:52:3f:92:d1:59:63:b1:ac:
         d4:40:37:4c:0a:1a:3c:26:d9:7d:2a:b5:9d:63:7c:5c:80:51:
         30:4a:6f:7f:4b:53:e8:df:0e:44:b0:33:26:79:a4:13:34:24:
         b2:ec:82:f1:f3:33:f5:a4:d9:ad:f8:76:f2:16:da:37:ec:e3:
         38:cf:dd:b3:63:cd:05:30:d7:25:d7:3f:99:ee:24:d4:72:63:
         bb:94:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 23:29:01 2025 by rpki-client