This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
File:                     CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft (raw, json)
Hash identifier:          ozhUKaZQYqV3Y+cBG9e2rj3OIpq39uJGCgsjY4lRaBg=
Subject key identifier:   F9:B3:C9:87:47:C1:1A:0F:60:12:72:F1:8A:5E:77:11:EA:5C:38:CF
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Certificate issuer:       /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial:       731AD379A473B13627CD6DE37FDCF79D9C5B4456
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
Manifest number:          0344
Signing time:             Fri 05 Dec 2025 23:28:56 +0000
Manifest this update:     Fri 05 Dec 2025 23:23:56 +0000
Manifest next update:     Sat 06 Dec 2025 23:30:56 +0000
Files and hashes:         1: 3139312e33372e342e302f32332d3332203d3e20323633333436.roa (hash: JBgbUMOSfuDRal8tFPKZ1hnVKHMRHXaPlhWoUlyXRt0=)
                          2: 3139312e33372e302e302f32332d3332203d3e20323633333436.roa (hash: dk4B0gt3xtrzpqeQPsPPmX3X8Bi3YSdbr9PQbjrctok=)
                          3: CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl (hash: EcL3jI//hQtaCB6DP+s1bO3Z6pS+HLIxDPSKhkLW4Xs=)
                          4: 323830343a313462383a3a2f33322d3438203d3e20323633333436.roa (hash: 2zUdDQoZI7lf2QCIRFGO2DVEseSLfvIofWeRJppw+oo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
                          rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 23:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1a:d3:79:a4:73:b1:36:27:cd:6d:e3:7f:dc:f7:9d:9c:5b:44:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
        Validity
            Not Before: Dec  5 23:23:56 2025 GMT
            Not After : Dec  6 23:30:56 2025 GMT
        Subject: CN=F9B3C98747C11A0F601272F18A5E7711EA5C38CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:d9:aa:c4:0f:82:d7:90:1d:b0:71:8e:7c:
                    f6:01:fa:75:7f:a5:c0:e0:4f:2e:77:fa:1d:86:94:
                    6a:d0:70:6c:fa:73:6b:93:f9:44:ca:ab:d1:fc:0a:
                    2c:89:b2:d1:fc:bd:08:6d:09:c8:35:15:18:f8:54:
                    40:d5:d2:05:95:ad:49:f9:e4:d4:b8:5b:c7:1f:5c:
                    b6:76:ad:83:81:7a:b4:14:df:12:da:8b:09:90:69:
                    ae:89:95:47:ae:0d:01:5d:77:52:6b:21:87:0a:25:
                    10:f2:5c:e5:d3:ff:be:76:83:e8:af:44:86:04:71:
                    d1:7c:1d:10:53:81:ab:a7:3f:94:e4:1e:0a:46:a8:
                    d4:f0:03:17:f5:b3:32:22:45:54:09:50:ee:32:23:
                    72:df:60:0c:e7:48:2b:65:b9:d7:89:3f:87:d0:30:
                    a0:48:54:87:32:95:a0:41:9f:4e:ac:36:9f:e5:5c:
                    fa:4f:1d:37:68:70:9e:2a:2b:9a:5e:f5:f6:e2:74:
                    6c:95:7f:6a:fd:dd:be:ee:d9:a6:2f:b7:6c:1f:65:
                    40:9f:5f:9a:6e:2c:44:64:f8:79:bc:6b:31:49:20:
                    85:96:d9:47:88:3e:ec:fd:0e:bd:dd:22:58:a5:46:
                    c2:71:30:a8:0c:85:c3:a5:06:20:92:33:5f:7d:fc:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:C9:87:47:C1:1A:0F:60:12:72:F1:8A:5E:77:11:EA:5C:38:CF
            X509v3 Authority Key Identifier:
                keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e5:02:50:9e:a2:89:32:0d:93:1b:31:83:d7:fe:7a:75:4d:
         ce:6a:6a:b3:0c:28:45:f8:ff:bd:f5:77:80:a0:7a:da:d1:d0:
         3f:fb:64:f8:d6:fb:fd:19:9c:05:29:6d:ad:72:0d:cd:95:d7:
         92:62:57:88:ad:f7:10:26:4b:f7:29:78:6a:0a:4f:c7:fa:b6:
         61:6f:1c:9f:7d:20:0b:14:63:a2:9b:10:b8:6a:ec:30:2c:a3:
         5e:fa:4e:ec:55:be:6d:52:ba:26:b5:8f:24:06:74:06:52:43:
         40:03:06:19:a6:f4:5e:23:a6:62:ff:8b:4f:be:00:66:3e:62:
         2a:1b:78:55:92:93:65:c7:07:4c:aa:3c:76:f6:76:55:25:2d:
         2a:fb:8c:bc:34:56:4f:af:73:7c:f4:5b:c5:b4:50:3a:66:89:
         ab:50:20:a4:1c:2a:09:18:a4:7f:7b:f3:ce:64:af:9e:f1:68:
         f1:1f:48:a0:15:a8:32:e1:e2:1d:c1:0b:d9:22:49:2e:e0:e8:
         7e:de:b0:e3:be:6c:0a:d8:c1:8e:c8:97:4e:e6:75:d9:a9:17:
         5e:4a:37:0c:ca:9b:5e:a9:0b:1f:ac:2d:21:04:cd:67:31:96:
         70:72:f9:5d:5c:1b:d2:d6:e4:49:24:0e:2e:b6:82:82:69:65:
         c9:67:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:24 2025 by rpki-client