This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.mft (raw, json)
Hash identifier:          xKAG7ufadbwWMf9oTHA8lpInQz2tqE0sWk481troH40=
Subject key identifier:   4E:86:30:D0:2A:57:68:AB:03:8F:B6:3B:19:48:09:97:E7:9C:07:6B
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       205EDAD41484E959D407199EE8654BBDB2497491
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
Manifest number:          032E
Signing time:             Fri 05 Dec 2025 19:55:42 +0000
Manifest this update:     Fri 05 Dec 2025 19:50:42 +0000
Manifest next update:     Sat 06 Dec 2025 20:15:42 +0000
Files and hashes:         1: 3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (hash: GP5N/ojn+CpGVA4mqG79uEfaVmGi1ccM9DHakURSDw8=)
                          2: 8EAA572CDAB740A56977FFFC602F113E473F2E77.crl (hash: ETNLuHhn3l+0wKues16w8QlfYzX6nRxpdzuHnDv9bic=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:da:d4:14:84:e9:59:d4:07:19:9e:e8:65:4b:bd:b2:49:74:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Dec  5 19:50:42 2025 GMT
            Not After : Dec  6 20:15:42 2025 GMT
        Subject: CN=4E8630D02A5768AB038FB63B19480997E79C076B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:c4:51:57:b5:33:aa:78:4f:d1:68:63:a8:
                    71:b0:01:ad:72:68:5d:ae:a1:75:98:1a:6a:a0:05:
                    23:9d:be:72:f2:3c:4e:1b:91:05:f1:cc:64:99:30:
                    05:c4:0b:9a:b4:2d:0d:bb:3d:30:af:3a:37:ce:80:
                    1b:9d:f7:d1:1a:68:75:33:e2:44:bf:14:7e:16:e9:
                    d6:1d:20:7c:ef:2a:20:16:13:5d:a9:08:d8:b4:02:
                    24:cc:1a:af:e0:3f:38:ee:5c:81:66:ce:25:79:38:
                    be:0a:32:f1:e1:f3:82:7e:70:d2:dd:fa:1e:d4:b9:
                    57:ab:f0:8f:ff:ab:e0:83:96:69:48:27:ab:f6:41:
                    dc:42:71:e1:1a:07:28:51:35:51:4a:79:0c:e9:65:
                    c7:6f:63:05:f2:85:00:ac:2e:00:fd:d1:0f:c0:fb:
                    06:9d:dd:04:f0:15:de:a4:e0:4d:f2:a9:41:1f:d4:
                    0c:bd:a6:60:58:54:ec:cd:e5:a7:88:6a:b8:34:85:
                    58:5d:ce:75:88:f5:68:d0:14:53:42:58:70:cd:da:
                    c5:d5:16:0c:42:57:3c:40:56:32:77:9c:05:d0:07:
                    69:b3:da:e8:f2:55:e6:78:24:2f:46:3f:aa:33:a5:
                    03:ae:9a:7e:fb:29:7f:42:08:8d:ba:78:cd:5c:8e:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:86:30:D0:2A:57:68:AB:03:8F:B6:3B:19:48:09:97:E7:9C:07:6B
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:52:b1:91:74:b2:f2:eb:51:3e:87:6f:88:1e:0e:ad:62:d2:
         29:03:6d:25:9f:b7:d1:dd:69:6c:2c:f8:66:f6:1b:e2:30:2e:
         22:c7:78:a2:a2:ac:ea:4d:83:a1:8d:f5:ce:7a:20:42:d8:57:
         a4:2b:65:2a:61:48:2c:c6:f3:e5:0c:8f:0d:ef:15:78:e0:58:
         4d:b9:4b:3d:6b:9d:d9:a7:87:4f:f6:cf:11:ab:8b:d6:44:50:
         b0:82:32:8c:83:ff:07:5b:42:ad:a8:a7:e5:9a:b8:83:39:92:
         dd:57:68:f4:af:02:30:de:66:d3:b3:f0:de:9f:dd:eb:da:0e:
         54:68:94:1b:7f:06:a9:ba:db:41:ef:50:cd:75:97:a6:06:46:
         53:b6:a3:1d:c4:a5:4e:5e:bb:0a:e1:24:0f:c8:62:8d:24:d9:
         20:a3:30:18:c8:0c:54:42:cf:05:e6:f4:3d:a2:91:b3:e7:35:
         23:9f:56:34:8a:fb:7d:58:07:08:7d:84:df:5f:f2:d3:c1:f9:
         c0:aa:77:88:0b:f7:0a:da:c0:36:d8:e6:0a:36:56:7b:26:3d:
         b0:eb:5b:d0:d4:c9:e1:b0:af:43:30:40:a6:3c:81:4f:90:4d:
         5e:f4:de:18:0d:80:09:00:52:55:b0:10:94:be:b3:40:b5:b0:
         e2:f5:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:05 2025 by rpki-client