This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
File:                     8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft (raw, json)
Hash identifier:          fAxICBJ/pDnYCAr9XSHp4YLLG43UK2N/UiPsJsEYXs8=
Subject key identifier:   2C:25:B4:7B:43:19:A4:DC:71:15:45:7C:DC:DA:69:FB:97:BA:F4:1B
Authority key identifier: 8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE
Certificate issuer:       /CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
Certificate serial:       1DFCE8F338D3DB855E37337167F71A29B7855A59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
Manifest number:          0143
Signing time:             Fri 05 Dec 2025 19:03:18 +0000
Manifest this update:     Fri 05 Dec 2025 18:58:18 +0000
Manifest next update:     Sat 06 Dec 2025 20:59:18 +0000
Files and hashes:         1: 323830343a333664383a3a2f33332d3333203d3e20323636333736.roa (hash: imLmjWhpkf30wGzPX/N45CUVRfunQ7KprlutiBc0u3U=)
                          2: 323830343a333664383a3a2f33322d3332203d3e20323636333736.roa (hash: 1dHLraw04NFJxymzqkFkO+vYJ3VgTas762b7elmsJEQ=)
                          3: 3137302e38302e3131322e302f32332d3233203d3e20323636333736.roa (hash: veo+8WryD8I4uIK4Azgwl9ZCNurhhRHJrPyherRlo5Q=)
                          4: 8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl (hash: IIeAokaWeXDOCoSaK7fMJ6upkv6SgMB2ZXO2FCME4+E=)
                          5: 323830343a333664383a383030303a3a2f33332d3333203d3e20323636333736.roa (hash: kuOigvHk9xrkKy8rgef0si8YwKYGpZnUjEE9PLDNCZY=)
                          6: 3137302e38302e3131342e302f32342d3234203d3e20323636333736.roa (hash: CrzlhgmW2FpR3yb7JWJ7VfW91Uj+Lyhs5XCyEWYiUIY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl
                          rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 20:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fc:e8:f3:38:d3:db:85:5e:37:33:71:67:f7:1a:29:b7:85:5a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5716CE9AAF1F951C62F65F906316E9E6082CFE
        Validity
            Not Before: Dec  5 18:58:18 2025 GMT
            Not After : Dec  6 20:59:18 2025 GMT
        Subject: CN=2C25B47B4319A4DC7115457CDCDA69FB97BAF41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:99:86:43:30:ca:99:49:3b:9a:9c:c4:43:
                    c1:37:ac:ff:29:ef:77:4f:c1:e5:00:60:fd:63:ce:
                    63:9c:6c:a1:be:0e:87:b2:74:53:51:e0:24:72:27:
                    6c:c3:2b:e0:22:ba:b2:f2:87:91:f5:c8:0a:4d:d7:
                    58:8d:ea:5f:8b:e2:71:36:70:40:a8:16:5d:16:e7:
                    79:cb:cb:46:97:98:36:2e:49:3a:95:5b:bf:b9:e0:
                    54:cc:ba:d7:58:43:5a:86:6f:d7:a8:27:df:30:a9:
                    2b:fb:d9:f9:00:da:4f:7d:80:cb:52:c8:9d:04:6a:
                    d6:dc:e5:7b:91:06:94:e9:f9:b1:d8:e1:3c:9f:48:
                    f3:1e:a7:d5:07:3e:e1:2b:be:80:cd:45:d6:37:93:
                    bd:8f:f9:ee:a9:97:b5:92:64:25:03:24:70:8a:63:
                    59:f9:d9:b5:e2:ba:73:cd:fb:eb:fc:11:c4:04:11:
                    77:f0:c3:f9:20:a5:09:f2:2e:74:90:89:f5:f7:63:
                    53:6b:c1:77:93:56:1a:2c:48:54:e8:86:cb:51:3f:
                    c2:93:5b:88:94:73:87:34:ef:9e:77:21:32:8e:6e:
                    0e:fb:3c:7f:8c:ac:19:7c:45:06:5e:88:f7:c8:12:
                    51:62:c6:e1:62:3a:b4:dd:80:24:8d:50:8f:13:78:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:B4:7B:43:19:A4:DC:71:15:45:7C:DC:DA:69:FB:97:BA:F4:1B
            X509v3 Authority Key Identifier:
                keyid:8A:57:16:CE:9A:AF:1F:95:1C:62:F6:5F:90:63:16:E9:E6:08:2C:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gycfu9YetLPNXxaHSd6wJrJdDt6d8UMa9E1ADX1jYPj8/0/8A5716CE9AAF1F951C62F65F906316E9E6082CFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:0a:11:f1:d7:11:6c:57:16:81:d9:b1:1d:84:63:7a:47:
         50:1c:be:f2:f7:73:a4:c4:14:78:4b:a7:f9:fc:a7:41:fe:7c:
         c5:51:a9:c0:16:4e:18:c3:0a:81:ee:46:ca:df:38:1f:6d:da:
         75:7f:77:7f:00:a4:07:00:e5:6f:7a:5e:15:bc:ae:93:7e:05:
         9a:aa:20:5e:27:d8:d9:40:a9:ac:78:21:3a:44:c1:90:f1:44:
         24:32:dd:b3:4a:ec:2c:1a:90:36:bd:6e:ae:c6:a4:50:08:83:
         25:19:2d:41:dd:43:64:47:6a:e8:e5:5d:62:ba:e9:37:3a:9f:
         32:d2:f9:36:9b:f3:6d:31:2e:d9:b5:93:de:59:a5:bd:f5:ce:
         b9:67:8d:59:94:f7:d4:42:fd:84:6f:12:db:65:e7:3b:93:18:
         74:bc:63:a7:c9:9e:26:8b:ce:5f:67:5f:77:a1:a8:b0:0c:df:
         61:36:a8:96:11:97:66:b7:b9:4b:e6:83:ff:12:aa:c8:a5:9a:
         45:d0:41:ea:48:8d:41:01:20:a8:7c:77:d6:e7:d5:a2:82:36:
         cf:4a:b4:c9:83:9f:24:1a:10:44:ab:f3:d3:a1:06:70:9d:17:
         7c:2e:5d:37:c5:b0:f9:ab:16:b5:49:fb:c0:4a:cc:f8:17:39:
         f3:e5:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:14:39 2025 by rpki-client