This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
File:                     0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json)
Hash identifier:          uWlo+IzBR8MuORZm7U4DYmNk5pQ78oEui+v+b89JOEk=
Subject key identifier:   38:BF:DC:73:FB:C4:E4:FC:1E:E5:8E:B2:79:1B:F1:66:FE:DD:36:B2
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       28F1C336CE1A054CBF1386E218A4328F30526040
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
Manifest number:          0334
Signing time:             Sat 06 Dec 2025 03:03:51 +0000
Manifest this update:     Sat 06 Dec 2025 02:58:51 +0000
Manifest next update:     Sun 07 Dec 2025 05:58:51 +0000
Files and hashes:         1: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: xNztyxQc0Oz2A13TKX7Q09Qb+e25SvpticJa49bvmJ0=)
                          2: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: CvPt6i/FKK2bJ2KHKaQ02WILQwDUCCrNQlOgIBapYng=)
                          3: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: 2dadztaER+9gyBL5gmUFWVyA0Rshw1nGZx22j2sUlE8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 05:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f1:c3:36:ce:1a:05:4c:bf:13:86:e2:18:a4:32:8f:30:52:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Dec  6 02:58:51 2025 GMT
            Not After : Dec  7 05:58:51 2025 GMT
        Subject: CN=38BFDC73FBC4E4FC1EE58EB2791BF166FEDD36B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:ac:55:55:c9:74:7f:99:4f:73:d5:3b:be:
                    a8:7d:40:e7:31:1e:73:46:f9:69:b5:90:bb:26:10:
                    ee:93:88:b6:d7:34:e5:4e:5b:5a:c2:ff:0e:1c:52:
                    d6:f7:dc:76:9f:61:27:f7:f8:c0:39:29:f8:87:ed:
                    2b:94:14:b3:9a:3b:0d:33:13:e7:e5:8b:66:4c:a9:
                    c0:6d:d6:2d:26:c2:a2:fc:9b:0f:f0:1d:c0:a2:8d:
                    37:01:a0:a9:90:98:59:83:4b:ea:82:04:a3:39:96:
                    1e:52:f6:ab:6a:db:e8:fa:00:f0:a1:2d:53:bd:5d:
                    b9:62:63:3c:4e:4a:0c:f1:3d:76:5e:f8:2d:2d:fd:
                    37:e3:ec:b9:d6:2e:f6:1c:5a:99:0d:9d:89:59:27:
                    60:65:23:ec:c4:a7:63:aa:e4:db:72:35:70:e0:cb:
                    70:17:65:1e:01:0e:c6:20:68:30:5b:89:0d:c9:11:
                    df:4c:59:31:d3:a2:2c:91:41:ca:56:2e:e5:4f:78:
                    b7:95:0c:85:5d:1c:05:da:74:5b:dc:70:7c:07:0a:
                    1b:a6:00:61:66:d0:82:a5:6f:16:d7:24:95:89:7b:
                    02:d4:d6:98:7c:d7:b1:1e:3c:40:91:85:47:ef:e0:
                    b2:65:9e:68:df:4d:b8:25:ef:ce:44:46:1e:cb:f8:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:DC:73:FB:C4:E4:FC:1E:E5:8E:B2:79:1B:F1:66:FE:DD:36:B2
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:2c:a0:94:61:67:55:cd:31:be:86:e4:cf:17:8d:e6:fa:
         cc:bf:5e:4c:01:d2:b7:80:98:44:02:50:ab:bb:28:12:dc:d8:
         1a:a5:fd:29:e9:24:de:c5:ac:fa:2a:0e:42:53:f6:e4:6d:38:
         34:2c:a4:27:ea:2b:4e:cb:c2:86:ca:1e:21:6f:e8:2d:62:98:
         1d:8d:dd:49:04:48:5b:31:61:8e:f5:77:09:77:11:33:85:ea:
         0e:0a:10:40:da:da:78:9c:f0:47:3e:14:f2:a9:66:d5:8a:db:
         fa:52:cc:d3:b1:73:83:16:1c:c6:6a:6a:85:2f:25:2f:df:52:
         a7:c3:99:52:f9:92:26:d3:93:ba:c0:fd:ed:6b:e1:1d:43:30:
         c7:65:7d:5c:14:e7:3c:70:71:b6:12:33:c9:d2:b3:73:30:5a:
         a3:c4:71:ac:2d:42:3d:d5:79:97:98:ad:26:1c:9f:45:0e:82:
         99:c8:31:15:14:da:b9:bc:a2:1f:6f:9c:ed:29:e7:eb:54:ad:
         ba:f0:0f:c0:e4:d2:90:e9:4d:c5:fa:2b:ea:5e:6c:79:db:ba:
         ee:05:04:5d:52:20:12:73:2f:f5:50:d9:bc:b7:d3:1a:b4:92:
         05:3f:1f:be:12:a0:82:36:d6:a8:eb:fa:ea:b8:6d:2d:f1:db:
         5c:24:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:47:16 2025 by rpki-client