This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft
File:                     0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft (raw, json)
Hash identifier:          jGr0wbV9/Vs20znDfReNY3nSx7+Nv86+Fy6BfDiZYL4=
Subject key identifier:   86:A7:86:61:B3:A0:09:0B:8F:B4:A5:BE:95:CB:38:DF:0E:53:96:7D
Authority key identifier: 05:44:F1:B1:BE:EC:4E:EA:D6:C1:F1:9C:61:F1:DE:27:4F:9E:F4:37
Certificate issuer:       /CN=0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437
Certificate serial:       0CA4E1E67C72D7B1AA8D70E445230A959EFE5E45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft
Manifest number:          01AA
Signing time:             Sat 06 Dec 2025 02:43:20 +0000
Manifest this update:     Sat 06 Dec 2025 02:38:20 +0000
Manifest next update:     Sun 07 Dec 2025 06:32:20 +0000
Files and hashes:         1: 323830343a37633a3a2f33322d3438203d3e203238353835.roa (hash: lKf/2rPb3nWuL48eSgZnXQ4qVQlumKEk+83Gx/Gviek=)
                          2: 0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl (hash: +POaPVKt9hAPamEgcjoueVn4VByuNNOZ36OcJIjR1lI=)
                          3: 3138372e38372e3132382e302f32302d3234203d3e203238353835.roa (hash: ZYqVc4Svy+NBZenZOVzPFqt+hMMl4asGQFHYw57YAf4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl
                          rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:e1:e6:7c:72:d7:b1:aa:8d:70:e4:45:23:0a:95:9e:fe:5e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437
        Validity
            Not Before: Dec  6 02:38:20 2025 GMT
            Not After : Dec  7 06:32:20 2025 GMT
        Subject: CN=86A78661B3A0090B8FB4A5BE95CB38DF0E53967D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:8d:6c:d8:e1:84:0e:a3:d0:5e:9c:81:10:
                    37:54:00:87:88:6c:53:70:35:e5:c3:e7:5d:2a:72:
                    e2:74:5a:0b:c0:27:f7:45:5a:2b:66:d9:ea:fb:dd:
                    d3:67:e3:33:b8:53:32:da:e7:63:45:70:f0:bb:2e:
                    78:8a:05:42:74:75:47:8f:25:2c:f0:b7:7e:49:a3:
                    0c:52:27:fe:1f:b0:1e:93:28:b0:47:89:25:00:4c:
                    d8:20:f4:93:db:24:d8:95:09:34:77:04:37:31:e4:
                    02:e4:9b:b4:46:57:a5:60:ba:5b:6f:8c:ce:6d:7e:
                    f6:c9:53:05:f9:c1:de:0a:1c:79:44:6b:85:45:8f:
                    0b:0a:5a:46:27:a0:cc:2a:06:78:7e:c6:c1:50:5a:
                    b6:5f:95:3c:d4:63:50:1a:33:98:cb:60:e2:d0:79:
                    62:c7:c2:24:4e:ae:dd:c9:a0:a7:78:94:df:f9:8f:
                    99:a8:4d:f2:51:9f:40:48:52:4a:f9:2e:4d:a6:94:
                    f2:62:dc:a8:cb:0f:ac:3e:6c:c5:dd:0d:5a:f6:32:
                    32:fb:77:e2:6e:97:40:0f:55:27:dd:d7:f7:53:67:
                    3f:43:cd:73:64:a1:4d:f1:55:64:d0:3b:c3:c6:a0:
                    64:66:83:19:06:81:4e:9f:51:de:4a:b2:1d:97:0e:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A7:86:61:B3:A0:09:0B:8F:B4:A5:BE:95:CB:38:DF:0E:53:96:7D
            X509v3 Authority Key Identifier:
                keyid:05:44:F1:B1:BE:EC:4E:EA:D6:C1:F1:9C:61:F1:DE:27:4F:9E:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:7d:98:00:dd:2c:bc:e4:96:ce:2e:c8:73:75:29:4f:ba:
         78:ee:6c:7d:c4:0c:0a:11:37:fb:b9:7d:c7:06:d2:19:4e:82:
         25:b2:9f:14:18:e5:5f:10:c5:80:83:c8:dd:25:a2:a7:00:b2:
         3f:cf:12:4c:38:e1:4d:e2:e3:a9:90:e8:3c:62:73:58:31:a2:
         c7:2a:e5:4a:3c:23:0e:67:a9:0c:1b:d1:54:82:4c:c4:5c:27:
         a6:c1:b7:9b:33:ae:47:7d:d7:9b:65:f8:21:50:c2:61:83:e2:
         da:03:d0:de:f3:4c:d2:09:d1:dc:7f:a7:02:e1:9e:66:51:76:
         e0:71:54:b0:5e:37:83:27:d0:7a:53:a0:a8:b1:f8:cd:55:9a:
         f8:b8:32:64:25:6d:3c:7b:de:12:90:70:3f:0a:38:24:be:be:
         84:de:17:0e:d4:43:8e:93:de:8a:fe:8c:62:1e:3d:08:91:11:
         ff:68:3c:4a:cb:41:bf:ba:99:aa:ee:47:6b:5a:e6:83:d6:2f:
         ad:85:cc:c6:18:a8:db:27:01:f3:bf:7d:b0:a0:84:2b:65:cb:
         2b:00:23:e7:15:89:23:eb:66:ae:86:7f:84:40:3f:60:93:79:
         e6:39:44:d0:37:61:1c:a4:7b:b7:8e:62:e6:86:80:42:53:44:
         a0:e3:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:01:50 2025 by rpki-client