This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
File:                     864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json)
Hash identifier:          ovlSpHXAR336jAAdTO06d5NF28hJb7gnGJctJA8wg4Q=
Subject key identifier:   ED:CE:C2:60:02:32:52:F7:6C:C9:58:15:11:18:85:35:06:04:5A:C4
Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59
Certificate issuer:       /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
Certificate serial:       6474CA61395272AD3C5FE6A8E11515D0D8515005
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
Manifest number:          0198
Signing time:             Sat 06 Dec 2025 07:49:15 +0000
Manifest this update:     Sat 06 Dec 2025 07:44:15 +0000
Manifest next update:     Sun 07 Dec 2025 08:57:15 +0000
Files and hashes:         1: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=)
                          2: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: 92eTHKnTeT/Aqh7HqNiI4oS31B4Re0Fi4pIwBjTKzus=)
                          3: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=)
                          4: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl
                          rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:ca:61:39:52:72:ad:3c:5f:e6:a8:e1:15:15:d0:d8:51:50:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59
        Validity
            Not Before: Dec  6 07:44:15 2025 GMT
            Not After : Dec  7 08:57:15 2025 GMT
        Subject: CN=EDCEC260023252F76CC958151118853506045AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:11:05:38:97:85:da:77:17:31:80:64:e8:
                    e8:c3:4e:71:b7:ca:55:ec:72:15:09:e7:86:e3:ea:
                    5f:a4:a0:f7:de:f9:47:c8:65:d4:7b:44:ee:63:7a:
                    13:ff:8a:7b:d2:aa:86:ba:25:55:12:02:f8:92:87:
                    1c:1a:b3:15:37:03:8e:77:fe:3a:ae:00:14:8d:66:
                    6f:4f:42:ad:6c:e9:a5:d4:34:df:42:ca:d3:8d:8e:
                    94:49:c8:e6:16:a7:bc:03:da:cc:69:f5:eb:bf:24:
                    32:60:a4:c5:f6:92:b8:24:de:86:7e:7e:cd:3a:73:
                    64:e3:9c:dd:0b:fe:fb:c9:31:5f:fa:5c:cb:95:10:
                    30:cb:59:d4:f4:45:18:4f:65:a3:99:6f:cf:af:3d:
                    4d:d6:92:a3:79:fb:84:2e:e0:44:e7:dd:13:6e:e4:
                    f4:53:88:9e:1d:4a:43:8d:c5:c5:a4:4c:02:24:dc:
                    42:44:18:c9:72:46:a0:d6:09:ef:d1:e3:3a:c8:28:
                    92:79:22:23:84:ac:a3:d7:63:0d:51:cd:95:54:c2:
                    8a:9a:6e:52:32:09:64:84:1a:ee:87:a8:bf:f4:3e:
                    41:3e:9b:d2:04:cb:54:98:34:1d:5c:46:12:65:ee:
                    29:ed:f6:aa:ed:c8:86:8f:b1:8d:33:4e:70:ac:ef:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CE:C2:60:02:32:52:F7:6C:C9:58:15:11:18:85:35:06:04:5A:C4
            X509v3 Authority Key Identifier:
                keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9c:54:07:09:e8:bd:9f:27:13:7c:ab:45:e9:6a:e1:bb:57:
         42:8d:58:c6:96:1c:53:4b:1a:da:21:8c:1d:15:27:5d:0e:a6:
         b7:9a:21:99:c3:d0:a2:fa:9e:f0:fc:7e:65:c4:b1:ba:63:83:
         ac:20:cf:a3:e5:58:a2:6b:8c:8c:8e:37:cc:3b:97:17:e2:ec:
         a8:48:ec:41:99:72:ef:a7:7d:d9:56:f1:41:8f:cb:43:1b:d3:
         2f:32:68:7f:69:df:b9:d5:33:e0:f7:d7:be:d5:c3:ab:17:22:
         cb:cf:bb:03:c1:a7:54:55:b3:10:df:9d:a4:4f:82:c3:48:52:
         87:05:71:48:55:58:00:e7:3b:86:c8:ed:02:21:ad:d6:67:f3:
         31:95:52:31:a6:b4:e6:48:f7:cf:67:36:82:6b:bd:47:70:c2:
         b0:8f:cb:29:2e:39:52:ec:77:92:ed:25:b6:18:f5:cb:27:6e:
         ef:cd:b1:85:31:59:92:06:16:66:0c:a2:34:e8:70:e0:46:52:
         13:40:4b:a7:1a:d0:d9:75:91:cc:b4:b3:43:35:41:b5:2b:7e:
         c0:e7:31:13:2b:16:05:18:2c:e8:c6:7c:fd:51:4a:c8:4d:54:
         ed:13:7e:b6:07:04:bd:3d:ff:25:da:20:6a:7e:7f:2f:7b:2b:
         53:16:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:46 2025 by rpki-client