This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
File:                     7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft (raw, json)
Hash identifier:          rsmBCZtav865MZWscSzETWkMvHYEhjjURKqNvR/qvkQ=
Subject key identifier:   C2:E0:E8:F5:C2:E9:A1:41:AE:F0:B1:DE:70:89:29:C9:3B:A6:76:A9
Authority key identifier: 7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0
Certificate issuer:       /CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
Certificate serial:       31A1C1B436770D3C4C53495920CC004ED16E35D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
Manifest number:          01BC
Signing time:             Mon 08 Dec 2025 08:05:33 +0000
Manifest this update:     Mon 08 Dec 2025 08:00:33 +0000
Manifest next update:     Tue 09 Dec 2025 10:26:33 +0000
Files and hashes:         1: 3137392e34382e3139322e302f32322d3234203d3e20323731313230.roa (hash: dnueVLcMDgoZGxfW5fVwhKVaVsjCcpgjMDDR39mpiEg=)
                          2: 323830343a373639303a3a2f33322d3334203d3e20323731313230.roa (hash: 35WEcEG3QWk/zVJzYYzvfaiposzmcV1hcfKo2NLYw2E=)
                          3: 7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl (hash: WZt02vxKZloGOnvyIqmWwEQoksnLLHVaJwdv2L9bjgo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl
                          rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Dec 2025 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:c1:b4:36:77:0d:3c:4c:53:49:59:20:cc:00:4e:d1:6e:35:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0
        Validity
            Not Before: Dec  8 08:00:33 2025 GMT
            Not After : Dec  9 10:26:33 2025 GMT
        Subject: CN=C2E0E8F5C2E9A141AEF0B1DE708929C93BA676A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:be:5a:db:71:9f:52:3a:18:af:0f:78:5e:
                    e2:06:3d:3d:ea:9e:17:28:57:9c:df:bd:4f:f4:cb:
                    39:13:f4:7b:b0:4d:41:d8:14:a7:02:ba:fe:d5:ed:
                    37:7e:0a:ee:0f:26:c9:b0:1a:18:37:99:b8:6e:56:
                    30:f5:49:49:98:29:96:79:47:3b:79:b6:bd:cc:6c:
                    d0:44:fb:4a:ae:c7:83:0a:e1:e7:b3:f5:bd:8b:94:
                    90:34:f9:25:2f:8c:5f:2a:c1:13:e2:41:3c:af:48:
                    70:39:5a:a8:96:18:08:38:e9:e8:fd:1c:00:fd:c1:
                    55:45:6f:4b:d5:b7:95:9c:bf:8c:59:42:fb:6e:34:
                    7b:b0:80:94:c6:8c:bd:c4:0a:5b:1f:40:bb:9a:1b:
                    e2:6a:55:30:d4:81:20:4f:84:e3:ca:02:0a:1d:71:
                    07:3b:03:b8:83:69:22:f0:3d:0e:78:b9:4c:26:20:
                    22:50:e4:60:ab:83:b8:ec:22:43:9a:d6:83:3b:40:
                    1e:99:bc:9f:8a:16:7e:e7:33:9a:42:44:7e:74:c7:
                    63:5d:ae:5c:83:7d:f8:98:79:ee:93:3c:4a:2d:c1:
                    5d:db:81:cf:44:0e:92:80:27:7c:fa:14:89:e3:42:
                    27:48:a3:d9:ad:2c:e0:8b:48:06:fe:c5:33:f4:71:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E0:E8:F5:C2:E9:A1:41:AE:F0:B1:DE:70:89:29:C9:3B:A6:76:A9
            X509v3 Authority Key Identifier:
                keyid:7C:A0:4A:87:EA:A3:58:34:E1:17:2C:5B:B9:6D:5D:B0:D0:B2:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23xpAP8pNyStTAATFkrMuJ8UgMsfEantMTStjQkAhGzB/0/7CA04A87EAA35834E1172C5BB96D5DB0D0B23DC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ac:56:96:81:c0:86:aa:9d:c9:82:c3:4d:60:90:9a:86:28:
         8b:73:e4:98:da:38:15:64:72:3a:83:c5:bf:44:65:b6:19:64:
         18:da:f9:a8:c6:29:9b:82:1c:ad:44:0b:b0:87:63:20:a7:55:
         b9:be:56:c7:59:40:d6:f0:21:ae:ab:54:9e:cc:d5:77:05:3a:
         24:ab:a3:d2:f0:88:93:b7:b4:91:05:fc:ad:42:89:06:4f:f0:
         f2:86:b1:0e:60:24:a2:35:f0:bb:56:96:28:fe:29:07:09:bd:
         10:27:5e:75:01:a4:d8:e4:d8:38:a0:35:8e:80:21:24:8c:2e:
         32:47:65:ab:24:e1:e2:63:d8:89:6c:ca:14:76:04:e2:99:20:
         10:2c:bf:d3:83:35:2b:68:77:8b:22:d0:3d:c4:6a:e4:e4:ca:
         85:02:80:bf:41:69:b1:b8:34:65:5d:d0:0e:fe:17:72:0a:b6:
         d8:71:b7:de:b2:19:35:09:5a:3c:76:c5:80:54:2a:4c:78:c9:
         47:cb:14:fb:f3:d3:69:1a:fa:4c:86:30:70:09:22:5b:60:86:
         ac:f6:8b:0d:a8:06:23:33:5a:36:bb:71:fb:53:51:7a:18:36:
         df:cd:cb:41:86:92:75:09:1e:48:c9:8f:4d:01:63:a0:d3:11:
         11:e2:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:21 2025 by rpki-client