This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
File:                     417A3C46308D4692153B994B72E51599225B4979.mft (raw, json)
Hash identifier:          yeoFl9rTCD6vPwPxiCliTP0TfPRoGJwUkb+DyAHcQRU=
Subject key identifier:   69:D5:66:A4:8B:A7:C0:4D:B8:03:08:7B:D0:2E:00:9E:7F:68:DB:8F
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Certificate issuer:       /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial:       73BE0AE41D01A071ED118F76EC82911568BE30B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
Manifest number:          09
Signing time:             Fri 05 Dec 2025 21:46:06 +0000
Manifest this update:     Fri 05 Dec 2025 21:41:06 +0000
Manifest next update:     Sun 07 Dec 2025 00:01:06 +0000
Files and hashes:         1: 417A3C46308D4692153B994B72E51599225B4979.crl (hash: fHcofdKocJNO2tB1I3+I4LmstoCC+GQzrLhghXch6wA=)
                          2: 323830343a363861303a3a2f33322d313238203d3e20323639373035.roa (hash: zhdfCF+qRAETjvfVQ6OraQ2dmSybxhayrJCM+QSnLjw=)
                          3: 3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa (hash: 67ErBlbOvFpg0hvnl1IkwlbuCRkTDA6ZZMEUfu5lUqE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
                          rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:be:0a:e4:1d:01:a0:71:ed:11:8f:76:ec:82:91:15:68:be:30:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
        Validity
            Not Before: Dec  5 21:41:06 2025 GMT
            Not After : Dec  7 00:01:06 2025 GMT
        Subject: CN=69D566A48BA7C04DB803087BD02E009E7F68DB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:fd:23:8b:63:bf:7e:e7:bd:d3:85:cf:67:
                    f2:c8:31:dd:00:e9:91:38:5a:b2:66:4b:1a:14:ab:
                    03:4d:f2:6a:fc:96:2e:c9:57:db:42:a9:e9:68:fb:
                    bb:e7:37:7a:61:e5:f4:54:4d:a0:aa:2f:66:04:1f:
                    41:ec:ba:63:d9:a2:ac:26:21:fa:a7:9c:19:98:f0:
                    01:c9:45:d1:22:4f:ca:1c:eb:8c:cc:ab:a6:8e:ab:
                    f5:59:52:76:cd:f3:59:7c:df:b2:b7:0a:45:65:59:
                    7f:c5:76:b7:31:d6:87:da:08:4f:ed:be:2b:55:e3:
                    f0:43:5c:21:fc:02:dc:c3:87:8f:51:de:9b:c9:c3:
                    05:f7:d6:f0:a2:93:ae:85:5b:00:0e:4a:82:f0:a8:
                    da:3b:4c:6d:a7:42:f6:de:3c:7f:8b:06:43:89:b6:
                    e9:1c:ae:01:a6:70:bf:36:eb:91:d2:4d:43:60:b7:
                    ff:b5:81:58:a8:93:90:7e:36:80:c4:1d:a5:25:ab:
                    d1:1a:01:0b:45:30:34:fd:29:bf:18:13:22:2a:5f:
                    47:a0:88:b2:ce:b5:1f:28:c4:d5:e0:81:a2:97:af:
                    4c:6f:6e:b0:42:b4:cf:c4:95:ac:ee:fa:b4:de:77:
                    e7:57:23:e6:fd:94:94:67:96:c0:f6:f2:5f:d2:8e:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:66:A4:8B:A7:C0:4D:B8:03:08:7B:D0:2E:00:9E:7F:68:DB:8F
            X509v3 Authority Key Identifier:
                keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:17:f3:bd:1d:aa:dd:44:bf:56:38:c0:d9:9f:fc:b9:ef:de:
         d3:39:8d:d2:a1:bb:eb:cd:7f:f9:f2:79:b6:ba:81:ae:61:1e:
         d9:f0:f7:c6:c5:08:3c:52:b2:1f:5d:1c:b4:aa:a3:97:41:54:
         18:27:a1:83:dc:ad:94:9c:71:0e:f7:77:46:22:1a:91:69:b8:
         d8:80:82:54:d7:b3:c5:72:ee:18:5f:a3:97:52:64:d3:a7:9b:
         ab:ed:e5:6d:8d:87:fa:a4:b5:7a:60:2e:5d:cc:34:33:d0:4b:
         c9:c4:74:9b:20:66:67:31:62:d7:53:41:81:84:7a:90:11:54:
         a4:63:fe:4f:94:aa:50:82:11:82:0a:31:cc:13:af:6a:81:06:
         7c:a9:88:29:a9:7e:f9:f4:e9:b1:ec:bf:2e:7f:c1:80:f6:e1:
         2a:f8:b6:be:e6:de:61:99:5a:d2:a5:88:b4:cc:ca:c6:d9:81:
         14:93:96:90:50:01:08:98:a3:e4:5c:06:52:a8:c9:1e:5d:c0:
         4f:2b:61:4f:6b:4b:22:46:fd:eb:dd:35:39:ef:7d:a5:74:25:
         ba:3a:a5:c1:c8:53:63:bd:68:c7:36:ab:f7:c7:6b:98:03:23:
         1e:c3:ce:55:af:cc:04:98:87:7f:bb:28:58:82:76:8f:20:03:
         5c:d7:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:08:05 2025 by rpki-client