This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
File:                     0673A8A85FD75BDF7374650633566E470F5D792A.mft (raw, json)
Hash identifier:          9TwmQ8dtYELxQuKaXd/OCg00xIqnURazemhh0RAeFjU=
Subject key identifier:   E9:DB:D7:FB:91:2E:D3:7E:31:60:C6:85:5D:10:B5:57:A7:5B:DA:F9
Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A
Certificate issuer:       /CN=0673A8A85FD75BDF7374650633566E470F5D792A
Certificate serial:       143072D6B0674F32C6AF0B46095FA9A4069EC32B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
Manifest number:          2D
Signing time:             Fri 05 Dec 2025 21:09:58 +0000
Manifest this update:     Fri 05 Dec 2025 21:04:58 +0000
Manifest next update:     Sun 07 Dec 2025 00:47:58 +0000
Files and hashes:         1: 3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (hash: Upe0YPCzHj4GTIrllXLlAxIfLTx07Sm8YoEmbCifd8I=)
                          2: 0673A8A85FD75BDF7374650633566E470F5D792A.crl (hash: GJv4BaVqt1gorzt8xFm2JIapJn4VJ5etNwatnMJ8w+s=)
                          3: 323830343a313631343a3a2f33322d3438203d3e20323633323636.roa (hash: H1ySD22gAkwKaQwiOrw+K7D23u1auOLZ3TSQPkOCeyw=)
                          4: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (hash: RF38Bjpp823JDXqLKsrAUYWB/3BPbPZ7MdCkTro+SRU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl
                          rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 00:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:72:d6:b0:67:4f:32:c6:af:0b:46:09:5f:a9:a4:06:9e:c3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A
        Validity
            Not Before: Dec  5 21:04:58 2025 GMT
            Not After : Dec  7 00:47:58 2025 GMT
        Subject: CN=E9DBD7FB912ED37E3160C6855D10B557A75BDAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:a2:9f:bd:68:33:1b:df:b6:de:3d:a8:d1:
                    b5:a8:86:89:2a:19:2a:79:55:2a:50:05:36:09:cf:
                    fd:0b:4a:c4:ce:31:70:d3:b1:44:76:81:a2:bc:0b:
                    c2:c4:73:1e:ad:18:63:19:05:90:39:38:9f:7b:72:
                    d0:33:7c:c6:6d:48:05:bd:f7:2b:44:5a:11:14:48:
                    45:74:ee:89:5e:e3:91:00:e0:aa:ba:48:31:a4:b0:
                    76:1f:6a:14:ea:41:6a:d0:d3:35:84:8b:43:c0:c3:
                    ee:36:26:cc:38:fa:eb:ec:c7:3f:45:fb:94:c8:ae:
                    64:e6:2f:90:77:06:4a:5e:90:ff:33:f7:fc:8f:00:
                    51:b9:50:93:48:47:5f:29:51:86:2e:f8:8e:ab:0c:
                    40:b6:bc:a7:6f:27:dc:5d:b7:4f:c0:72:e8:ed:ae:
                    9b:8b:5d:71:5b:0f:6f:34:07:67:fb:d4:e6:2d:bb:
                    64:4a:dd:0b:18:4f:c1:c2:dd:3a:04:0d:4c:5e:cd:
                    90:45:cd:32:d3:28:81:b3:3b:ce:c0:59:a5:fc:e0:
                    1b:c5:7d:c9:cb:fd:fb:cb:16:e4:f7:19:96:2a:7a:
                    0a:b2:65:0c:65:b0:42:09:be:43:6c:b1:92:36:7e:
                    75:e0:5e:e2:d0:0e:e7:3a:35:df:be:1e:0c:6e:f9:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DB:D7:FB:91:2E:D3:7E:31:60:C6:85:5D:10:B5:57:A7:5B:DA:F9
            X509v3 Authority Key Identifier:
                keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:fd:ac:db:c3:03:15:c3:4b:16:d6:57:fe:e6:83:2a:90:d1:
         81:ea:e0:7f:10:b4:e0:7b:8d:1c:48:30:99:41:30:51:73:6b:
         7a:46:08:45:8a:8b:2c:6e:c0:ce:ab:82:73:ee:71:30:6d:ff:
         39:2b:7b:d1:1e:31:8f:72:34:58:17:5a:be:bd:8e:f4:4c:74:
         d9:b0:3f:47:59:17:8f:fc:76:43:6d:39:e5:b1:29:ad:e3:0c:
         f7:0c:99:2e:8c:c9:cc:0a:9a:18:03:89:a5:a0:5f:7c:3f:22:
         44:7d:12:69:a5:63:37:a7:6a:65:a1:1c:1a:4c:b9:fd:1c:f4:
         0c:a1:ca:76:5a:ba:8b:b1:8f:32:68:18:2c:90:14:73:7c:06:
         73:5d:f0:70:40:14:fa:30:ca:ea:8d:5c:9e:64:27:1f:fd:44:
         86:a1:9b:15:bb:3b:c9:ab:7f:12:a9:12:7b:c6:e5:5c:d2:a0:
         ae:d4:4a:13:d8:46:d2:f1:b1:fb:63:d2:09:1c:0a:2e:23:bf:
         12:5d:6a:32:f1:d9:99:f4:7d:d0:d6:28:a6:be:a0:9b:c2:1f:
         e0:4b:22:53:a7:e6:42:1a:7f:f8:89:1c:3a:b1:bf:57:68:65:
         ef:e2:f0:e1:cd:82:d2:31:f4:84:bc:72:03:09:09:72:7b:c4:
         1a:d4:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:12 2025 by rpki-client