This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
File:                     9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json)
Hash identifier:          OMacnXCHG1jIbaMT3ackWDIOyJ6l6svyie+LiHPc/DE=
Subject key identifier:   75:D4:B2:53:F2:E3:FC:E4:DF:99:51:D5:46:0D:89:5D:FF:6D:8A:63
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Certificate issuer:       /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial:       1103149E0EF81733DDDE25C3DA5B8314753DB3BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
Manifest number:          01D7
Signing time:             Sat 06 Dec 2025 01:54:08 +0000
Manifest this update:     Sat 06 Dec 2025 01:49:08 +0000
Manifest next update:     Sun 07 Dec 2025 02:02:08 +0000
Files and hashes:         1: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: hr9aHaSlzohKRVEEm2gBjpgElTbFOAbpnDGgRTsUd4Y=)
                          2: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=)
                          3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
                          rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:03:14:9e:0e:f8:17:33:dd:de:25:c3:da:5b:83:14:75:3d:b3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
        Validity
            Not Before: Dec  6 01:49:08 2025 GMT
            Not After : Dec  7 02:02:08 2025 GMT
        Subject: CN=75D4B253F2E3FCE4DF9951D5460D895DFF6D8A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:cb:31:c5:00:45:d4:6c:67:57:d5:97:50:
                    c5:e9:42:84:88:14:5a:3c:c6:a7:97:ab:fb:26:cb:
                    73:bb:fb:27:23:e2:97:2d:d3:1c:90:a8:12:8b:4c:
                    2a:6f:ce:b5:92:c2:ee:d3:24:a4:82:b0:e3:e2:b9:
                    b0:a7:e1:0e:df:f7:d8:7c:e9:4a:a5:f7:36:84:60:
                    74:52:3b:fa:29:bf:b4:c4:41:af:c1:be:38:1d:6c:
                    54:1b:f5:38:a7:c2:1c:17:9c:bd:ea:90:9f:1d:26:
                    5b:07:ed:00:85:2d:42:8b:77:df:b9:01:6d:97:ba:
                    8e:46:5c:86:e3:3d:34:eb:f9:bb:77:41:f2:48:d0:
                    c6:10:51:19:74:fe:99:ac:af:b5:10:b9:da:b6:40:
                    6e:c8:0a:2a:0d:0a:59:a4:1b:ef:cb:2a:6d:26:67:
                    aa:38:41:0f:5f:8f:55:06:5b:3b:14:96:5e:a2:a2:
                    39:de:6d:5a:52:a1:62:7b:a9:98:56:8b:d1:ce:15:
                    8f:62:b1:aa:69:54:e1:59:fe:75:2a:6c:c7:06:f2:
                    8e:f1:ba:9a:25:ef:99:29:bf:58:a3:69:5a:da:f2:
                    dd:35:ed:c9:34:5a:0f:95:c5:d5:08:74:a9:48:28:
                    84:82:3f:1b:60:02:fb:dd:16:9f:1b:66:61:68:3d:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:B2:53:F2:E3:FC:E4:DF:99:51:D5:46:0D:89:5D:FF:6D:8A:63
            X509v3 Authority Key Identifier:
                keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:77:9d:6c:0c:1f:e2:bb:7e:eb:f6:b6:6d:7a:42:2b:f2:
         00:06:59:34:e6:61:f5:1f:52:b4:c4:9b:9e:ab:ae:8c:01:14:
         74:69:df:b4:6e:9d:67:28:3f:30:b7:26:ec:2c:9d:72:54:c7:
         f5:e5:5f:a8:75:4c:78:57:2d:fd:ea:6e:49:95:ab:d8:6b:d9:
         7e:c0:cf:5f:7e:f7:69:a0:e9:fa:63:27:79:df:ff:ce:b4:7c:
         ff:d1:18:56:bd:66:91:9b:d8:40:c0:88:1c:85:b0:c9:95:83:
         4a:94:7a:df:b0:76:79:6f:d5:63:50:42:c0:3d:2d:a4:4e:d4:
         1f:fc:3d:c2:9f:59:6a:4f:c8:51:1d:78:8f:f4:48:a2:cc:d8:
         b3:20:7a:9c:5a:42:e0:eb:33:83:51:d7:2f:01:80:26:60:8a:
         39:af:bd:37:09:19:64:75:a2:fc:ea:56:86:da:df:f6:2e:36:
         1f:c9:3b:5d:96:cb:58:ff:0b:09:d9:65:db:24:84:4e:8c:23:
         78:55:26:a5:78:d3:e9:01:fb:8c:56:d5:83:9c:b1:05:59:23:
         37:d6:09:65:a5:4f:5f:ca:6f:ed:31:29:d2:74:b9:9e:a1:79:
         50:e4:29:fd:71:74:a3:5e:0c:ad:54:89:2f:d1:59:3f:e5:83:
         9d:df:23:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:43:52 2025 by rpki-client