This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
File:                     8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json)
Hash identifier:          48f8PadhHaeQSTNzhVXRnEBABlBi6jLmiOzDmAKnL98=
Subject key identifier:   F7:CD:AF:D2:AB:5E:47:EA:D3:9A:58:D4:4C:33:4D:34:82:9A:93:A3
Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
Certificate issuer:       /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Certificate serial:       495AD58F77147023DCBD3D0A4BF75B64F9F7EBD0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
Manifest number:          02AD
Signing time:             Sat 06 Dec 2025 00:24:44 +0000
Manifest this update:     Sat 06 Dec 2025 00:19:44 +0000
Manifest next update:     Sun 07 Dec 2025 03:48:44 +0000
Files and hashes:         1: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: zffSsTOsfK4a1iQFysErs6utZoTjASAoBkMnTmu/hCc=)
                          2: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=)
                          3: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=)
                          4: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: YR3iwTv8fmQASNA9FOgQAa+ECLErkEz/btJcdJNxQ2k=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
                          rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:d5:8f:77:14:70:23:dc:bd:3d:0a:4b:f7:5b:64:f9:f7:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
        Validity
            Not Before: Dec  6 00:19:44 2025 GMT
            Not After : Dec  7 03:48:44 2025 GMT
        Subject: CN=F7CDAFD2AB5E47EAD39A58D44C334D34829A93A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:29:3a:13:67:84:30:49:72:9d:e6:ec:d7:
                    cc:41:ee:4b:75:da:d1:7c:16:ff:28:d1:43:ca:18:
                    57:42:26:57:77:58:95:ce:54:fc:92:4e:b0:88:fc:
                    58:03:75:93:8e:38:4f:97:15:5e:37:8c:51:d7:dc:
                    a8:d4:f0:de:2b:f5:84:fe:68:fd:51:6d:3d:92:b5:
                    5f:91:17:17:0f:16:63:70:35:7a:dc:02:ff:76:46:
                    14:ca:2e:16:fe:75:b6:6f:5f:a2:e6:ef:19:e3:73:
                    ed:df:c5:9e:7a:d1:3d:93:6f:c5:31:1b:e5:27:c5:
                    fe:b3:dc:36:bc:e2:6f:f7:25:81:eb:26:82:61:56:
                    ed:3c:49:32:98:8f:7f:71:b2:75:37:f3:27:19:3b:
                    33:d2:11:9e:14:78:ff:c3:9b:3d:14:53:2e:4b:ae:
                    03:aa:1a:f2:af:9c:22:e2:85:de:ff:a8:da:42:f0:
                    fe:3b:f3:92:6e:4a:7c:f8:35:96:da:05:24:1b:73:
                    f5:68:c7:47:d5:69:5a:d5:01:32:1f:94:04:35:69:
                    95:fc:3c:17:87:03:f8:96:f3:7a:10:91:58:e2:1d:
                    fd:29:b1:6b:07:87:0a:a2:ba:fc:be:1f:5e:bf:f9:
                    cd:d4:d1:c0:45:6a:b8:71:9d:b4:2b:f2:69:a9:5e:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:AF:D2:AB:5E:47:EA:D3:9A:58:D4:4C:33:4D:34:82:9A:93:A3
            X509v3 Authority Key Identifier:
                keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:05:18:34:e8:24:50:24:b6:a6:06:35:67:71:81:56:ab:
         36:33:29:d4:ff:18:d9:0d:cc:7f:65:2f:1b:00:a1:da:96:b7:
         a7:dd:f8:d7:2a:9e:25:aa:df:2e:34:26:81:44:9d:8b:63:e1:
         21:07:94:a3:76:2c:5b:07:0a:7b:f2:be:93:d3:a3:c1:d7:e0:
         3d:58:86:4b:1c:31:ea:41:98:4d:7b:0b:bd:d5:1c:4e:55:2c:
         1c:35:32:12:7d:eb:39:fc:c8:fc:13:2c:90:c8:71:fe:09:40:
         e7:8e:29:0b:da:c7:86:68:82:83:d2:9c:89:4d:ab:dd:0e:f9:
         04:45:72:80:0b:00:6a:70:75:b4:c8:3d:6d:d1:90:21:e9:6c:
         2d:5d:60:19:93:3b:07:79:8a:10:d7:f1:37:8a:b3:03:04:6e:
         67:92:6c:02:ba:f0:ba:ba:24:5c:88:29:75:d4:ba:e5:3e:da:
         59:cc:6a:86:1c:d9:4c:cb:02:e7:fd:39:2c:21:7c:43:3a:54:
         ea:aa:6f:81:1c:e4:b2:d6:cd:45:33:f9:2c:51:34:b1:ef:f7:
         65:44:e7:2d:10:c0:ca:22:4e:62:1c:fd:b8:21:83:03:20:7f:
         e4:ba:55:9a:4c:51:11:6c:62:3e:c6:cf:2e:48:a8:9f:4d:53:
         2f:45:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:14:49 2025 by rpki-client