This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
File:                     2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json)
Hash identifier:          JlXXSbprYZW+nrXdG9XzoEwD3Kp+MmWnjiE6V9CWMq8=
Subject key identifier:   D5:5F:A8:B4:0D:3E:62:CA:92:9A:4B:1E:4B:E6:72:8A:B9:BF:7F:FC
Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA
Certificate issuer:       /CN=2987D670913962CF69181F73C94FE8C279E038DA
Certificate serial:       68AD38636B61D114F38A87C0DC26D0A4E30148BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
Manifest number:          49
Signing time:             Fri 05 Dec 2025 10:33:12 +0000
Manifest this update:     Fri 05 Dec 2025 10:28:12 +0000
Manifest next update:     Sat 06 Dec 2025 14:03:12 +0000
Files and hashes:         1: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: TqfQsoW4G6UZmESKT/v2SqzpoBlzbCKu6MvzNmtWCkM=)
                          2: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=)
                          3: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=)
                          4: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl
                          rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 14:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ad:38:63:6b:61:d1:14:f3:8a:87:c0:dc:26:d0:a4:e3:01:48:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA
        Validity
            Not Before: Dec  5 10:28:12 2025 GMT
            Not After : Dec  6 14:03:12 2025 GMT
        Subject: CN=D55FA8B40D3E62CA929A4B1E4BE6728AB9BF7FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:dd:56:2c:81:b9:35:a8:5f:11:20:ce:a1:
                    07:c3:24:4c:58:00:17:63:fd:d6:22:78:2c:f1:7a:
                    21:b2:53:02:16:97:26:22:9a:6f:de:69:cd:f3:2e:
                    30:7e:c9:85:3c:f1:b5:ab:a5:b7:35:de:5e:ca:ea:
                    87:78:2b:25:33:a8:ba:a1:38:ca:60:14:44:65:67:
                    c6:79:d4:a9:04:a3:6d:26:94:fa:f8:11:e3:e7:7c:
                    19:b7:84:35:87:05:13:c2:f2:b6:17:5f:1e:be:20:
                    2a:34:8c:22:ca:ef:b2:1a:ce:66:f9:88:08:84:ae:
                    08:e4:cb:e1:f6:dc:88:e9:05:d5:4b:c1:7d:0f:5a:
                    04:08:6b:da:4a:c2:53:e6:72:9f:2a:6f:f8:de:a8:
                    17:1d:a5:aa:79:9a:9d:98:24:e9:6a:53:ef:c1:92:
                    36:d6:7c:01:3f:c9:9f:df:33:a8:59:45:d3:db:cb:
                    03:5f:f5:96:fb:ec:b0:9b:a7:da:fa:f6:5a:6c:a5:
                    7a:24:da:21:f6:86:fd:59:37:d8:8f:5f:96:97:f8:
                    49:24:63:63:a7:1d:ff:30:91:c3:24:d2:3d:27:c1:
                    c0:92:b7:d8:b9:98:a9:3e:1a:2a:1c:ed:b4:71:25:
                    5f:96:e8:69:65:2b:12:ad:d2:14:42:86:eb:34:78:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:A8:B4:0D:3E:62:CA:92:9A:4B:1E:4B:E6:72:8A:B9:BF:7F:FC
            X509v3 Authority Key Identifier:
                keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:2e:8b:88:0b:21:81:8b:fc:af:a0:d3:d2:f9:88:59:54:
         f9:d2:81:0c:33:e5:b3:41:21:a7:83:16:14:d5:6f:fc:3e:7f:
         5b:bf:ff:d8:8b:6c:57:67:a0:12:83:4a:c3:f9:ab:3b:15:d1:
         cd:b2:27:e0:ef:49:7d:80:52:2b:1b:cd:f3:ed:ce:00:7d:a1:
         3d:45:89:07:1c:56:95:7d:57:fe:25:9e:0b:08:95:01:c8:9e:
         3c:1f:7b:6c:ed:34:ed:eb:53:da:35:cb:f7:3e:82:a3:68:52:
         07:0e:95:c8:5b:3b:c9:92:c3:41:aa:f5:e3:21:97:12:8f:5d:
         86:08:e1:53:e4:fb:8d:88:46:5b:63:eb:96:ad:38:a3:e5:f6:
         29:d8:16:58:c5:23:08:72:46:32:ee:d9:8b:49:87:44:1f:1f:
         ee:cf:44:2a:bb:15:76:d9:88:1b:b1:30:51:4a:d3:cd:c2:d9:
         50:34:0a:43:0b:df:7f:9d:28:60:fb:20:ec:34:40:e2:8f:f9:
         c6:6a:ab:59:5b:eb:88:e2:b5:27:14:7b:fe:fe:1e:71:6a:2c:
         08:d5:3d:20:91:5f:cd:b3:7a:59:7f:39:9f:9d:eb:af:76:f9:
         a6:66:d2:5e:69:86:fb:64:ce:eb:90:a4:87:42:16:09:01:36:
         3d:9e:02:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaK04Y2th0RTziofA3CbQpOMBSL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3
OUUwMzhEQTAeFw0yNTEyMDUxMDI4MTJaFw0yNTEyMDYxNDAzMTJaMDMxMTAvBgNV
BAMTKEQ1NUZBOEI0MEQzRTYyQ0E5MjlBNEIxRTRCRTY3MjhBQjlCRjdGRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFt1WLIG5NahfESDOoQfDJExY
ABdj/dYieCzxeiGyUwIWlyYimm/eac3zLjB+yYU88bWrpbc13l7K6od4KyUzqLqh
OMpgFERlZ8Z51KkEo20mlPr4EePnfBm3hDWHBRPC8rYXXx6+ICo0jCLK77Iazmb5
iAiErgjky+H23IjpBdVLwX0PWgQIa9pKwlPmcp8qb/jeqBcdpap5mp2YJOlqU+/B
kjbWfAE/yZ/fM6hZRdPbywNf9Zb77LCbp9r69lpspXok2iH2hv1ZN9iPX5aX+Ekk
Y2OnHf8wkcMk0j0nwcCSt9i5mKk+Gioc7bRxJV+W6GllKxKt0hRChus0eG59AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1V+otA0+YsqSmkseS+Zyirm/f/wwHwYDVR0j
BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj
eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2
OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y
OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV+Qui4gLIYGL/K+g09L5iFlU+dKBDDPls0Ehp4MWFNVv/D5/W7//2ItsV2eg
EoNKw/mrOxXRzbIn4O9JfYBSKxvN8+3OAH2hPUWJBxxWlX1X/iWeCwiVAciePB97
bO007etT2jXL9z6Co2hSBw6VyFs7yZLDQar14yGXEo9dhgjhU+T7jYhGW2Prlq04
o+X2KdgWWMUjCHJGMu7Zi0mHRB8f7s9EKrsVdtmIG7EwUUrTzcLZUDQKQwvff50o
YPsg7DRA4o/5xmqrWVvriOK1JxR7/v4ecWosCNU9IJFfzbN6WX85n53rr3b5pmbS
XmmG+2TO65Ckh0IWCQE2PZ4C1Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:09:16 2025 by rpki-client