This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft
File:                     8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft (raw, json)
Hash identifier:          LmIJ46PTtLrX8aIAkgef4QNFhbyjUupYac2Zwbr/LSk=
Subject key identifier:   20:40:10:12:81:47:14:63:62:AB:F6:F0:A9:F6:47:65:2A:36:85:74
Authority key identifier: 8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4
Certificate issuer:       /CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4
Certificate serial:       48E37E4A0CB3280108C7FD4B4DBA322627843D9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft
Manifest number:          25
Signing time:             Sat 06 Dec 2025 01:40:26 +0000
Manifest this update:     Sat 06 Dec 2025 01:35:26 +0000
Manifest next update:     Sun 07 Dec 2025 03:41:26 +0000
Files and hashes:         1: 8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl (hash: R2oNb2NoftLp/OqgsNfqLTPw1Fv7F6lYeaBba1oTkok=)
                          2: 323830343a6161383a3a2f33322d313238203d3e203532393033.roa (hash: JFLMhL+dK5DQlsxE/wPNHbPgo0R3J7/zNOp2ZaVabJs=)
                          3: 3137372e31312e3136382e302f32312d3332203d3e203532393033.roa (hash: wRPSEoYxS6wUcAEt8Sz8lDg1n4zmxGB7njj1uR05ZRs=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl
                          rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 03:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e3:7e:4a:0c:b3:28:01:08:c7:fd:4b:4d:ba:32:26:27:84:3d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3C4AF1B958317B34B3D4DCE850A479E946E6A4
        Validity
            Not Before: Dec  6 01:35:26 2025 GMT
            Not After : Dec  7 03:41:26 2025 GMT
        Subject: CN=204010128147146362ABF6F0A9F647652A368574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:ef:b2:e0:c2:3f:da:fa:e7:9f:d7:07:b2:
                    5e:f5:5f:ee:a2:41:2f:be:06:64:70:ba:9d:f0:b5:
                    f3:d8:38:3b:d9:88:44:63:ce:69:97:5e:d7:fe:6a:
                    b8:3a:51:9b:28:e8:36:a7:83:94:1a:fd:78:45:af:
                    3c:28:5c:65:d1:4a:13:93:4b:b1:a0:4f:a0:df:5d:
                    29:a6:cd:19:6a:f2:2f:cd:bd:1e:af:24:f7:98:09:
                    fb:71:2c:97:17:ae:83:dc:24:88:6d:a8:9c:67:a2:
                    1e:ec:e4:c4:28:47:a5:49:ac:78:1d:58:78:d7:76:
                    45:65:83:39:9b:c5:44:b3:b5:f8:12:80:53:74:c0:
                    46:ba:0f:52:c4:02:8b:d8:02:b5:a1:94:1b:cb:a3:
                    c5:53:0c:40:34:a4:19:a1:08:46:e6:27:06:4b:c7:
                    28:75:32:33:70:19:0a:89:95:3a:60:41:4d:3f:27:
                    2a:87:1f:e7:66:c9:45:b5:cd:33:ae:6b:67:54:95:
                    a8:1b:f0:e6:c6:6e:f6:18:93:de:b3:04:7c:0b:85:
                    8c:fe:26:52:c8:65:5b:0e:57:bb:cb:ae:37:b0:0b:
                    4b:ac:7e:81:d7:67:d6:51:17:d5:e7:86:58:a8:47:
                    9c:cd:70:0d:77:16:3f:78:c3:16:b5:c7:c4:a0:fa:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:40:10:12:81:47:14:63:62:AB:F6:F0:A9:F6:47:65:2A:36:85:74
            X509v3 Authority Key Identifier:
                keyid:8F:3C:4A:F1:B9:58:31:7B:34:B3:D4:DC:E8:50:A4:79:E9:46:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4A5d97posXL29CbuStvVv3XACfR2c7rXbdDTCXiCERqX/0/8F3C4AF1B958317B34B3D4DCE850A479E946E6A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:aa:06:14:0b:07:85:ac:a4:d9:72:4a:da:92:83:a9:aa:fb:
         94:36:3b:80:88:2b:e9:df:d6:4c:b1:34:ab:f3:50:6d:3f:96:
         7d:91:62:b5:ea:cd:73:23:48:05:02:42:92:1a:22:b7:fa:7a:
         aa:a9:38:be:58:a5:b7:25:bc:db:fb:2c:a9:0c:01:2b:b1:98:
         3d:57:b6:35:1d:63:5c:ba:cd:bb:30:2b:d3:bf:29:c4:d4:2c:
         e8:b6:af:52:99:9e:e3:55:7d:13:35:3d:46:60:ab:02:0b:fd:
         29:d4:42:5e:e5:2f:3a:e5:f5:8d:0c:cf:d0:83:9b:a2:3b:a5:
         5b:d9:6a:14:a4:4a:81:f0:fe:66:82:b0:08:29:44:27:04:70:
         ce:d2:43:19:0a:8b:15:0e:55:80:63:f9:1e:3a:45:7d:e7:c1:
         6c:b6:3a:08:b5:24:0c:b4:96:1c:03:18:50:1a:5b:66:cd:42:
         c6:9a:0e:8f:b5:49:da:66:10:96:fa:3b:4b:c9:b9:9e:7f:f4:
         ae:8c:35:41:33:6c:31:f9:89:03:95:71:69:31:22:be:c1:99:
         29:a8:08:2d:64:f0:58:ce:58:9d:a4:e1:b4:59:ea:bc:94:d8:
         25:d0:cb:ee:21:aa:bf:4c:b8:44:9d:58:d1:28:20:e4:75:98:
         cb:42:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:44 2025 by rpki-client