This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
File:                     C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft (raw, json)
Hash identifier:          WjtROLwiOxyg1HGjSmaY9WdiY/v947ofwADiXDwnPsk=
Subject key identifier:   5E:7F:BE:BE:D8:42:5B:F7:8A:F0:51:A0:24:B5:52:25:E1:77:D9:36
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       6F39B135D3B6494EE9F35D9CCC8DA1C287A54519
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
Manifest number:          0123
Signing time:             Sat 06 Dec 2025 06:56:15 +0000
Manifest this update:     Sat 06 Dec 2025 06:51:15 +0000
Manifest next update:     Sun 07 Dec 2025 08:52:15 +0000
Files and hashes:         1: C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl (hash: wsp9WPAAgmjDvbmmtVXZbEg9yw5yT0gZqtSDI/MfmD4=)
                          2: 323830343a313261303a3a2f33322d3333203d3e203631393030.roa (hash: U7RItReMfKewOUXklbfelEJE+adYzYclyawoMMfWRuE=)
                          3: 3137372e37342e3137322e302f32332d3234203d3e203631393030.roa (hash: /cITs4D7jpw1Apmb8P2sFevdk3GRZ2uhsKeWkkIPl5g=)
                          4: 323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa (hash: 3GInbSSbnhTyYbltgo5T1Q4DuldcQ5dGmKK7gsIjrQs=)
                          5: 323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa (hash: qbTerdVOweKu2T7lR7MsAbYl1WLOWXzIZ0EWLtVL0+c=)
                          6: 323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa (hash: qPxS8x6obJI0ZNlwRV/gKstLLt3p9mVmsKnpqu9ybpI=)
                          7: 3133382e39372e33342e302f32332d3234203d3e203631393030.roa (hash: oRCjP+WvhxqZmHdwRjeZheNaHKRpYzTn5UoaxQCTRpM=)
                          8: 3137372e37342e3137342e302f32332d3234203d3e203631393030.roa (hash: cT8zdoihwPnkJHDD/5LEp0CcnP9CEnLjfsE7JvK23yE=)
                          9: 3137302e3234372e362e302f32332d3234203d3e203631393030.roa (hash: UqT87zgHLxCBAbQzE96j8R5vAIQLYDnHidmwJ28TMXs=)
                          10: 3133382e39372e33322e302f32332d3234203d3e203631393030.roa (hash: apRBcttIWJ2VFAQs4lUSI/qEwO5wrTTCDU3HHly6CWE=)
                          11: 3139312e3234332e31302e302f32332d3234203d3e203631393030.roa (hash: JcD7rpZmDgMsB6AidfIi4KfjDblD7rRUOsxpZtF5Gyk=)
                          12: 3139312e3234332e382e302f32332d3234203d3e203631393030.roa (hash: 7Rw3/5hW56yhfkcu9yjj0B7nxhVRoFeAUvYpyHTpCz4=)
                          13: 3137302e3234372e342e302f32332d3234203d3e203631393030.roa (hash: LBQOuppiNht6pt4E30+HBpOhfEcmgIqi6cTLJqs62WU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:39:b1:35:d3:b6:49:4e:e9:f3:5d:9c:cc:8d:a1:c2:87:a5:45:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: Dec  6 06:51:15 2025 GMT
            Not After : Dec  7 08:52:15 2025 GMT
        Subject: CN=5E7FBEBED8425BF78AF051A024B55225E177D936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:ef:e5:f0:9e:fe:42:c5:13:14:80:6e:1d:
                    70:3e:5d:13:d8:4b:c0:7c:20:e9:39:90:e4:c0:1e:
                    fa:84:b6:6b:c8:94:fc:bd:4f:13:ae:7d:b8:9f:d6:
                    47:f0:bf:e9:ce:df:da:3a:12:d0:54:65:27:b8:b1:
                    40:4a:b0:10:9a:84:e5:a3:a9:60:0f:42:60:2a:05:
                    29:fd:43:bd:a7:e6:5c:00:63:1a:3d:43:95:93:05:
                    6f:ca:b2:8d:fe:ba:5a:3f:3f:27:c7:1f:66:81:c9:
                    44:da:e0:80:2d:c5:26:2a:86:00:a3:10:1b:19:f6:
                    38:4e:bf:69:8c:68:24:d1:a8:77:15:83:cd:b6:c4:
                    b4:1d:64:5b:bf:7c:e1:b1:39:d5:f5:d3:74:2a:bc:
                    d0:82:9e:fc:ca:bf:cb:2e:13:f4:fb:f2:2a:cd:e4:
                    e7:e8:55:87:a2:8f:3c:42:6c:b5:8f:f4:e1:11:38:
                    a9:54:37:4b:46:1e:e4:4b:b4:05:7d:77:58:25:1d:
                    2d:a6:c1:9f:cb:e9:1a:77:1d:91:6f:59:b9:de:d2:
                    c9:69:21:b8:a7:f9:36:14:6b:a0:50:1b:90:40:eb:
                    92:4f:8f:62:35:55:34:44:5c:c2:a8:71:1b:4e:82:
                    3a:ef:21:ba:e8:33:73:05:3b:f2:79:e7:1e:6c:31:
                    c7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:BE:BE:D8:42:5B:F7:8A:F0:51:A0:24:B5:52:25:E1:77:D9:36
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:84:4e:1e:b7:6f:d9:f8:82:be:8a:22:eb:11:59:05:dd:
         d3:cb:c3:fa:66:57:0f:c5:ce:f2:e3:5f:de:eb:59:48:00:4b:
         ae:4b:1b:d7:25:08:57:03:32:7c:1d:4d:c4:b0:c4:07:8d:e2:
         24:bf:90:fc:c1:70:dc:c3:c3:a1:c8:31:da:a9:65:84:6e:40:
         58:ee:c7:54:5b:02:98:78:61:de:06:76:ef:e2:f9:92:a1:0e:
         ae:2c:4f:8c:50:6b:a0:ae:0d:fe:7b:61:ad:66:cc:7e:a9:d6:
         9e:3c:24:80:b3:9b:69:6e:b0:56:10:92:69:95:ba:ea:ec:2f:
         00:95:ff:02:ed:57:ba:f5:5a:88:91:c3:55:bf:69:f3:80:40:
         c6:c7:66:7a:73:9e:f6:bb:76:49:3f:78:5d:9e:7b:7f:6b:75:
         a6:8a:40:85:21:6d:8f:a3:d5:76:64:69:30:79:82:ea:52:4c:
         82:82:5d:0d:67:ef:83:8c:95:6f:2a:3e:ae:25:68:cf:f8:8f:
         64:e6:d6:44:80:cc:f4:42:3d:7e:74:10:19:d6:28:a6:bb:cb:
         02:c7:ed:27:76:de:c9:3f:45:2e:8f:e0:a0:77:f2:74:86:57:
         e2:76:aa:41:88:49:0a:11:f9:b3:09:9a:8f:e1:04:81:40:d7:
         67:50:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:16:24 2025 by rpki-client