This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
File:                     CDD7619BD4F71987C247C8670D9064F291B3E36F.mft (raw, json)
Hash identifier:          IyekYr0eKnhBMgqWiyiNJIaHeUP+VNP6EcuKr+pO9FE=
Subject key identifier:   02:28:B8:B5:81:4E:64:D3:79:03:44:79:BA:6C:DA:69:75:DD:94:EB
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Certificate issuer:       /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial:       1454B8972912589034B349B1F1549A4B15D7D893
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
Manifest number:          82
Signing time:             Sat 06 Dec 2025 07:08:22 +0000
Manifest this update:     Sat 06 Dec 2025 07:03:22 +0000
Manifest next update:     Sun 07 Dec 2025 09:35:22 +0000
Files and hashes:         1: 323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa (hash: mKtBkzh6XG4sTlhoPWFLc5Pd7DgaZ6VR/rArRM9AyYs=)
                          2: 323830343a393537633a3a2f33332d3333203d3e20323734353138.roa (hash: PF5brDyVR1cmEjB6iFotsFSX3QnhYTrcdVyGy4WP2OY=)
                          3: 34352e362e3131392e302f32342d3234203d3e20323734353138.roa (hash: u49m43X6DK4A6wPfWeHoDfOnrEotXCa0jx043Jsqo6Y=)
                          4: 323830343a393537633a3a2f33322d3332203d3e20323734353138.roa (hash: g+bfErnC5Q3MshvfTRGFVmz3DrgAhMm+FVSXUSNdGrU=)
                          5: 323830343a393537633a633030303a3a2f33342d3334203d3e20323734353138.roa (hash: TVfyxkvcDydRQKBsatQmjUgY75O6YdchTD42+Bc59u4=)
                          6: 323830343a393537633a3a2f33342d3334203d3e20323734353138.roa (hash: Wc2TzbM6iSZdak9WvaJANTvB62PhLpJCW7LSAbW5tsA=)
                          7: 323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa (hash: L5n4ex8pE5gfPKDduuMFd0GMuURcKIBeSu7tDIDGTFY=)
                          8: CDD7619BD4F71987C247C8670D9064F291B3E36F.crl (hash: xiCpxiNHA1p05bOyhSuIlnSmE9/C7GrdnI8Q2eFGSuc=)
                          9: 323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa (hash: 36hHf/D4ukU8mAlHpeyW/xW6TzW1Wdrh0++mjKsFN7A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
                          rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 09:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:54:b8:97:29:12:58:90:34:b3:49:b1:f1:54:9a:4b:15:d7:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
        Validity
            Not Before: Dec  6 07:03:22 2025 GMT
            Not After : Dec  7 09:35:22 2025 GMT
        Subject: CN=0228B8B5814E64D379034479BA6CDA6975DD94EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:01:0f:da:e6:f5:b2:fc:0e:35:98:42:0d:
                    92:94:32:27:70:61:7a:18:93:2a:de:65:d9:07:b2:
                    00:97:4e:39:4f:df:c1:e9:3c:f1:fe:65:b9:db:3c:
                    5f:99:0a:3d:3f:7e:0c:d0:00:67:2b:47:a9:5c:57:
                    13:d7:4f:5e:48:f8:64:cb:b7:9e:7d:b5:83:2d:ce:
                    ca:b3:1e:db:7e:a9:40:35:5c:9f:69:1b:d1:5a:1c:
                    dd:92:2f:3c:7c:39:d7:59:59:c7:eb:cd:8f:d1:ae:
                    31:cd:5f:a2:2c:71:fa:d1:47:7f:ea:f1:48:4c:f8:
                    27:7e:d0:f8:a6:8c:8f:f8:04:ac:81:94:f1:f8:bd:
                    bd:89:8b:5b:ac:fc:fd:53:d5:56:bf:10:f4:27:c3:
                    e4:fc:91:27:e1:79:71:fc:34:ea:95:d3:5e:0f:b6:
                    f0:68:02:60:16:09:0c:01:70:2b:d7:09:4c:32:fc:
                    ce:b4:3c:1d:4a:ba:26:cc:bf:2c:a2:67:19:5d:f7:
                    d7:68:01:91:4e:6b:9e:c8:15:cf:ee:b5:dc:fa:e6:
                    86:49:08:08:d5:2b:ac:04:77:17:40:69:a9:19:47:
                    9b:58:12:eb:ee:99:d5:3c:1c:4e:c2:97:92:6b:25:
                    34:81:4b:97:44:81:e7:64:3c:f6:ba:48:77:37:ae:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:B8:B5:81:4E:64:D3:79:03:44:79:BA:6C:DA:69:75:DD:94:EB
            X509v3 Authority Key Identifier:
                keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:97:fd:62:93:d9:6d:47:3c:8b:b3:60:70:3f:8e:2d:a4:99:
         ec:72:09:92:c0:f9:bc:97:f9:90:88:1c:73:d9:0c:94:f1:a8:
         9b:18:a1:45:ec:f1:25:01:dc:67:71:00:20:31:d9:15:76:9c:
         7d:97:17:bc:89:30:70:a7:b3:d3:23:cf:06:99:22:81:a0:a6:
         55:49:fd:eb:de:29:57:57:37:02:da:a2:cd:b6:62:77:4c:bb:
         a7:dc:be:25:c7:93:7d:54:77:cc:a6:95:df:6c:65:5d:dd:71:
         8e:64:d6:df:47:5e:b1:bb:73:93:13:66:59:53:8e:03:31:d8:
         35:d3:37:dd:c9:ac:7a:5b:ad:1c:9a:05:eb:b4:17:02:41:ea:
         00:05:b4:89:60:82:68:e9:73:54:43:fe:3b:38:9e:e9:d0:de:
         19:88:b9:4c:3b:db:85:4f:94:06:36:0a:4f:ee:e4:70:5e:0f:
         cd:9e:84:6c:a4:d3:8b:b2:9e:3e:40:c1:ba:0b:a2:f7:60:1f:
         bf:c8:8b:d0:e1:a5:d1:31:4d:51:78:4d:3f:b0:15:38:21:76:
         a0:ae:b6:dd:72:3c:63:b8:b4:67:87:5a:e5:53:97:61:1d:d7:
         c0:9e:a1:dc:35:66:3e:f9:df:9d:91:3a:93:0d:a6:6a:31:f6:
         5b:15:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:12 2025 by rpki-client