This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft
File:                     E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft (raw, json)
Hash identifier:          YbGlJJWDU8CwLcJZr8hPdvceWDc6hgtUJZ6pJjUMvrE=
Subject key identifier:   69:3F:A5:C9:85:B0:4A:0C:CA:D1:BD:C7:2E:A4:F8:1B:43:33:FF:5A
Authority key identifier: E4:7A:F0:81:7A:9B:89:E1:45:57:88:81:9C:60:FC:FF:44:BA:6C:74
Certificate issuer:       /CN=E47AF0817A9B89E1455788819C60FCFF44BA6C74
Certificate serial:       509CF36CE699840C3F915E778BA11B3275900BFA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47AF0817A9B89E1455788819C60FCFF44BA6C74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft
Manifest number:          013A
Signing time:             Fri 05 Dec 2025 18:38:00 +0000
Manifest this update:     Fri 05 Dec 2025 18:33:00 +0000
Manifest next update:     Sat 06 Dec 2025 21:38:00 +0000
Files and hashes:         1: 323830343a386662343a3a2f33322d3438203d3e20323733353036.roa (hash: c1Na6691Hmvfjk4VXK1rsoaJiNDkg6n3Q+OCF3ozeaQ=)
                          2: E47AF0817A9B89E1455788819C60FCFF44BA6C74.crl (hash: DWuBI8laoMfc3Hcb/P5heBkzi5xULB+iVnTNgWSP6lM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.crl
                          rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47AF0817A9B89E1455788819C60FCFF44BA6C74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 21:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:f3:6c:e6:99:84:0c:3f:91:5e:77:8b:a1:1b:32:75:90:0b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47AF0817A9B89E1455788819C60FCFF44BA6C74
        Validity
            Not Before: Dec  5 18:33:00 2025 GMT
            Not After : Dec  6 21:38:00 2025 GMT
        Subject: CN=693FA5C985B04A0CCAD1BDC72EA4F81B4333FF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:8d:be:75:9d:25:40:46:0f:b8:78:90:51:
                    71:e4:66:f9:98:c8:2a:ea:e8:03:3e:9d:8e:fb:05:
                    b2:2f:d3:a9:19:b4:e7:93:be:ae:bd:85:f0:cf:7c:
                    9a:5b:11:10:c5:2d:05:73:97:11:78:43:71:b0:fa:
                    dc:1d:87:90:15:9a:71:aa:44:9d:89:39:d1:fb:47:
                    f0:cd:84:3f:8a:39:63:1a:a0:96:19:67:3a:26:ac:
                    2e:05:b6:16:e9:eb:1c:29:eb:be:af:ff:85:17:73:
                    b2:65:3d:08:ea:cc:77:48:b9:4a:8c:ff:30:af:08:
                    0f:37:7b:55:36:c0:04:17:9e:09:85:1a:19:53:0e:
                    c2:a3:f6:da:89:a5:b3:f1:57:de:ec:b6:0e:05:d6:
                    ea:71:3d:c8:d1:7d:25:08:b3:bd:ea:fb:4b:77:cb:
                    87:6e:f9:9d:b0:13:b9:af:c1:00:2e:06:08:a4:6a:
                    71:d3:f5:b9:94:b7:a0:e7:80:74:27:db:50:f4:63:
                    d4:6e:d8:5c:ed:1a:fa:5f:03:c9:29:2a:fd:24:05:
                    22:a2:52:c8:31:0c:35:bf:6f:52:27:cc:6e:30:0e:
                    af:be:7a:37:4e:52:5b:5d:09:6a:99:e8:f0:c5:42:
                    f7:63:2a:ed:39:49:b3:b9:33:81:8f:0f:5d:35:46:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3F:A5:C9:85:B0:4A:0C:CA:D1:BD:C7:2E:A4:F8:1B:43:33:FF:5A
            X509v3 Authority Key Identifier:
                keyid:E4:7A:F0:81:7A:9B:89:E1:45:57:88:81:9C:60:FC:FF:44:BA:6C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47AF0817A9B89E1455788819C60FCFF44BA6C74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QdjF4Xc5pDBBo8Q5uJNmEzXpFDJrUVQManKZjF3tcdd/0/E47AF0817A9B89E1455788819C60FCFF44BA6C74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:d9:6e:d2:85:16:c3:7e:1e:d9:b9:18:57:d5:76:0e:20:
         6d:d4:4f:91:77:67:ab:69:bf:1e:e0:87:46:7f:0c:76:61:4b:
         9f:72:55:89:b0:35:7b:20:01:a5:dd:5f:de:4b:f2:d6:2c:48:
         9e:46:46:e9:20:b2:fa:fb:ec:7e:31:5e:2b:54:ad:17:cc:24:
         d0:14:e3:55:63:fe:c3:94:66:82:d1:78:b8:16:cb:b7:56:d3:
         26:5d:e0:54:1e:db:d2:ed:02:c4:ab:dd:5b:fb:37:f0:b1:a6:
         3e:21:22:ab:5c:0f:b9:8b:65:9e:38:75:09:01:f9:6a:66:d8:
         22:9e:67:95:05:a7:c9:80:ea:43:5f:01:51:2c:51:7d:bf:4e:
         34:f5:d6:2d:1d:94:09:81:5f:a0:db:ae:a5:a0:3c:80:f8:a1:
         9d:86:ee:e4:8d:8a:6b:7e:92:a4:55:d2:e3:35:19:8e:8d:9d:
         1e:dc:3d:e4:9d:d5:d2:ce:33:f2:82:62:8c:03:60:5b:d3:19:
         89:3b:9f:50:9b:bb:5d:a4:f2:14:ae:ce:96:3a:8a:d7:d3:06:
         16:44:ed:82:8f:f1:0f:cf:dc:13:bd:93:9a:26:f5:f4:ed:6b:
         7e:c4:15:5d:2d:85:d3:ed:4a:b0:4e:29:1a:00:f7:92:8d:2b:
         77:aa:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:15:42 2025 by rpki-client