This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
File:                     D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft (raw, json)
Hash identifier:          GK1rdTE3PuEm4YXVsFCsGxvIRgKwIABnIFuFrKZUbc8=
Subject key identifier:   D0:E8:B9:99:C7:FB:87:DF:AD:9E:52:BA:79:35:A9:D8:62:37:9E:04
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       2471659F29E6FFEE7FE2A0D6E8CE85352963482D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
Manifest number:          0347
Signing time:             Sat 06 Dec 2025 00:58:22 +0000
Manifest this update:     Sat 06 Dec 2025 00:53:22 +0000
Manifest next update:     Sun 07 Dec 2025 04:23:22 +0000
Files and hashes:         1: 323830343a3232343a3a2f33322d3434203d3e20323632373932.roa (hash: x+WyCqlEwX8gfhjdikGxKqHpljt23eetIQoyj3amLQw=)
                          2: D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl (hash: iVRLSfUwaowDyY/7ppHiOEMw9AeW35+/R9C76co0QxY=)
                          3: 3230312e37362e39362e302f32302d3234203d3e20323632373932.roa (hash: 6jn7uxbe86oSsunjBai+xrVNZ1hTpH/2BvHkGJEN/DI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:71:65:9f:29:e6:ff:ee:7f:e2:a0:d6:e8:ce:85:35:29:63:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Dec  6 00:53:22 2025 GMT
            Not After : Dec  7 04:23:22 2025 GMT
        Subject: CN=D0E8B999C7FB87DFAD9E52BA7935A9D862379E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:a7:6b:8b:b5:a7:a9:b5:1f:bb:54:27:d4:
                    9b:57:63:72:85:8c:52:ee:a5:62:0c:0d:82:d1:79:
                    ea:a2:85:d9:93:45:a6:2e:50:d4:b6:48:c4:f8:e3:
                    8b:f7:9b:a5:bb:02:70:9c:75:8b:20:24:bd:09:40:
                    f5:52:49:9d:45:f9:50:0b:ac:b4:dd:8e:3e:13:e3:
                    3b:d3:31:1c:cf:70:a7:e2:5a:93:e8:39:54:cf:99:
                    16:3b:7d:11:92:a0:7e:7f:a5:6f:b6:5e:c2:00:26:
                    f4:48:5f:5c:70:cd:6c:9d:3b:80:6a:59:4d:18:08:
                    a8:94:32:34:e4:a3:a2:2d:10:44:96:88:a2:8c:d1:
                    21:95:f8:9f:dd:7e:af:79:7f:d8:a6:cd:65:a5:79:
                    42:87:f4:d4:4e:df:0b:15:e0:59:ff:ff:64:c6:7e:
                    90:c2:45:8c:17:4c:f5:60:b6:48:83:07:ac:83:2e:
                    14:80:4b:c5:f7:fb:55:87:5b:d5:d6:96:aa:03:52:
                    29:af:93:70:b3:07:0a:f4:38:10:57:2e:02:58:ad:
                    7a:41:4c:48:24:73:cf:19:58:15:2b:2d:8b:a6:af:
                    1f:da:fe:fa:f5:a0:bf:fc:a3:21:04:10:a1:7f:d0:
                    96:f3:44:9d:78:27:49:2f:09:95:7b:f4:a1:42:b0:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:B9:99:C7:FB:87:DF:AD:9E:52:BA:79:35:A9:D8:62:37:9E:04
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:8f:a0:f1:3b:fb:5a:72:2e:3e:1a:78:36:9b:59:d0:9f:
         16:d1:bc:ee:ba:be:78:6b:89:c2:ce:0b:6d:89:c4:33:65:5f:
         42:ac:d8:56:8f:c2:8c:76:92:10:6f:6c:ac:24:05:2a:2a:55:
         64:c7:a3:37:88:6c:d9:19:86:19:fa:e2:74:9a:60:35:5d:d4:
         c6:98:0d:c0:0b:7d:63:ea:96:b0:3a:c0:7b:0a:a5:a2:2e:f2:
         6c:37:20:86:00:bc:fe:51:1a:4b:8f:4f:4d:0b:c3:ac:07:eb:
         90:fa:9e:c1:9b:c2:0a:57:93:17:25:c6:bb:9a:85:95:5f:cf:
         b1:cc:2e:12:ac:9b:b6:a3:c5:ae:3d:d7:f6:4d:16:a4:0c:0f:
         31:4c:85:0c:6d:21:ea:59:aa:f9:2c:f1:0f:bb:88:2f:59:b0:
         74:0b:f7:45:a4:eb:bb:40:00:c9:f0:df:5a:92:56:3f:0c:5e:
         d0:f8:fc:a3:e6:27:ec:03:7d:8e:ac:1c:8c:e2:dd:d4:80:5c:
         17:f9:78:c6:ce:21:fb:1d:6f:c1:0d:08:97:82:a5:c7:2d:a3:
         da:1f:1e:83:28:34:52:c0:6c:4d:8b:31:0a:19:72:d8:9a:5f:
         37:85:ee:b4:59:94:20:90:8c:96:2b:a8:2f:89:8d:c7:31:81:
         42:6d:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:12:12 2025 by rpki-client