This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
File:                     D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft (raw, json)
Hash identifier:          4Mb0WCmzAih8Bm2gPZmubRRmfOFckZMDG3EcWBK2wIc=
Subject key identifier:   B8:FA:7A:8A:16:D0:53:CF:F0:12:B8:44:B6:59:CF:99:B4:90:81:28
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       3E7984D45C30CC6D549A488251081FDB2057B536
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
Manifest number:          02DE
Signing time:             Wed 22 Oct 2025 19:20:20 +0000
Manifest this update:     Wed 22 Oct 2025 19:15:20 +0000
Manifest next update:     Thu 23 Oct 2025 20:00:20 +0000
Files and hashes:         1: 323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (hash: 19YYElrSUoCNGtrtG01beRgcwWRs9m7ywAl7Jl+phzY=)
                          2: 3133382e3235352e3232382e302f32342d3234203d3e20323633393935.roa (hash: 1EPG9j2IFN7RdrK+OBQg1vA1qlOU4uWKrh0eWi6f4z0=)
                          3: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (hash: l+1vkNbJX9FznsoCq04IQdf645yMO+XY7naPC5k2nAc=)
                          4: D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl (hash: exKNWIXeDxwuirPUCuBcmydRmgnT/niJWJTaeXbEitQ=)
                          5: 323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (hash: 7GQpIb7eN0gEhjMCm8bJJo8/053mAvBMK769o/t1ImA=)
                          6: 3133382e3235352e3233312e302f32342d3234203d3e20323633393935.roa (hash: jjJjT28GywBLjygGVXWL4ZlLuMuD46UXs8EBIkhnFL8=)
                          7: 3133382e3235352e3233302e302f32342d3234203d3e20323633393935.roa (hash: QsO1DL8JBb7HVDv32XyDE5mIRhLWooOEuQSlsQhv0nA=)
                          8: 323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (hash: qIqXFF+EFAPY9WZVD0mrTRtSZpbvEDWHAOrmv/e83ZA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:79:84:d4:5c:30:cc:6d:54:9a:48:82:51:08:1f:db:20:57:b5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Oct 22 19:15:20 2025 GMT
            Not After : Oct 23 20:00:20 2025 GMT
        Subject: CN=B8FA7A8A16D053CFF012B844B659CF99B4908128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:fe:3b:b0:68:f2:4d:16:4c:27:85:ab:a4:
                    f2:0f:c5:ca:d2:21:05:85:81:f1:49:af:02:df:d3:
                    9b:a6:7b:b6:84:5e:b2:8a:0d:95:8a:55:ce:62:85:
                    60:d3:1e:61:a3:c0:db:77:1c:a4:3d:16:45:c5:c7:
                    ef:ed:78:37:14:3f:79:b0:60:4f:27:ac:41:14:81:
                    3b:50:32:78:15:13:0a:c7:7f:32:8d:34:f3:e2:9c:
                    87:f9:4f:87:b3:97:c7:41:22:f0:42:de:3d:4a:91:
                    4e:59:9d:03:8f:20:47:d6:ce:45:f4:5f:39:fb:34:
                    fb:dd:c8:0c:7c:1b:90:a1:9a:07:e4:75:b7:f2:c0:
                    41:a4:42:f4:bc:b7:ef:6b:f4:cf:92:98:c1:43:72:
                    f5:63:68:6a:ab:e4:f0:05:c8:62:e0:c4:99:f5:42:
                    3b:52:c8:18:17:3b:c4:ad:34:97:a8:86:2f:5b:af:
                    6c:ca:95:27:19:c9:f8:9f:fd:bb:13:e3:7d:7d:6c:
                    23:d2:0a:e4:7d:42:3a:22:25:6a:7b:f5:8e:4c:bc:
                    f5:0a:f7:af:f1:30:c9:f9:8e:bc:37:db:d6:91:f1:
                    0e:cc:ab:78:bb:c3:c6:4b:67:38:dc:e1:05:d4:33:
                    38:38:a8:92:4c:41:cb:79:35:a4:7a:43:68:25:c6:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:7A:8A:16:D0:53:CF:F0:12:B8:44:B6:59:CF:99:B4:90:81:28
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:3a:41:b3:15:55:52:c5:07:46:9c:80:ec:5c:25:11:b8:
         4c:c8:4f:32:61:0a:e9:39:b8:a8:c9:af:75:a1:e6:13:da:52:
         bb:f7:93:5e:d5:d9:9c:18:01:34:b9:72:3e:7b:ab:1d:9e:bc:
         2e:c8:04:a8:6a:27:fe:b0:6a:ed:59:8a:60:f0:17:b2:62:65:
         5d:61:ee:36:1b:7e:54:29:8c:ed:44:af:d2:c6:d4:49:0b:05:
         17:57:ba:03:4d:aa:03:d0:74:b4:7d:bd:35:01:c6:50:82:17:
         26:69:5e:6e:f8:7b:25:37:bc:85:26:21:05:ec:3e:bd:ad:86:
         e3:9d:36:88:92:ed:2f:13:5b:2a:f7:2a:f9:4d:dc:3b:26:c0:
         86:2a:e1:96:34:6a:04:5c:a4:e8:7e:d3:61:9f:95:fb:fb:33:
         cf:98:9b:71:1d:c4:a4:28:1a:7a:e5:e7:4b:74:60:7a:28:1b:
         86:e7:43:bc:86:36:4b:3c:7c:43:90:0a:1b:31:69:79:69:ee:
         2d:9a:c3:b0:ec:3f:9e:3f:fc:11:07:5d:aa:b5:9a:32:48:fa:
         76:ba:1c:aa:05:dd:82:6e:d9:fb:71:62:5b:e0:ad:b5:d1:5c:
         27:a9:31:53:b3:2b:d3:bf:fa:53:b5:d9:f4:39:cd:9d:7b:40:
         d2:49:bb:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPnmE1FwwzG1UmkiCUQgf2yBXtTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNDQjA1MTk2NDdGOUQzQzE0NUUzMUU4MUU3NzlFQTlD
M0QyQzI3NDAeFw0yNTEwMjIxOTE1MjBaFw0yNTEwMjMyMDAwMjBaMDMxMTAvBgNV
BAMTKEI4RkE3QThBMTZEMDUzQ0ZGMDEyQjg0NEI2NTlDRjk5QjQ5MDgxMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSHf47sGjyTRZMJ4WrpPIPxcrS
IQWFgfFJrwLf05ume7aEXrKKDZWKVc5ihWDTHmGjwNt3HKQ9FkXFx+/teDcUP3mw
YE8nrEEUgTtQMngVEwrHfzKNNPPinIf5T4ezl8dBIvBC3j1KkU5ZnQOPIEfWzkX0
Xzn7NPvdyAx8G5ChmgfkdbfywEGkQvS8t+9r9M+SmMFDcvVjaGqr5PAFyGLgxJn1
QjtSyBgXO8StNJeohi9br2zKlScZyfif/bsT4319bCPSCuR9QjoiJWp79Y5MvPUK
96/xMMn5jrw329aR8Q7Mq3i7w8ZLZzjc4QXUMzg4qJJMQct5NaR6Q2glxnOLAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUuPp6ihbQU8/wErhEtlnPmbSQgSgwHwYDVR0j
BBgwFoAU08sFGWR/nTwUXjHoHneeqcPSwnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMC9EM0NCMDUxOTY0N0Y5RDNDMTQ1RTMxRTgxRTc3OUVBOUMzRDJDMjc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQ0IwNTE5NjQ3RjlEM0Mx
NDVFMzFFODFFNzc5RUE5QzNEMkMyNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNVSFMvMC9E
M0NCMDUxOTY0N0Y5RDNDMTQ1RTMxRTgxRTc3OUVBOUMzRDJDMjc0Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGI86QbMVVVLFB0acgOxcJRG4TMhPMmEK6Tm4qMmvdaHmE9pSu/eTXtXZnBgB
NLlyPnurHZ68LsgEqGon/rBq7VmKYPAXsmJlXWHuNht+VCmM7USv0sbUSQsFF1e6
A02qA9B0tH29NQHGUIIXJmlebvh7JTe8hSYhBew+va2G4502iJLtLxNbKvcq+U3c
OybAhirhljRqBFyk6H7TYZ+V+/szz5ibcR3EpCgaeuXnS3RgeigbhudDvIY2Szx8
Q5AKGzFpeWnuLZrDsOw/nj/8EQddqrWaMkj6drocqgXdgm7Z+3FiW+CttdFcJ6kx
U7Mr07/6U7XZ9DnNnXtA0km7Sg==
-----END CERTIFICATE-----
Generated at Mon Dec 22 01:07:19 2025 by rpki-client