This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
File:                     D296B69B93C13271557656EE54E2511823349A12.mft (raw, json)
Hash identifier:          Klt/ZGRb1xHw/x+rbCQHcajgJgo79Fhhyya1SPAkeyc=
Subject key identifier:   53:1B:3E:B6:13:96:6E:0C:FC:61:E0:18:59:B6:DC:DB:F6:62:89:F0
Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12
Certificate issuer:       /CN=D296B69B93C13271557656EE54E2511823349A12
Certificate serial:       3BE5D3633E1F01E4200CDC861013A51C7C0492C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
Manifest number:          0395
Signing time:             Sat 06 Dec 2025 02:36:00 +0000
Manifest this update:     Sat 06 Dec 2025 02:31:00 +0000
Manifest next update:     Sun 07 Dec 2025 02:36:00 +0000
Files and hashes:         1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: S3dmw1eBTDTCPjMsF5t4pvqmbC0ES342iiGwHyIjNN8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl
                          rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 02:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e5:d3:63:3e:1f:01:e4:20:0c:dc:86:10:13:a5:1c:7c:04:92:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B69B93C13271557656EE54E2511823349A12
        Validity
            Not Before: Dec  6 02:31:00 2025 GMT
            Not After : Dec 13 02:36:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:0e:c0:86:d9:d3:68:65:00:27:d7:7b:78:
                    15:4a:5d:a8:de:b6:a2:53:0d:c4:bc:d9:9a:4c:c8:
                    e3:72:8f:74:28:e5:08:1b:85:b9:ea:32:7c:00:f1:
                    74:7e:b4:f4:99:7f:93:8d:e6:6d:86:e9:56:7f:8c:
                    f2:14:2f:64:23:54:60:9a:a8:ca:ea:05:0d:28:cf:
                    1e:3e:86:eb:cd:b2:b2:a0:69:5a:36:3f:b9:4e:c2:
                    0e:81:0e:a9:b8:31:2b:24:fb:5c:6a:ac:2b:fb:f6:
                    8a:20:85:e1:e9:67:b5:70:4e:e5:02:4b:28:a2:3a:
                    75:38:01:67:0a:a8:45:08:e2:db:7b:92:25:09:a3:
                    fe:0b:36:df:1a:b2:e9:6a:7f:2f:4a:09:40:88:96:
                    5e:be:14:db:5c:2b:5c:28:00:38:fd:bf:c4:1b:7b:
                    dd:71:bc:77:02:96:50:93:51:66:4b:5a:d0:2a:73:
                    e3:49:73:39:c1:e9:12:53:f7:41:0a:1e:3e:d5:b3:
                    9e:67:9d:8e:67:03:d3:32:e9:a8:f8:8e:06:e8:f6:
                    6d:bc:01:55:97:c9:43:9c:90:7d:9f:a9:a8:ef:1a:
                    e1:f0:57:ec:39:90:87:61:94:03:f5:e6:7d:9d:d9:
                    1d:03:dc:a7:2a:97:1a:ab:d0:5b:d8:c7:fe:15:0d:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:3E:B6:13:96:6E:0C:FC:61:E0:18:59:B6:DC:DB:F6:62:89:F0
            X509v3 Authority Key Identifier:
                keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:dc:1f:e6:d0:bb:c6:0a:13:25:98:30:33:4a:1e:c6:f9:34:
         dd:1e:42:f6:d9:4e:e9:1f:cc:b1:5f:49:b1:fb:31:ad:4f:34:
         27:ea:4f:3c:61:86:2d:37:a0:35:b4:eb:5f:80:af:8f:15:81:
         b4:fc:25:24:64:3a:59:7b:a3:42:e1:5d:6f:74:a5:82:bb:f8:
         74:87:43:97:ac:df:12:75:22:40:73:59:84:0c:f6:e1:56:df:
         d4:e0:00:84:32:0e:a0:bc:74:3a:56:99:75:ef:6a:a0:fa:ad:
         b3:25:f7:37:13:31:ae:45:23:92:dd:9c:4c:2c:06:8f:54:3a:
         d9:c3:5c:d2:f8:6a:11:b3:46:58:45:05:4c:35:98:ae:4d:e4:
         6e:5e:3a:11:96:d1:15:fc:25:94:d5:69:81:7e:b1:5c:c5:68:
         53:b5:38:09:63:80:63:75:07:a5:34:ee:ec:a5:71:59:88:d3:
         b9:9b:de:6c:15:ef:12:3c:c3:e5:ae:64:01:57:aa:df:d9:b8:
         0b:a5:85:37:e8:d0:01:17:12:cc:55:ae:8b:3c:71:b5:9a:cf:
         5d:9e:ea:b3:e3:eb:62:9e:d7:e4:f2:3d:4a:54:4b:e5:ef:e7:
         75:44:26:fb:65:14:4a:23:58:33:9d:19:34:a8:59:0c:9f:e1:
         15:22:89:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----