This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
File:                     2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft (raw, json)
Hash identifier:          KSQOiC471EBdWEGfCJZs6KAfQSgT/eLRU9Q++9ArPtQ=
Subject key identifier:   7F:CA:38:D4:98:76:64:3C:37:04:BC:20:C2:A9:EC:0A:20:49:E6:50
Authority key identifier: 2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB
Certificate issuer:       /CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB
Certificate serial:       50589432B9CC8657B576AF1F8CECEDA1A7EE2BB5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
Manifest number:          012D
Signing time:             Sat 06 Dec 2025 07:44:05 +0000
Manifest this update:     Sat 06 Dec 2025 07:39:05 +0000
Manifest next update:     Sun 07 Dec 2025 07:55:05 +0000
Files and hashes:         1: 323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa (hash: +hPnJIBqWPZR8CQNcV7ZbOyO929RfGEvVQZzkpqgA3Y=)
                          2: 2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl (hash: TNdbj/OS3uYANJhcBihckjFcb1TpvwyybteHUOEw15M=)
                          3: 3133382e3131372e35322e302f32342d3234203d3e20323634323239.roa (hash: 0lBR7nRdo3vyX+HYU13MtiobPfunyTGMl5wWuKD0qJE=)
                          4: 323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa (hash: sA3Nx/pG2mee0gYzaG2v39F1VEfFCH+sPtcN0j8Gksg=)
                          5: 3133382e3131372e35342e302f32332d3233203d3e20323634323239.roa (hash: 8LaiUUHJptxCJniKq3fEYtpdbj7uINznaBTJRX0Uk6M=)
                          6: 3133382e3131372e35332e302f32342d3234203d3e20323634323239.roa (hash: Z8IzKSO9VaQh501nuxLIQmJAS66e27f6OHg+tM2ra8c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl
                          rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:94:32:b9:cc:86:57:b5:76:af:1f:8c:ec:ed:a1:a7:ee:2b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB
        Validity
            Not Before: Dec  6 07:39:05 2025 GMT
            Not After : Dec  7 07:55:05 2025 GMT
        Subject: CN=7FCA38D49876643C3704BC20C2A9EC0A2049E650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:3d:7b:fd:a3:5b:93:84:ca:56:6a:44:85:
                    90:05:be:ad:bb:4d:2a:cd:f7:93:8f:6c:c0:21:64:
                    92:e9:7a:8d:f4:43:30:15:74:df:63:6d:26:05:61:
                    b4:7b:64:ac:7d:60:51:6c:b8:bb:65:45:db:98:9c:
                    44:9b:2d:c3:28:f4:5e:a5:db:73:ba:44:e8:55:eb:
                    e4:21:3d:39:23:96:18:de:cd:52:72:a2:23:bc:fb:
                    0e:ab:34:80:34:57:97:73:8b:45:f1:85:ed:a6:50:
                    c2:a8:c4:b0:b3:62:0b:ed:b2:13:76:d5:76:c3:64:
                    32:3f:8b:b1:4f:08:36:20:23:5b:2e:37:9e:64:bb:
                    26:74:68:ff:43:18:15:1b:5d:4c:af:1c:df:39:b3:
                    36:4a:09:af:f0:27:fd:91:75:c9:7f:18:05:79:89:
                    33:b2:3d:81:b5:07:0d:c9:43:e7:fc:f0:3e:a7:91:
                    9c:b3:d6:a1:9d:80:59:63:70:03:7e:61:d3:2c:e9:
                    aa:10:a0:23:1e:21:b7:ca:18:77:95:53:39:0f:9c:
                    d0:83:d3:ce:f4:55:d4:1e:bf:88:a8:4f:01:e0:6e:
                    5e:3c:ed:96:5e:fc:10:48:3e:5a:fc:72:86:fe:89:
                    33:49:ee:e2:6b:6b:58:f3:74:58:c7:55:94:34:57:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CA:38:D4:98:76:64:3C:37:04:BC:20:C2:A9:EC:0A:20:49:E6:50
            X509v3 Authority Key Identifier:
                keyid:2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:d5:47:87:3e:d5:10:dd:1d:f8:c3:c5:c1:be:0f:21:b1:
         7c:e7:06:1a:7c:ba:02:65:b7:c4:41:ab:97:9f:73:04:ef:40:
         f8:48:f2:f5:09:dc:c9:84:d7:b8:65:6d:00:10:a4:5b:aa:88:
         e0:28:11:a5:b5:25:36:ba:d5:70:19:23:c3:b1:9d:51:36:ac:
         34:fb:6e:1d:72:41:9e:4a:cb:e7:2e:0c:f2:6e:ca:46:23:53:
         f0:0e:17:5d:c2:93:f8:4f:9d:2b:fe:e4:da:ad:3d:03:5b:d4:
         39:e8:00:e6:50:bb:26:94:2f:da:e0:2c:5c:07:43:bb:a8:dc:
         71:db:3b:5f:fa:18:8a:c5:4d:dd:f8:49:da:9b:99:38:66:91:
         8f:19:e9:4e:73:3c:d2:3b:e2:aa:97:a4:84:8e:37:e1:cc:18:
         5f:38:f7:e5:f3:a7:6a:0d:fa:b1:ed:86:ee:24:87:aa:7f:46:
         e3:83:1b:f8:f6:42:37:7a:c3:31:c4:02:19:37:dd:23:af:73:
         3f:0e:31:9c:60:c9:02:32:e4:73:30:6a:b4:19:9d:74:7e:ad:
         2c:53:f7:b5:65:01:7d:c3:ed:1e:93:60:cc:b3:ae:ac:6a:bb:
         71:0b:a6:a0:c3:c1:35:a0:13:c6:e6:f9:51:94:59:84:3f:4f:
         cd:37:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:41:39 2025 by rpki-client