This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
File:                     D40B256042895F431460325AC5DB0F0088D3437F.mft (raw, json)
Hash identifier:          V6A/SMZ7JPc9H5A2CEm/2hFXl8Jr8/RhFgOwE3CM8VA=
Subject key identifier:   74:4B:94:0F:8D:2B:49:B6:5A:B2:18:C5:7F:52:04:37:48:40:BD:07
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       32597F0155E511BCC0F319152C31F6EDEC874A2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
Manifest number:          98
Signing time:             Sat 06 Dec 2025 05:21:23 +0000
Manifest this update:     Sat 06 Dec 2025 05:16:23 +0000
Manifest next update:     Sun 07 Dec 2025 06:52:23 +0000
Files and hashes:         1: 323830343a333531383a383830303a3a2f34382d3438203d3e20323635353030.roa (hash: pD1BqMEJIqp1IwwbzWgiMcJRFg7SmV0GiT3x5Yl8HVo=)
                          2: 323830343a333531383a336330303a3a2f34302d3430203d3e20323635353030.roa (hash: Pa4+DsWTWh1CWePgBLpNe1Uon9PoosB9CXNjNGn9n8s=)
                          3: 323830343a333531383a343030303a3a2f33342d3334203d3e20323635353030.roa (hash: dRmjkGxP4PAE9inQUIHZoOWcU84AF8/ZAHi9PP/8sfg=)
                          4: 323830343a333531383a383430303a3a2f34302d3430203d3e20323635353030.roa (hash: p5+stMOCk5E3YtiHN64q6YrRLnf7egbIqk/Uha0M5Vs=)
                          5: 3137302e37382e39352e302f32342d3234203d3e20323635353030.roa (hash: BDPRROC2CZj5zwucceaYK+igW7ptmsp8MKt9oU+Au5s=)
                          6: 323830343a333531383a356530303a3a2f34382d3438203d3e20323635353030.roa (hash: 3bkJ512eTBViY31cwEz8FYx1htpFSPLfL+AifLwhy7c=)
                          7: 323830343a333531383a3a2f33322d3332203d3e20323635353030.roa (hash: NIgBDiK1Ps/90G0bFof3ft2u+F3j8ctCPSLp/VeUrjo=)
                          8: 323830343a333531383a633030303a3a2f33342d3334203d3e20323635353030.roa (hash: 1e3r3tK6PwIFQ5kVwj7PNLqm7Fw9L0v3FEuZf1fXJ9A=)
                          9: 3137302e37382e39332e302f32342d3234203d3e20323635353030.roa (hash: dXgKvHISlVNoR9XEuRM10rCcTggNY0fRtLYip5duNCo=)
                          10: 3137302e37382e39342e302f32342d3234203d3e20323635353030.roa (hash: fMDGYUEej3FegjNCad8gyf8lNgoeJurSw9KM2XHlYo4=)
                          11: 3137302e37382e39322e302f32342d3234203d3e20323635353030.roa (hash: S4iqR2C5NNl03juUYjyENI0LYUgymPHJvRPDNmvCc2M=)
                          12: 323830343a333531383a383030303a3a2f33342d3334203d3e20323635353030.roa (hash: rbV//LDqEwxf/yvQLbExO7S7+LFqZ9dwPqrAVeXO/As=)
                          13: 323830343a333531383a356630303a3a2f34302d3430203d3e20323635353030.roa (hash: +S6BOQw/Url72AiHHEw8a8DUnqX7sRixepOus+ZgkAI=)
                          14: 323830343a333531383a3a2f33342d3334203d3e20323635353030.roa (hash: ahwCx6FVSnBF5dRe4hXYjUHm26bYFQ46Ptv4bIDlDBQ=)
                          15: D40B256042895F431460325AC5DB0F0088D3437F.crl (hash: BnK0TindIklttCVSvXTLqROGWhvoAAgJKQxUe+eFx+c=)
                          16: 3137302e37382e39322e302f32322d3232203d3e20323635353030.roa (hash: oD73uiQXnrHszpKxAnfrkgyinMm6hIKofzgZEq5Ni5o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 06:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:59:7f:01:55:e5:11:bc:c0:f3:19:15:2c:31:f6:ed:ec:87:4a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Dec  6 05:16:23 2025 GMT
            Not After : Dec  7 06:52:23 2025 GMT
        Subject: CN=744B940F8D2B49B65AB218C57F5204374840BD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:84:86:61:93:b9:ce:89:3e:0a:59:1b:a8:
                    10:4a:3f:43:c5:f8:32:4c:24:b4:d8:1b:6a:b4:9a:
                    aa:bf:c4:cc:06:04:51:a0:56:eb:a5:39:01:a0:4b:
                    70:22:ed:f8:f8:45:6c:2a:e7:7e:f2:6a:e3:97:bd:
                    59:05:0c:20:c9:1b:30:f8:9f:9f:f2:95:07:91:e1:
                    cc:62:d0:20:e6:d4:f2:4f:8c:60:7b:5a:3f:91:d4:
                    81:fb:5c:85:55:45:d0:37:d1:6a:b7:e5:19:b5:57:
                    d6:8c:ed:97:03:41:ec:49:89:90:2d:f9:9b:9c:7a:
                    a4:be:23:25:e8:24:9a:e6:4b:2a:38:83:b3:ce:95:
                    e3:4e:3b:b8:81:d1:2e:42:a2:0a:a5:2a:5f:97:73:
                    fc:4c:b4:19:c7:3e:db:f5:4d:84:47:87:40:2a:01:
                    a4:99:13:d4:6d:69:ba:5e:ba:f8:4c:e1:e6:29:74:
                    4a:03:e7:0e:d8:5d:05:38:86:95:b8:5c:90:f2:e0:
                    d5:1f:78:7e:e9:89:9b:29:f7:95:fb:bd:86:23:39:
                    9d:98:6f:d8:76:e1:01:8e:c8:99:cc:0f:9d:27:f8:
                    cd:1a:c3:84:dd:8a:81:4f:b3:13:a0:6e:06:3a:12:
                    70:45:84:a9:d0:f3:c2:73:d0:45:0c:25:40:a8:58:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4B:94:0F:8D:2B:49:B6:5A:B2:18:C5:7F:52:04:37:48:40:BD:07
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:93:86:53:a7:b0:d3:0f:ce:6e:58:f5:91:c7:f1:7c:ac:46:
         39:1e:c2:0a:b5:1c:cd:d5:94:10:69:cf:34:aa:d7:a3:99:b0:
         83:01:56:44:2a:79:2e:b3:2d:b3:31:23:e8:d1:bb:d6:0b:ae:
         dd:20:e2:40:eb:ec:c0:cc:67:58:da:10:c7:87:02:57:6a:cc:
         bf:98:96:d9:b6:84:94:23:ca:35:8c:9b:42:81:4c:02:2e:6f:
         8e:7b:fe:4f:92:b4:09:68:41:24:b6:01:22:fc:4e:84:28:14:
         17:43:a5:86:28:d2:af:44:9e:23:56:3b:66:ba:54:c1:cc:67:
         cb:f9:1b:90:5d:5c:c1:de:ca:46:45:71:70:98:90:e7:4c:5a:
         e8:ad:6f:65:84:a6:9e:d3:d3:94:a3:cf:69:70:6c:21:ca:b8:
         ea:13:7e:a1:c6:3a:4e:fe:7c:a1:c1:a5:89:e9:b9:f6:dd:42:
         6c:8d:b6:81:65:79:1a:cd:e2:04:f7:6d:a6:3d:4c:4b:88:26:
         bf:b2:bb:38:8e:cb:0f:39:3b:29:bd:3e:71:e9:51:95:6c:c8:
         1c:fe:94:6b:4d:f0:b9:5b:07:77:36:61:62:ad:a2:d8:fc:08:
         f6:4f:7b:c0:91:61:18:c3:5b:0d:12:06:16:31:9b:0b:38:06:
         ed:54:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:16:32 2025 by rpki-client