This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
File:                     21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft (raw, json)
Hash identifier:          /52nhdIph+S7Cv/pmePH0QeRLODi+rn5moxuDMB0F0k=
Subject key identifier:   7F:04:C6:EA:9C:52:5D:AF:5B:8F:0F:A1:80:2D:1A:69:AE:6B:42:CA
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Certificate issuer:       /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial:       078C5A546FDC9EB30F589D8BEBB9678D47BDF549
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
Manifest number:          0125
Signing time:             Sat 06 Dec 2025 03:18:44 +0000
Manifest this update:     Sat 06 Dec 2025 03:13:44 +0000
Manifest next update:     Sun 07 Dec 2025 04:30:44 +0000
Files and hashes:         1: 21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl (hash: gcn6erlBkyp5YMFng4Q7rFSL8uQJVtA+cB0AfzwZMM4=)
                          2: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (hash: J300dFXZr5KKTkTQzQCo+VuABspi5UhFx/KywDZmrV4=)
                          3: 34352e3137302e35382e302f32332d3233203d3e20323638313438.roa (hash: j8GbTlImInggLXV7UaiaKTq2/ezww6Fce25zlRuDPh8=)
                          4: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (hash: SoekstKv8f+pkK/WwzhieixqQG0KM+o03cw/55GYLlg=)
                          5: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (hash: sQjnBNpY0cCeByw2MJZ0cFZXN5mlrSoantEDSz97YB8=)
                          6: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (hash: fZuxL2H/McwhqF3eWGOSLVFPaLHn9GVCUQ5HIDIvm7w=)
                          7: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (hash: NcZvtk9vtk4cBlbbop46EV0A+5s9d/7hpHIDDTwgZ0w=)
                          8: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (hash: l0BuCzH66s+VtkrxcQvmTEBH0+FHi0YOqD0wKrMk7Tw=)
                          9: 323830343a353863343a3a2f33322d3332203d3e20323638313438.roa (hash: zRGNZud26qHSrSYjjg6YCk1GClPSJdsr2PGUbQApwKk=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
                          rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:5a:54:6f:dc:9e:b3:0f:58:9d:8b:eb:b9:67:8d:47:bd:f5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
        Validity
            Not Before: Dec  6 03:13:44 2025 GMT
            Not After : Dec  7 04:30:44 2025 GMT
        Subject: CN=7F04C6EA9C525DAF5B8F0FA1802D1A69AE6B42CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:58:a5:7d:be:47:d0:4f:c9:f1:9a:9f:ef:c3:
                    3c:b0:34:66:c4:7f:8c:f4:05:2d:3b:63:d3:cc:f3:
                    d8:75:73:3c:05:ce:f3:48:49:80:72:34:67:0e:0e:
                    27:24:79:de:6b:84:41:cb:65:33:5a:f2:14:fb:56:
                    81:d6:83:f5:2d:78:54:66:41:58:5b:5e:f0:1a:26:
                    e1:a9:71:58:7e:6b:5b:83:dc:14:1e:ec:4b:56:30:
                    c8:37:73:0f:a6:d7:da:b7:08:a6:e5:6c:33:e5:00:
                    c8:fc:ee:ee:ce:b6:45:3d:56:ba:b2:fc:ff:7f:32:
                    10:db:38:7b:2a:30:55:cd:66:14:12:4e:9e:13:2d:
                    c9:4e:5f:f3:74:56:70:33:14:74:0c:5e:35:45:c5:
                    e5:ca:50:81:fa:59:23:08:6a:3b:46:8b:ab:4e:e1:
                    5f:c5:82:cb:a3:08:da:f3:74:6b:53:2a:f9:d1:97:
                    25:9c:07:be:76:ad:47:42:b9:88:d5:14:08:bc:1c:
                    b3:02:ac:15:0c:af:28:c3:ff:f5:78:8e:18:90:0b:
                    38:31:a7:2a:5a:f6:2d:93:cc:f2:e5:57:e7:80:85:
                    aa:c9:bd:a7:36:52:1b:f5:30:8a:22:03:39:6a:9f:
                    57:ea:ae:c5:42:56:bc:29:6f:ac:39:c9:c0:51:48:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:C6:EA:9C:52:5D:AF:5B:8F:0F:A1:80:2D:1A:69:AE:6B:42:CA
            X509v3 Authority Key Identifier:
                keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:70:6a:19:ff:34:f3:c1:f0:ca:9c:cf:fc:d7:01:c8:4e:32:
         d6:3e:53:f8:26:2b:41:21:e8:60:0b:a1:4c:50:2c:b3:0a:e7:
         15:ac:49:18:bd:58:c0:70:a6:b5:84:e5:1c:51:99:e0:fb:5b:
         8c:c5:88:1f:45:93:0e:a0:1e:3e:bb:f9:9c:75:a3:d1:d8:ee:
         ce:35:7b:6a:4c:00:39:69:36:8a:98:31:18:85:ad:cb:09:7d:
         dd:5b:be:1d:e4:e4:07:71:51:03:1a:d6:53:99:17:00:84:24:
         b3:34:72:36:79:99:f5:8d:f4:3e:84:f1:c6:ce:10:0d:15:0e:
         00:6c:80:9e:bf:a1:ce:72:b4:13:f3:30:f2:73:a0:56:2b:4f:
         27:5d:85:0a:c3:fc:77:21:dd:74:1f:54:6c:81:17:5e:e1:46:
         d1:3b:6e:dd:a1:57:33:e1:cd:93:5d:99:97:b8:1c:e6:d1:6c:
         83:87:76:b6:53:72:9c:b8:1c:cc:38:f9:58:c8:1e:cc:d0:5c:
         7f:25:84:a1:ff:89:6e:91:48:8d:8d:fd:b4:4e:2b:40:90:da:
         1e:8f:d6:be:8d:90:7e:13:d0:18:6d:15:02:90:98:88:a7:85:
         ec:96:75:e3:aa:eb:13:80:12:3e:62:53:e4:84:ea:a8:88:e9:
         10:6c:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:49:39 2025 by rpki-client