This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft
File:                     87B1C7EAED276157BEE841B04303FA76647D005D.mft (raw, json)
Hash identifier:          gM3cPFCmWf1QEBfP9hNqVJeTzlQjtBE1x+rURKJuwtM=
Subject key identifier:   C1:57:C3:1D:38:83:74:55:AE:AC:0F:0E:35:DE:15:FB:1F:2C:27:D6
Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D
Certificate issuer:       /CN=87B1C7EAED276157BEE841B04303FA76647D005D
Certificate serial:       5141D2B502B5D79EAFFE5737A3A887947678BF47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft
Manifest number:          032C
Signing time:             Sat 06 Dec 2025 01:07:28 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:28 +0000
Manifest next update:     Sun 07 Dec 2025 01:21:28 +0000
Files and hashes:         1: 323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (hash: G5AAbv33pivu3vzNY7JPwifjM6uOhsc8wAeK1CMPE3k=)
                          2: 87B1C7EAED276157BEE841B04303FA76647D005D.crl (hash: zZRSuVZESoPeZLLJ5gBoxwGbYZg0ngzM3om023ftQQ0=)
                          3: 3137392e3132342e34382e302f32312d3332203d3e20323633313034.roa (hash: Wjmu25vr0ifd6CGgL9MD2W5X0vThiTL0u/QKe7sB/Ds=)
                          4: 3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa (hash: 8BO24ZXNAG9CfhwU6ckhsGa3X3uJqdCrxTlHNv9Btdo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl
                          rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 01:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:d2:b5:02:b5:d7:9e:af:fe:57:37:a3:a8:87:94:76:78:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D
        Validity
            Not Before: Dec  6 01:02:28 2025 GMT
            Not After : Dec  7 01:21:28 2025 GMT
        Subject: CN=C157C31D38837455AEAC0F0E35DE15FB1F2C27D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:ba:b8:85:3e:8f:5b:13:e6:97:9c:ac:17:
                    b6:74:90:c3:79:b8:89:32:a0:fa:58:1f:dd:c7:9b:
                    09:4b:99:3b:03:d1:cd:e3:3c:74:7a:7a:58:86:d5:
                    a9:81:7f:e4:9a:37:04:5b:9f:ba:59:3e:97:a9:5b:
                    b7:8e:98:35:57:f7:9e:17:1e:da:bd:6c:1d:53:fe:
                    9e:42:a0:97:0c:c1:6f:07:ec:84:32:7b:2b:e3:3f:
                    f1:81:00:4b:db:fb:df:9e:65:10:13:22:24:40:04:
                    0f:bc:89:02:dc:f0:e1:ad:8c:e5:6d:56:ef:d7:4a:
                    63:61:32:88:42:b7:75:9f:e9:7c:3c:ef:5d:8d:a1:
                    da:d3:08:be:a2:87:95:d0:c5:8d:41:d2:ba:ac:b6:
                    95:10:f0:8a:41:b3:05:67:32:4d:94:8e:3c:1e:3e:
                    18:d5:f1:46:5d:45:49:42:9f:2f:86:3c:74:39:f0:
                    8b:32:3a:6a:30:b9:12:78:65:ed:ff:51:82:af:94:
                    3a:04:21:72:35:1a:7d:be:99:b3:aa:60:a9:85:6d:
                    e7:36:ec:ec:f6:be:9c:2a:85:28:a0:cd:04:73:be:
                    7a:73:b9:d4:7c:71:06:80:81:f2:9d:42:55:68:58:
                    a2:69:f8:59:9c:76:77:0e:e1:d5:f3:7f:a6:f9:1d:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:C3:1D:38:83:74:55:AE:AC:0F:0E:35:DE:15:FB:1F:2C:27:D6
            X509v3 Authority Key Identifier:
                keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:27:82:07:5f:fb:9a:30:d4:0f:3c:65:08:3c:ba:d8:1a:
         42:5e:c7:19:14:f4:28:4c:97:49:8d:0d:66:57:8b:02:09:1e:
         42:0f:b2:e9:7c:4a:be:33:35:98:3b:2e:ba:9b:ff:5b:0b:a6:
         2e:e7:24:cd:27:7d:26:f0:e0:20:3e:7c:db:bc:7a:a2:67:b5:
         73:30:2d:21:8d:dd:61:f8:55:68:f7:8b:da:d1:0d:57:ce:7e:
         ab:31:72:ec:30:00:b2:87:74:24:c7:40:93:a1:61:6a:fc:70:
         07:1a:03:23:2c:c5:c0:bc:ed:69:cf:dc:6b:21:d9:78:20:71:
         22:a0:7c:3a:48:30:50:9f:c4:b9:d3:b4:d0:33:64:99:7b:86:
         59:80:f5:e9:f9:4b:12:6d:85:ff:45:1e:b5:56:11:9d:83:b5:
         1b:10:ba:17:3d:63:a3:31:81:82:be:7e:54:2f:ba:33:d8:5c:
         58:bf:6f:11:0f:e4:8b:16:7d:91:90:4d:e5:33:66:ae:9d:8a:
         44:d3:ef:d8:07:8d:27:8b:54:4c:a2:e3:c3:4e:ab:07:0c:35:
         95:09:61:71:55:e1:81:a7:9d:81:14:53:ae:35:d5:f3:25:03:
         29:1f:39:8b:21:1b:d7:10:00:3f:d8:b4:82:ba:af:74:24:2c:
         c1:05:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:12:30 2025 by rpki-client