This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
File:                     4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft (raw, json)
Hash identifier:          1WphU6Igw8UcqMlkXunjuB4C/HXhQwL+tzCZABNqYqc=
Subject key identifier:   3E:36:A1:6B:5D:D1:FA:98:3D:F5:B5:B6:AC:D7:AC:B0:06:B9:13:42
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       463699B2A3A942BA2E625B1E019083E760655B48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
Manifest number:          0398
Signing time:             Sat 06 Dec 2025 04:00:00 +0000
Manifest this update:     Sat 06 Dec 2025 03:55:00 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:00 +0000
Files and hashes:         1: 3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa (hash: b5u6wlPF7EShO6uaC7na2EIB4MoLrsSCJEwgBshg2Ws=)
                          2: 323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa (hash: hiLWLPz+Q0WehzSlWDIOVAdx/Z6HtXePArAie2p3beE=)
                          3: 323830343a346132303a3a2f33322d3336203d3e20323637323230.roa (hash: 61rNpAD1q/Cw/IP595PjZ6Ar/NI/wIKvq7Zo+9XTqL8=)
                          4: 34352e3233312e33362e302f32322d3234203d3e20323637323230.roa (hash: YfFqYAjWQxr3WlTttHr97Z9Lj82F3Z/n3Y6JNlslAGU=)
                          5: 323830343a346132303a383037303a3a2f34342d3434203d3e20323637323230.roa (hash: gkpUhjaFwoqPDt59t+CIWnrFQMO0V6Dl6XIiLUnYsbk=)
                          6: 4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl (hash: 3aETJkxAsWi8496jNAHNsP+7pTfTi4lv64uXG9wi1b8=)
                          7: 323830343a346132303a383036303a3a2f34342d3434203d3e20323637323230.roa (hash: qVnn98/2im6Mgq6+4iayDUYuA12/Sspq/vGJSCP4g6s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:36:99:b2:a3:a9:42:ba:2e:62:5b:1e:01:90:83:e7:60:65:5b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Dec  6 03:55:00 2025 GMT
            Not After : Dec  7 04:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:3a:c8:18:d3:e7:06:8f:0f:39:ee:05:3a:
                    08:55:35:d1:a4:fe:92:89:9d:7b:56:e4:c9:ff:aa:
                    d9:75:f7:f5:6b:65:71:bc:2f:13:26:63:98:82:26:
                    3d:0f:d2:47:c3:fd:3c:e4:45:fc:75:b4:e5:c5:a9:
                    82:14:46:87:85:ef:48:3c:2d:78:ba:1c:63:67:b0:
                    d4:52:5d:fb:a6:24:6b:68:92:61:f8:c4:c9:89:ca:
                    46:12:ab:74:58:ac:2f:4d:9f:c1:2c:f8:62:87:b6:
                    48:27:49:24:1e:c0:40:73:b2:77:7b:d1:5a:46:3e:
                    d9:a6:0f:86:5a:8b:f9:75:9f:8d:9f:e2:b9:d1:bb:
                    38:df:5c:f2:5f:da:98:cc:9c:c2:b4:84:b7:37:96:
                    0b:c2:cb:6b:d5:57:96:f5:82:18:92:0d:e8:3e:b2:
                    ec:df:b3:6f:08:0b:3f:33:e7:e3:cc:d6:9d:c5:22:
                    1f:38:b0:7c:02:28:a9:f3:42:e4:11:c8:7a:be:94:
                    f5:a8:85:67:0a:24:6c:c5:1b:b2:d7:c8:60:79:18:
                    55:06:2e:41:69:f4:cf:cf:b0:b6:2d:5c:6e:66:51:
                    e2:6f:5e:43:7a:29:27:5f:1f:75:2d:c3:cd:54:79:
                    0e:47:4a:ff:9c:77:e6:1d:fa:5b:61:ce:18:3b:33:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:36:A1:6B:5D:D1:FA:98:3D:F5:B5:B6:AC:D7:AC:B0:06:B9:13:42
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e0:50:5e:d4:ce:42:69:00:75:41:72:63:4e:dc:15:4d:1d:
         06:87:31:75:08:6e:ac:bf:d0:bf:a6:82:e8:4f:a3:2e:94:ec:
         c6:d2:80:01:c5:6b:ba:3d:a0:43:6c:90:7d:b1:57:45:d0:ad:
         26:65:7e:58:27:dc:db:e8:29:1d:c7:f3:46:40:cc:14:81:fc:
         d2:88:af:ab:69:71:20:f3:58:b3:27:0b:30:e3:35:d4:82:99:
         7c:a8:fa:7c:e5:f7:23:8e:fa:1c:a7:2a:aa:92:dc:bb:d9:86:
         ce:26:b8:51:a1:b6:9c:cd:8d:7a:5d:ad:cc:2a:3a:32:7e:9b:
         59:e6:7b:05:d6:2c:39:fe:db:f0:52:bd:63:97:e4:d2:ea:aa:
         91:57:91:3a:78:f0:3f:e0:b1:15:81:74:f9:54:b5:00:4b:8f:
         c3:93:de:83:d6:9e:be:6c:d1:0b:84:a1:40:57:d4:6f:99:51:
         d5:79:1e:d9:00:86:41:55:69:86:08:84:87:a7:bc:83:3c:9d:
         58:e0:a4:ec:54:f4:b3:09:f9:0c:39:8a:6b:b5:1f:f9:92:b9:
         7f:5b:8f:8c:82:b4:41:12:fb:e8:76:3f:50:7b:ab:77:6b:bc:
         59:5a:46:6c:d9:df:d2:82:b3:af:eb:5a:ec:d7:7f:42:51:5d:
         9f:df:31:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:17:10 2025 by rpki-client