This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
File:                     45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft (raw, json)
Hash identifier:          yVY4OPrPNQmH+w4KlruYcOjLhAf7daElxGtPwThCy6Y=
Subject key identifier:   2B:1B:D7:7D:60:FA:C5:8B:05:59:AB:6B:8E:6C:E9:79:ED:91:28:F9
Authority key identifier: 45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6
Certificate issuer:       /CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
Certificate serial:       3E749B16AE785E44844F4CBF303B7ABA0FC07002
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
Manifest number:          033D
Signing time:             Thu 18 Dec 2025 09:28:03 +0000
Manifest this update:     Thu 18 Dec 2025 09:23:03 +0000
Manifest next update:     Fri 19 Dec 2025 11:46:03 +0000
Files and hashes:         1: 34352e3137312e31362e302f32342d3234203d3e20323638313831.roa (hash: sqv4PJRsVf1fbuPiqi5aE4THOHXbUo9nkuAmPfa1rXE=)
                          2: 34352e3137312e31372e302f32342d3234203d3e20323638313831.roa (hash: Nn6jD2pUfzWh45ebiPgn3qZcw/WBvZhUPEAdVETzjO8=)
                          3: 34352e3137312e31362e302f32332d3233203d3e20323638313831.roa (hash: C2Urw1CANF3BYR4oYboPvzubkyeHTC4GKOwLeRX1lQY=)
                          4: 34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (hash: 1GNUZSNPHTUgvUkppz4F7t0eGoRsad2SmjP7A9wBQ4U=)
                          5: 323830343a353934383a3a2f33322d3332203d3e20323638313831.roa (hash: jFOKmZdUzrqB7DuIgqBanfryUkoDH0GXcs2RL/VGiII=)
                          6: 45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl (hash: 0QwJzu+8FbcH+t3oNF7FKWtv4yItTCKndpuHNksoAIg=)
                          7: 34352e3137312e31392e302f32342d3234203d3e20323638313831.roa (hash: ocNiHrf1d9Z7plIcCmYweeZ2niT6wSQyBuY0x2/edlw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Dec 2025 11:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:74:9b:16:ae:78:5e:44:84:4f:4c:bf:30:3b:7a:ba:0f:c0:70:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D06444E7E6E81BAA7FEFD4800A93707396ACA6
        Validity
            Not Before: Dec 18 09:23:03 2025 GMT
            Not After : Dec 19 11:46:03 2025 GMT
        Subject: CN=2B1BD77D60FAC58B0559AB6B8E6CE979ED9128F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:63:83:12:ad:73:6f:93:c3:c0:1d:29:3c:
                    2b:13:8b:3f:01:37:63:e0:03:6c:16:6e:9b:65:4d:
                    48:76:2a:bd:0c:ff:2d:5d:a4:77:6e:7f:62:fe:eb:
                    81:2d:04:a0:ac:ea:7b:33:0d:40:07:7e:c0:9f:37:
                    c2:e2:50:94:ed:a8:0e:e8:48:cf:25:01:de:28:71:
                    e7:50:be:e6:85:d4:11:a4:11:40:b3:95:18:35:2d:
                    1a:7d:bc:0d:9e:d7:30:10:b8:4f:b1:b5:d0:41:ed:
                    06:a9:8a:4e:d3:f7:29:ab:0f:71:80:c6:f5:6d:2a:
                    67:13:e1:2c:2e:1b:85:d4:40:fd:da:a2:54:eb:0b:
                    37:1d:7a:5c:dd:ae:45:bd:9e:24:56:49:c5:4a:c6:
                    c7:a2:4f:45:8d:d6:92:ca:82:b5:62:f1:6c:f8:a1:
                    a7:50:64:08:2d:b8:bc:03:39:78:05:f4:c7:91:08:
                    51:69:a2:e3:95:f4:13:b6:81:6e:4d:27:45:78:ad:
                    1a:b1:0c:5a:e5:94:68:ba:df:7c:db:6a:95:71:75:
                    87:aa:41:88:2a:92:b7:50:28:73:2e:8f:5a:ff:3a:
                    6a:d4:f7:4c:73:b0:47:d4:a7:3c:15:de:34:4f:ad:
                    5f:53:cb:29:aa:ea:17:90:34:53:08:8d:02:b8:93:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:D7:7D:60:FA:C5:8B:05:59:AB:6B:8E:6C:E9:79:ED:91:28:F9
            X509v3 Authority Key Identifier:
                keyid:45:D0:64:44:E7:E6:E8:1B:AA:7F:EF:D4:80:0A:93:70:73:96:AC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/1/45D06444E7E6E81BAA7FEFD4800A93707396ACA6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:80:ed:b2:72:70:ae:86:a2:ec:1e:61:23:a7:71:97:f6:08:
         2b:ae:17:13:e5:f8:4c:90:e7:ae:e7:55:be:a1:11:6a:b2:ea:
         64:5f:c3:3a:cc:fb:c7:be:0f:cf:a7:9e:da:ee:9c:f1:2b:82:
         ee:54:c1:85:d4:09:cb:e8:7e:92:ec:b1:66:7a:33:3d:11:88:
         cf:7a:8b:eb:69:bf:dd:b2:2d:97:cb:10:35:7d:51:52:da:b5:
         5e:48:0c:3a:a2:3c:3e:9e:87:5f:da:44:1e:aa:66:13:90:11:
         0c:19:65:4a:48:69:59:ce:a9:46:4b:25:8e:58:00:c1:8d:61:
         b9:d2:c0:fa:c4:70:9f:d9:82:5d:06:cd:16:24:81:f2:08:53:
         df:f0:d5:65:ca:d5:5e:52:77:bd:f8:59:b9:d4:19:c1:c3:ab:
         14:55:1a:ff:0b:26:c6:e6:eb:3b:7b:0f:f0:19:d6:f3:32:f2:
         8c:69:9d:6a:dd:a0:c8:4b:88:c9:5d:8d:2a:79:ee:a8:87:e4:
         93:80:72:09:08:dc:80:22:bf:90:73:95:e7:c7:4d:3c:0f:15:
         62:7f:94:d7:80:8f:43:71:c1:ee:7d:1f:64:e7:c7:28:43:86:
         69:19:3f:f7:0a:e0:95:78:37:c2:bc:ce:3e:84:0f:ad:fc:f5:
         11:5f:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:10:09 2025 by rpki-client