This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
File:                     77B49FAE0B44A260013E4F5043DD07033113F7D0.mft (raw, json)
Hash identifier:          ZFMGPfO75+lNHQrn6kQMRN4UV6oDfakKB842SCKD6lw=
Subject key identifier:   36:C1:86:BB:F0:3F:19:A9:6D:6C:D9:C7:7F:A5:C6:0F:11:71:23:5A
Authority key identifier: 77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0
Certificate issuer:       /CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
Certificate serial:       707AAD9FF4885C91565E50BF9FD1411A54B9652C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
Manifest number:          D3
Signing time:             Sat 06 Dec 2025 06:40:00 +0000
Manifest this update:     Sat 06 Dec 2025 06:35:00 +0000
Manifest next update:     Sun 07 Dec 2025 08:16:00 +0000
Files and hashes:         1: 77B49FAE0B44A260013E4F5043DD07033113F7D0.crl (hash: Sx4z83Q6zZoqUTl0uaippC3j4XLfirNP0HNvAaltP/E=)
                          2: 323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (hash: wDwmD6PxnkZP/5JQu4bI7J3qwEKLTRwIegHE8jB8b+g=)
                          3: 3138372e36322e37362e302f32322d3234203d3e20323639373133.roa (hash: 3PuVlK9Wbfd6JDAddT6D+SfL4fz2ah8LpggEq9y8RRo=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl
                          rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7a:ad:9f:f4:88:5c:91:56:5e:50:bf:9f:d1:41:1a:54:b9:65:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
        Validity
            Not Before: Dec  6 06:35:00 2025 GMT
            Not After : Dec  7 08:16:00 2025 GMT
        Subject: CN=36C186BBF03F19A96D6CD9C77FA5C60F1171235A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:2e:9d:d5:5c:69:38:85:b9:54:78:8a:05:
                    af:22:02:5c:3a:99:cf:ab:26:28:72:a9:b0:26:39:
                    fc:91:41:37:b1:25:85:67:30:a8:82:86:93:07:ef:
                    2c:90:1b:e5:5c:e1:19:a1:f0:91:d8:e9:6c:4b:1b:
                    0b:cf:04:f8:20:17:fe:4d:b0:b5:a6:41:07:33:a2:
                    df:45:4d:2f:d3:69:88:eb:27:31:4b:5e:f1:15:14:
                    46:11:90:c7:9f:2f:66:0e:16:b5:b1:8c:38:a5:04:
                    24:d7:33:3f:94:aa:c0:d3:1c:48:d9:78:88:46:1d:
                    ce:64:9a:88:51:be:6d:b4:ae:05:59:1e:37:ac:13:
                    1e:a6:7e:85:cd:6d:46:ee:5a:14:75:14:69:30:da:
                    0d:d1:6b:0f:5a:39:11:01:94:a8:e5:70:aa:65:2e:
                    78:0c:5e:8d:df:62:32:54:fd:5a:0d:39:1f:fe:4c:
                    85:c5:52:e7:02:ac:a5:f0:75:d2:de:24:64:0b:9e:
                    70:f2:3b:9d:dc:48:53:90:2d:86:a7:2c:14:a9:7a:
                    dd:8b:bd:01:9b:9a:5c:77:31:2d:6a:1d:e7:c2:f2:
                    6f:5f:52:ce:79:b7:28:0a:25:3f:fa:a9:10:4a:1b:
                    cc:7e:71:e6:7c:d7:ec:56:0b:d4:73:5a:10:65:80:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:86:BB:F0:3F:19:A9:6D:6C:D9:C7:7F:A5:C6:0F:11:71:23:5A
            X509v3 Authority Key Identifier:
                keyid:77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:86:02:d6:41:f6:dd:a2:b8:b1:50:05:da:de:1d:93:87:
         92:d9:95:d9:ee:fa:53:0b:47:0e:25:ef:9f:3a:ed:c1:bf:8e:
         f7:52:5f:2c:18:ea:72:ea:29:c8:26:cc:64:82:c4:da:27:1b:
         e5:f5:37:fa:13:33:89:11:38:d8:4d:df:85:26:0f:fd:e0:22:
         31:98:00:bb:d4:5d:1c:d3:1c:20:74:ee:8f:7a:15:37:e1:bf:
         ee:39:0b:45:90:d7:27:0c:44:4b:34:df:45:98:87:d8:fb:12:
         0a:b5:2f:e4:52:b1:26:4c:2e:58:d7:87:fe:06:82:17:0c:08:
         be:83:ff:9c:4e:66:fe:18:ee:45:52:3c:bf:a5:f2:6d:c1:dd:
         81:9e:b3:79:6f:d2:16:a0:43:a3:82:08:f1:7a:15:74:82:f7:
         0f:30:3c:17:78:fc:d9:c8:af:4a:fe:e1:36:0b:e0:4c:f3:5b:
         99:1b:3e:ed:ff:e6:73:2b:14:bf:c3:f2:34:9c:c8:68:31:c6:
         5a:28:40:15:0a:dc:5e:4c:76:0b:71:d2:d2:31:7a:07:7c:50:
         34:88:d4:2f:5f:14:61:86:e2:5b:95:b5:3f:97:52:6b:9c:91:
         42:68:7a:6b:28:11:31:3d:5d:46:14:26:fa:ee:b5:d5:46:03:
         7a:15:ac:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcHqtn/SIXJFWXlC/n9FBGlS5ZSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdCNDlGQUUwQjQ0QTI2MDAxM0U0RjUwNDNERDA3MDMz
MTEzRjdEMDAeFw0yNTEyMDYwNjM1MDBaFw0yNTEyMDcwODE2MDBaMDMxMTAvBgNV
BAMTKDM2QzE4NkJCRjAzRjE5QTk2RDZDRDlDNzdGQTVDNjBGMTE3MTIzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTS6d1VxpOIW5VHiKBa8iAlw6
mc+rJihyqbAmOfyRQTexJYVnMKiChpMH7yyQG+Vc4Rmh8JHY6WxLGwvPBPggF/5N
sLWmQQczot9FTS/TaYjrJzFLXvEVFEYRkMefL2YOFrWxjDilBCTXMz+UqsDTHEjZ
eIhGHc5kmohRvm20rgVZHjesEx6mfoXNbUbuWhR1FGkw2g3Raw9aOREBlKjlcKpl
LngMXo3fYjJU/VoNOR/+TIXFUucCrKXwddLeJGQLnnDyO53cSFOQLYanLBSpet2L
vQGbmlx3MS1qHefC8m9fUs55tygKJT/6qRBKG8x+ceZ81+xWC9RzWhBlgEwJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUNsGGu/A/GaltbNnHf6XGDxFxI1owHwYDVR0j
BBgwFoAUd7SfrgtEomABPk9QQ90HAzET99AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVR
Q1AvMC83N0I0OUZBRTBCNDRBMjYwMDEzRTRGNTA0M0REMDcwMzMxMTNGN0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3QjQ5RkFFMEI0NEEyNjAw
MTNFNEY1MDQzREQwNzAzMzExM0Y3RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEtwU2FzZnlLRERaNExNbmJka2lhVWFmcUZxNUphelVSY1hyVWh3NDVRQ1AvMC83
N0I0OUZBRTBCNDRBMjYwMDEzRTRGNTA0M0REMDcwMzMxMTNGN0QwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe+uGAtZB9t2iuLFQBdreHZOHktmV2e76UwtHDiXvnzrtwb+O91JfLBjqcuop
yCbMZILE2icb5fU3+hMziRE42E3fhSYP/eAiMZgAu9RdHNMcIHTuj3oVN+G/7jkL
RZDXJwxESzTfRZiH2PsSCrUv5FKxJkwuWNeH/gaCFwwIvoP/nE5m/hjuRVI8v6Xy
bcHdgZ6zeW/SFqBDo4II8XoVdIL3DzA8F3j82civSv7hNgvgTPNbmRs+7f/mcysU
v8PyNJzIaDHGWihAFQrcXkx2C3HS0jF6B3xQNIjUL18UYYbiW5W1P5dSa5yRQmh6
aygRMT1dRhQm+u611UYDehWsTg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:30:58 2025 by rpki-client