This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
File:                     DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft (raw, json)
Hash identifier:          PwmkDL0p9xSvO/RgTI+7aQPj5oUHsotnfIrhjwGVsC4=
Subject key identifier:   7C:CB:5E:F6:B4:2B:81:E3:B5:9B:9C:D8:FA:2D:38:CD:32:C1:7E:FA
Authority key identifier: DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B
Certificate issuer:       /CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
Certificate serial:       4E49093383F109FD4C04F8D3AAD7CB6EB4B3B709
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
Manifest number:          015F
Signing time:             Sat 06 Dec 2025 23:02:24 +0000
Manifest this update:     Sat 06 Dec 2025 22:57:24 +0000
Manifest next update:     Mon 08 Dec 2025 02:53:24 +0000
Files and hashes:         1: DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl (hash: fIWSwWbTcPQ67M0pl6cQOyCi3dn6cBar9+uKpJ8faRg=)
                          2: 323830343a313437383a3a2f33322d3438203d3e20323633333332.roa (hash: qysovmzvgdL2y5g84WqCqWCD/W5wUzH/Lm3JWvovoeY=)
                          3: 3139312e33362e3132382e302f32322d3234203d3e20323633333332.roa (hash: AD/gp5MkRPMYegFOn1WQUyh52T0eFPqEEOU8suKcE9U=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl
                          rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Dec 2025 02:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:49:09:33:83:f1:09:fd:4c:04:f8:d3:aa:d7:cb:6e:b4:b3:b7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDFE50B85B1681B34DAB1409FBD31C636A0474B
        Validity
            Not Before: Dec  6 22:57:24 2025 GMT
            Not After : Dec  8 02:53:24 2025 GMT
        Subject: CN=7CCB5EF6B42B81E3B59B9CD8FA2D38CD32C17EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:24:79:88:e2:14:22:35:aa:fa:48:06:d0:
                    8f:94:4f:1a:23:9a:13:43:4f:b0:42:87:0b:c4:89:
                    49:f0:27:9a:5d:be:b4:c0:a7:64:00:d7:fd:e6:d5:
                    c3:ed:2e:02:82:3c:2b:27:31:ec:51:6d:9d:64:14:
                    a9:11:bc:b3:3c:8d:eb:f6:f0:1c:d7:7f:ba:f8:ad:
                    5b:9d:b6:0d:4d:84:bd:1e:e3:e7:ba:54:25:41:15:
                    71:49:83:d4:4b:74:46:c4:a0:8d:aa:f5:89:34:ff:
                    64:3b:0f:57:44:c2:e0:6c:9c:a0:c4:af:ba:bd:c7:
                    a9:82:4a:01:34:de:51:c6:39:3a:36:6d:be:b5:24:
                    a0:02:48:26:e0:50:c5:21:90:9d:e7:78:89:30:b6:
                    88:85:a5:fe:24:4f:93:4d:d5:6a:87:fa:1b:fa:37:
                    85:ca:aa:1b:1b:69:08:4c:71:56:45:96:33:3d:63:
                    03:53:1d:80:82:ca:9b:8c:32:57:fa:87:52:ba:c4:
                    85:45:f0:af:7f:dd:42:68:bf:c4:86:a6:94:2e:35:
                    9d:6c:91:ea:ff:b4:e7:3c:ba:b2:64:d9:5b:db:69:
                    d0:0a:e5:1f:39:b8:b8:cc:86:b2:78:ac:13:46:53:
                    68:e3:8a:d5:dd:68:23:b0:e9:04:cf:99:c1:24:5c:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:5E:F6:B4:2B:81:E3:B5:9B:9C:D8:FA:2D:38:CD:32:C1:7E:FA
            X509v3 Authority Key Identifier:
                keyid:DE:DF:E5:0B:85:B1:68:1B:34:DA:B1:40:9F:BD:31:C6:36:A0:47:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/DEDFE50B85B1681B34DAB1409FBD31C636A0474B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:49:1e:42:f9:3a:cc:78:54:2b:f4:50:2c:67:24:cf:bd:54:
         d0:ba:ae:4b:2f:b0:5d:29:a7:c1:d2:0d:32:d4:fe:a7:1e:20:
         47:19:e2:25:83:72:ad:53:ed:03:3a:a5:87:1a:7f:6d:a6:05:
         b3:52:1e:f6:f0:09:08:b2:9e:0a:11:a5:6b:0f:8a:27:a0:7f:
         a4:da:25:6e:4e:59:1e:4f:6e:a2:77:ee:b2:0d:f8:45:ba:0a:
         8b:c7:b6:b0:51:a0:73:7a:b3:49:08:9c:aa:7b:4d:80:0d:bd:
         6f:94:0a:b0:2b:d4:ff:20:09:b0:21:12:72:37:5b:6e:13:26:
         12:50:40:0a:50:04:01:ac:01:3f:cd:82:9f:28:06:1c:aa:4d:
         bb:4a:85:76:14:fd:d3:9d:43:60:3e:37:e3:f6:f3:51:1d:79:
         c7:31:76:25:bc:f3:03:5b:43:13:66:d8:5d:52:89:b2:2f:6c:
         2b:a2:9c:0f:ec:ca:37:e0:db:22:d7:f4:07:46:bc:00:60:e3:
         e0:96:91:c6:08:6c:27:11:8a:ff:e6:ed:9d:e4:5b:6f:a5:7b:
         dd:32:7f:5d:b8:62:cf:fb:67:36:81:5c:64:b5:c0:94:74:ee:
         c3:f1:76:de:b7:bc:f8:e5:26:9f:97:6e:da:b1:02:97:08:64:
         c4:c4:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:21 2025 by rpki-client