This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft
File:                     8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft (raw, json)
Hash identifier:          O6trvbH25zKI7wgp9KGNyPKquGNg5FnFbYcOOkXmH20=
Subject key identifier:   66:A3:8B:98:81:EE:F1:E1:EB:97:04:D4:52:E5:0D:AD:4D:39:BF:D9
Authority key identifier: 81:43:36:5E:C0:3B:44:2A:F5:3A:35:FA:0E:20:67:3F:19:DB:DD:1D
Certificate issuer:       /CN=8143365EC03B442AF53A35FA0E20673F19DBDD1D
Certificate serial:       3A9D4B92651193B938B0D22BBE7F1BC9926640A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8143365EC03B442AF53A35FA0E20673F19DBDD1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft
Manifest number:          0B
Signing time:             Fri 05 Dec 2025 13:29:26 +0000
Manifest this update:     Fri 05 Dec 2025 13:24:26 +0000
Manifest next update:     Sat 06 Dec 2025 17:16:26 +0000
Files and hashes:         1: 8143365EC03B442AF53A35FA0E20673F19DBDD1D.crl (hash: +llKRG1udJHthqeq3lxa3FgtHspHH8E38NOrIjsGPAQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.crl
                          rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8143365EC03B442AF53A35FA0E20673F19DBDD1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Dec 2025 17:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9d:4b:92:65:11:93:b9:38:b0:d2:2b:be:7f:1b:c9:92:66:40:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8143365EC03B442AF53A35FA0E20673F19DBDD1D
        Validity
            Not Before: Dec  5 13:24:26 2025 GMT
            Not After : Dec  6 17:16:26 2025 GMT
        Subject: CN=66A38B9881EEF1E1EB9704D452E50DAD4D39BFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:36:ca:6f:4f:d4:f1:14:46:86:85:be:89:
                    fd:5c:0c:e3:ce:35:c7:3f:79:ee:1d:7f:d2:69:f9:
                    10:98:ee:b6:21:cd:f5:9a:d8:55:bb:18:d8:20:01:
                    45:81:0e:4b:17:92:de:0d:f4:65:53:82:fa:1f:8d:
                    21:45:ed:13:c4:c6:bb:7a:42:04:1b:ae:04:fa:cb:
                    48:2c:85:0b:d6:70:e8:30:43:c5:e1:89:a5:f1:66:
                    bc:59:6f:7f:c4:10:3d:61:d8:13:3b:c1:8e:d4:96:
                    8a:28:3e:42:4e:5e:ec:c6:82:7d:e9:a6:69:75:02:
                    34:c6:c9:e9:8a:a5:29:97:49:45:3e:84:27:0c:6d:
                    38:57:b9:91:2c:a6:d3:23:c3:05:f9:01:72:2f:bf:
                    5e:68:fb:f7:e0:23:d0:ed:ba:12:77:4c:e9:df:d6:
                    8a:8c:c6:67:06:64:f1:ef:f6:10:93:40:12:52:f0:
                    23:8b:12:d4:2c:34:9b:e2:22:43:e1:e4:a1:da:09:
                    b0:2d:e0:3b:2c:25:76:9e:25:39:5b:f6:1e:8e:96:
                    8c:02:fa:a6:48:bc:29:f8:8e:3c:f4:ec:1a:1a:34:
                    b6:b0:4e:36:86:94:7b:d2:54:44:a4:a0:f5:6a:34:
                    6c:2b:c6:12:63:e8:8a:26:2a:e9:0f:1d:cb:17:ec:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A3:8B:98:81:EE:F1:E1:EB:97:04:D4:52:E5:0D:AD:4D:39:BF:D9
            X509v3 Authority Key Identifier:
                keyid:81:43:36:5E:C0:3B:44:2A:F5:3A:35:FA:0E:20:67:3F:19:DB:DD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8143365EC03B442AF53A35FA0E20673F19DBDD1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrW98u99qfrwJd4zfugkRjU84dFmUR3Pux8dCm7kXkJ1/0/8143365EC03B442AF53A35FA0E20673F19DBDD1D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e2:de:1b:07:67:8c:3e:bd:da:48:ac:e7:f1:bb:a9:86:50:
         ec:3e:6b:13:55:bc:0d:0d:94:c8:c4:17:f2:36:c3:8c:c7:e0:
         d3:69:db:b3:92:70:6c:8a:83:e8:09:99:f0:1f:1e:42:c9:72:
         91:3a:61:5c:d3:4d:c1:d1:3e:54:be:e6:f6:f3:03:70:6b:d1:
         b5:b1:6e:c4:e7:dd:f4:1a:09:80:c5:b8:f4:e6:bf:af:0e:dd:
         71:8e:cd:70:25:36:12:07:d6:91:cd:32:ce:78:fc:03:d0:35:
         c3:7c:af:60:c4:11:64:54:55:38:43:14:f5:f4:a5:78:f2:90:
         34:4d:73:fb:e8:81:96:81:04:52:7c:bc:7a:7d:49:e4:1a:5e:
         f0:63:aa:47:4f:40:6d:47:de:19:40:7a:3f:05:3e:27:81:20:
         ba:ff:26:1c:5e:0a:69:cb:2e:f4:48:48:d8:19:4a:58:c4:31:
         3c:08:27:2c:ea:6b:b3:8c:a3:18:9b:c4:c3:f3:77:ac:75:0d:
         c6:e1:e6:f5:b1:ba:db:ae:a9:26:5b:ad:c6:38:12:ec:f1:4b:
         a0:d3:56:f4:48:f7:b5:5c:77:d7:0f:9a:c0:96:fc:42:b4:2f:
         16:d7:c2:e2:4d:53:78:fc:60:8c:af:3a:17:f8:b9:30:1a:31:
         b6:85:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:56:44 2025 by rpki-client