This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
File:                     8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft (raw, json)
Hash identifier:          b7/YCrT9suhsp4SKblRxj5P8GwztO6Y7T6yBrq0NS/s=
Subject key identifier:   BE:D6:72:02:FE:76:27:D0:73:DD:E8:3C:65:15:EE:9D:1C:47:0E:A9
Authority key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53
Certificate issuer:       /CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
Certificate serial:       5D15FD4AC99DB919E5C734EC8BC2C63F1DC1125F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft
Manifest number:          0157
Signing time:             Tue 30 Sep 2025 18:58:25 +0000
Manifest this update:     Tue 30 Sep 2025 18:53:25 +0000
Manifest next update:     Wed 01 Oct 2025 20:15:25 +0000
Files and hashes:         1: 323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (hash: B9yyPilbit54yuLGAwHx6lBcYI9SLNV/Vu7wzavs0L0=)
                          2: 34352e37312e32302e302f32322d3232203d3e20323637353936.roa (hash: 0QXSTautiCyMFupNZxOXq4YJInWZvXr4WcMR6zNjHRg=)
                          3: 8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl (hash: r/tuDuhUxUQXpyTAzXl5pobiE4Gody65aOzNlA50iUU=)
                          4: 323830343a343365303a383030303a3a2f33332d3333203d3e20323637353936.roa (hash: L9m9fbPrtD0Y/5M8u0dpOeN4zm7LJLcaHkb77JY6ElU=)
                          5: 34352e37312e32302e302f32332d3233203d3e20323637353936.roa (hash: zO4I0qndWmCmnKcO/HqSBUXpHWY4VpaAjJ0Hv1qBqn8=)
                          6: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (hash: KDgaZGdtg7K4+1b9RJ67m/YG/mumJ77S7kdCF1jA1Yw=)
                          7: 323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (hash: cXs3CrAvByI3AyasrjvXExTkGUIxlGxV4ZiNkjQ09Hc=)
                          8: 34352e37312e32312e302f32342d3234203d3e20323637353936.roa (hash: FwZX4z5zpuXMQ0uyraa36d4EKNR8+PqRDHgBI4WBA1s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:15:fd:4a:c9:9d:b9:19:e5:c7:34:ec:8b:c2:c6:3f:1d:c1:12:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153
        Validity
            Not Before: Sep 30 18:53:25 2025 GMT
            Not After : Oct  1 20:15:25 2025 GMT
        Subject: CN=BED67202FE7627D073DDE83C6515EE9D1C470EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:24:76:15:71:6b:70:65:80:82:a4:9f:9b:
                    6d:e6:dc:cf:65:2f:82:77:12:ee:a0:7c:63:f1:73:
                    1b:95:96:65:e3:8e:44:01:f0:4f:a0:f9:f5:5a:ea:
                    2b:48:d0:64:ba:32:1e:0c:ee:04:f5:c7:7b:af:d0:
                    cd:ef:10:ba:7e:9b:01:b6:8c:af:02:a1:6c:86:f8:
                    d7:20:5b:f8:dc:17:a4:e2:74:22:f1:71:ec:33:a1:
                    b9:bb:78:1b:6f:c2:88:e0:bf:da:68:29:bf:b2:44:
                    13:12:a7:3b:8c:f4:d8:e4:c2:90:6f:80:14:d3:f7:
                    04:1f:1f:67:5c:19:a0:29:6d:b2:a0:e2:5c:48:90:
                    8a:5c:0f:10:72:95:ce:d2:e7:15:72:a3:e8:65:f4:
                    77:3c:ae:23:63:bd:de:92:1d:dc:43:e3:04:c0:97:
                    11:40:55:20:6e:b9:05:e5:27:22:25:6e:ab:b1:eb:
                    98:c2:40:b0:1e:a2:20:a1:63:a9:a0:90:4f:44:50:
                    2d:0e:43:86:e0:0b:af:7d:c7:04:23:ab:fb:bc:02:
                    51:85:67:ef:a2:0d:80:9a:09:90:5d:ac:24:b8:39:
                    b7:c8:ad:04:d7:fc:84:4c:86:7d:a5:c7:97:54:65:
                    6a:d4:a0:f9:a4:ee:57:1a:be:f3:8e:2d:40:88:ec:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:72:02:FE:76:27:D0:73:DD:E8:3C:65:15:EE:9D:1C:47:0E:A9
            X509v3 Authority Key Identifier:
                keyid:8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:0a:ea:49:eb:86:a5:e0:cb:74:cd:6d:38:38:3d:8a:be:
         77:22:e7:ae:de:9e:45:fa:a9:49:97:b2:16:4e:69:43:6e:80:
         d4:9d:30:3c:77:94:5a:a7:e9:b6:50:78:92:e5:32:4e:1e:0e:
         45:ae:f1:9c:01:96:03:e0:c4:82:03:7f:09:02:d3:62:67:93:
         de:6a:15:cc:3c:28:a1:8a:04:54:d8:ba:4f:9e:39:13:ad:00:
         e8:4d:89:9c:ca:7d:3f:09:2f:64:77:05:a4:97:5c:18:f6:85:
         bd:46:62:da:d2:e4:80:f1:bc:79:fe:90:0a:0b:65:32:8d:b4:
         85:14:ac:5a:8b:e5:eb:8d:f9:c7:f6:24:28:15:dc:5c:6e:ee:
         24:27:4c:d2:3b:30:09:f1:13:b5:89:ba:5d:f9:2a:49:83:d1:
         a5:df:cd:fe:6f:f6:c2:d0:30:a0:5d:80:1e:72:92:9d:f3:11:
         fe:90:24:c8:75:0f:95:23:22:6d:e5:41:b2:ef:c2:c7:4b:54:
         96:7b:84:7a:93:00:c3:41:19:0f:6f:72:45:cd:50:b3:ed:db:
         8d:02:38:8e:0a:a5:eb:60:e4:e6:e5:95:c9:d6:4d:f0:e3:aa:
         58:08:1c:ac:35:fa:4b:e1:4a:8a:b7:40:1e:68:b9:ed:94:5e:
         19:ae:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:08:55 2025 by rpki-client