This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft (raw, json)
Hash identifier:          RJUKRjtDCtcGtWq0/S5JnyuViq9K/1ilI12sYIt0QtI=
Subject key identifier:   50:47:7C:E8:37:AC:12:85:CD:3F:CD:FA:49:5A:E1:EF:B2:B2:A9:7D
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       65FE2F63E9DE886069436F2DD0E9FA06A9B8E359
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
Manifest number:          F1
Signing time:             Sat 06 Dec 2025 13:13:48 +0000
Manifest this update:     Sat 06 Dec 2025 13:08:48 +0000
Manifest next update:     Sun 07 Dec 2025 14:54:48 +0000
Files and hashes:         1: 4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl (hash: VlrOb39+9r47X+X9NnzCJqdK71di0QDYrEZDb+UqBNc=)
                          2: 3137372e36362e32382e302f32322d3234203d3e20323633363536.roa (hash: AByqAu5aFAKkVdIxOZPc9IFOefmyvDsFDw/jy1fUyFk=)
                          3: 3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (hash: LFEgWICXHnee4/bGPrqW2v3LYv3dbDv2jg2lbR5xrCI=)
                          4: 3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (hash: DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=)
                          5: 323830343a313066633a3a2f33322d3438203d3e20323633363536.roa (hash: CNvb3KkAA8j3AXGUz/JU+MGKpekSazqUKaqrLKdRZTg=)
                          6: 3137372e35322e3134342e302f32312d3234203d3e20323633363536.roa (hash: q/AvzbSaNaOyUM2kP8iTR4vF99TrI5L54LVhzTBdHSE=)
                          7: 3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (hash: R7MIKUFJ61JnpNcf/kEfY1SDTgaGtaQruSRJo+oewXw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 14:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fe:2f:63:e9:de:88:60:69:43:6f:2d:d0:e9:fa:06:a9:b8:e3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Dec  6 13:08:48 2025 GMT
            Not After : Dec  7 14:54:48 2025 GMT
        Subject: CN=50477CE837AC1285CD3FCDFA495AE1EFB2B2A97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:55:e7:78:95:bb:d9:64:87:52:44:f2:b3:
                    3d:91:c6:a6:5b:88:70:53:79:37:cb:e9:04:e3:cb:
                    2e:95:83:0b:80:65:13:e7:2e:8b:0c:47:49:2c:88:
                    64:dd:ac:3e:b2:5d:61:39:c2:49:82:df:83:44:73:
                    83:39:f5:18:57:a7:56:37:6e:64:b8:0d:07:e5:76:
                    94:f9:8b:94:b5:2f:71:1f:aa:8f:7b:f5:24:f1:b3:
                    09:ed:2c:f8:e7:3f:99:6c:e8:4c:9b:67:9c:d1:c4:
                    17:12:a5:d1:09:c1:dd:89:5b:90:3f:83:54:1a:df:
                    27:2a:0c:a4:d2:fa:fd:91:b2:0d:6e:63:ff:33:a6:
                    10:b0:a5:51:b5:c8:02:47:bb:c9:bc:9a:dc:9e:24:
                    e6:94:d1:ae:2e:7d:2f:b8:cc:a6:fe:ac:87:90:90:
                    b9:2c:79:7a:21:75:ac:5e:cb:65:01:31:75:60:80:
                    6c:d8:31:fe:d1:56:78:b4:dc:68:c0:a7:9b:00:56:
                    fb:cc:ae:b2:35:a7:90:7f:17:4c:e6:0e:96:b9:28:
                    68:1e:12:72:7a:d0:89:79:6a:64:b3:24:15:7f:96:
                    20:52:d4:8c:8a:b2:e5:77:cb:06:b7:e8:5a:ae:be:
                    9f:74:7f:4e:3c:87:32:47:1a:b2:d3:44:45:fd:84:
                    30:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:7C:E8:37:AC:12:85:CD:3F:CD:FA:49:5A:E1:EF:B2:B2:A9:7D
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:31:85:4c:0a:50:c7:8a:9c:4a:27:69:d7:95:58:41:13:26:
         e9:3d:52:b6:dc:3e:cb:8e:6d:eb:50:9b:29:ff:b4:39:26:f3:
         29:d0:96:f3:06:c3:5f:55:8d:64:8f:ba:2a:4b:8c:2e:50:f3:
         45:3d:a8:6d:77:b6:7f:cc:20:ab:5f:7d:e9:ce:ba:89:15:c7:
         3c:9a:56:d3:68:c5:d3:b9:a4:ea:af:c2:00:a7:2c:bf:7b:50:
         2e:1d:d8:10:f3:df:22:e7:81:4e:cb:a6:2c:f3:2c:9a:d7:0c:
         67:ad:4f:b0:6c:73:c4:fc:3d:55:9d:07:9a:34:c7:b4:ca:95:
         84:fd:a8:34:d6:d5:5b:a3:b2:5d:74:bf:36:a4:53:0c:00:64:
         28:e8:61:35:8b:a8:cc:3e:47:05:2f:cf:f4:a1:74:31:a6:75:
         ea:a3:13:02:45:1c:be:41:1b:9b:69:aa:ff:dd:61:1e:b0:38:
         28:8a:ef:2c:87:89:16:db:ab:de:b1:48:c4:0c:42:c5:0f:eb:
         06:a2:45:df:be:57:a9:14:bc:ae:b8:42:1a:4f:f4:09:69:46:
         aa:bb:ce:d2:59:25:24:df:87:74:a1:60:98:b5:49:8e:e2:74:
         b9:31:69:8d:54:2d:16:35:9f:4d:35:88:b5:2b:7e:c6:13:41:
         64:2d:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:04 2025 by rpki-client