This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
File:                     6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft (raw, json)
Hash identifier:          Nuc+pm+Li9v+gqWxeImKNOFhrfIHl2d3r9s6BEtUdWE=
Subject key identifier:   08:40:BE:DA:95:CF:5F:8D:31:5A:CA:22:55:F3:F7:77:92:6E:CC:4B
Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1
Certificate issuer:       /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
Certificate serial:       758C24004FF765DD53ADDCF070E82E6A422F6965
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft
Manifest number:          02D2
Signing time:             Tue 30 Sep 2025 03:41:56 +0000
Manifest this update:     Tue 30 Sep 2025 03:36:56 +0000
Manifest next update:     Wed 01 Oct 2025 06:40:56 +0000
Files and hashes:         1: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl (hash: FnePxeKzucjo20hss7PFEEdqGQx6VXuXNBd884XnlBU=)
                          2: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:24:00:4f:f7:65:dd:53:ad:dc:f0:70:e8:2e:6a:42:2f:69:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1
        Validity
            Not Before: Sep 30 03:36:56 2025 GMT
            Not After : Oct  1 06:40:56 2025 GMT
        Subject: CN=0840BEDA95CF5F8D315ACA2255F3F777926ECC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:2d:2c:fe:c1:40:54:ae:64:fa:39:03:ff:
                    f6:06:2b:7e:97:1e:73:2b:57:27:16:9d:02:08:ba:
                    1a:2b:a7:fe:9d:38:77:c1:bb:e7:f4:82:f3:2f:85:
                    ec:c3:2d:c5:20:4e:b9:93:f9:66:0b:24:9d:bd:6d:
                    38:41:9e:24:10:e5:be:e8:8d:44:3c:50:d8:eb:22:
                    88:9b:90:1a:9e:79:0d:10:35:d5:9b:37:47:54:cd:
                    c2:38:60:9c:34:ea:06:8a:17:34:5a:8a:35:6f:48:
                    c2:2f:70:91:88:17:96:38:2c:0c:b0:4f:c3:2a:ea:
                    a1:39:24:52:03:ba:25:9e:f9:26:40:3a:04:26:85:
                    95:0a:fe:85:a6:d6:60:21:90:2d:76:09:0a:3e:6c:
                    ec:12:82:90:ac:b5:c4:f4:60:ce:3f:54:a9:65:53:
                    c2:f6:9a:ca:69:15:88:02:25:95:6f:95:9f:74:1d:
                    e0:3e:c2:8a:c2:ac:ab:66:b4:ca:50:1a:80:14:d4:
                    68:b9:b2:a5:7a:da:cb:0d:7e:17:22:f5:eb:b0:fc:
                    ab:cd:3a:93:be:8b:a2:b1:a4:17:ec:a6:e9:51:d8:
                    e6:33:ae:aa:40:42:7d:24:c8:e2:1f:65:58:6b:fe:
                    4f:d5:a6:b5:fe:93:08:a3:70:07:1f:d1:5b:6b:9a:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:BE:DA:95:CF:5F:8D:31:5A:CA:22:55:F3:F7:77:92:6E:CC:4B
            X509v3 Authority Key Identifier:
                keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:93:d9:7a:7d:18:df:1b:61:17:53:88:76:ad:fb:71:bd:
         a5:21:48:d3:1b:83:bf:ae:af:33:9d:3b:94:05:56:83:87:90:
         dc:11:6c:72:7d:a7:f0:09:f0:84:00:7c:e2:ac:8d:de:47:65:
         93:c0:c8:e2:00:40:f6:9b:97:da:3a:1b:75:29:2d:55:4d:ec:
         df:e6:2d:dc:b3:da:dd:3a:8e:75:26:23:51:66:1e:63:74:e0:
         79:a1:72:95:07:95:af:97:17:ea:37:3e:b6:e5:9b:58:a3:10:
         bf:23:48:59:94:51:3b:04:b3:2f:1b:c9:fa:e3:b4:a0:2c:0a:
         4c:77:26:b8:e9:cd:f5:ab:3a:93:91:2a:7b:1e:48:49:fc:12:
         9b:18:1a:f8:d9:50:51:0f:ee:fd:5e:d9:64:40:73:1a:e6:8a:
         cc:d2:ad:b3:00:1a:2e:a0:9c:1f:e6:56:9a:0b:45:58:23:f0:
         3e:9d:c1:1a:11:20:11:0f:b8:09:d1:10:60:ca:e1:50:ce:36:
         43:36:89:cc:a5:ed:3b:40:21:64:e5:b0:ca:43:45:b0:41:0e:
         fd:83:47:8d:e0:fb:c4:13:13:40:78:c9:10:95:ff:00:03:54:
         f9:dd:6a:aa:b1:f9:5e:e3:70:c6:27:c6:a8:1c:10:4e:39:9f:
         05:c2:ac:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdYwkAE/3Zd1TrdzwcOguakIvaWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4NkY3RjBDNDc1NkU2RjNGRTVBQkU0MTRFN0UxOTE4
NDM5MUJFMTAeFw0yNTA5MzAwMzM2NTZaFw0yNTEwMDEwNjQwNTZaMDMxMTAvBgNV
BAMTKDA4NDBCRURBOTVDRjVGOEQzMTVBQ0EyMjU1RjNGNzc3OTI2RUNDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTi0s/sFAVK5k+jkD//YGK36X
HnMrVycWnQIIuhorp/6dOHfBu+f0gvMvhezDLcUgTrmT+WYLJJ29bThBniQQ5b7o
jUQ8UNjrIoibkBqeeQ0QNdWbN0dUzcI4YJw06gaKFzRaijVvSMIvcJGIF5Y4LAyw
T8Mq6qE5JFIDuiWe+SZAOgQmhZUK/oWm1mAhkC12CQo+bOwSgpCstcT0YM4/VKll
U8L2msppFYgCJZVvlZ90HeA+worCrKtmtMpQGoAU1Gi5sqV62ssNfhci9euw/KvN
OpO+i6KxpBfspulR2OYzrqpAQn0kyOIfZVhr/k/VprX+kwijcAcf0Vtrmo8hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUCEC+2pXPX40xWsoiVfP3d5JuzEswHwYDVR0j
BBgwFoAUbIb38MR1bm8/5avkFOfhkYQ5G+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhEN1FyUFBpQmFhV0tMOW5wcXlzS0oyQ1NpM0tLQ0pYRGZTc1RyZUpN
SHcvMC82Qzg2RjdGMEM0NzU2RTZGM0ZFNUFCRTQxNEU3RTE5MTg0MzkxQkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDODZGN0YwQzQ3NTZFNkYz
RkU1QUJFNDE0RTdFMTkxODQzOTFCRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QUhEN1FyUFBpQmFhV0tMOW5wcXlzS0oyQ1NpM0tLQ0pYRGZTc1RyZUpNSHcvMC82
Qzg2RjdGMEM0NzU2RTZGM0ZFNUFCRTQxNEU3RTE5MTg0MzkxQkUxLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGsyT2Xp9GN8bYRdTiHat+3G9pSFI0xuDv66vM507lAVWg4eQ3BFscn2n8Anw
hAB84qyN3kdlk8DI4gBA9puX2jobdSktVU3s3+Yt3LPa3TqOdSYjUWYeY3TgeaFy
lQeVr5cX6jc+tuWbWKMQvyNIWZRROwSzLxvJ+uO0oCwKTHcmuOnN9as6k5Eqex5I
SfwSmxga+NlQUQ/u/V7ZZEBzGuaKzNKtswAaLqCcH+ZWmgtFWCPwPp3BGhEgEQ+4
CdEQYMrhUM42QzaJzKXtO0AhZOWwykNFsEEO/YNHjeD7xBMTQHjJEJX/AANU+d1q
qrH5XuNwxifGqBwQTjmfBcKspA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 12:08:54 2025 by rpki-client