This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
File:                     CBED8B77145C146C6E2002637F70D52E41B65B78.mft (raw, json)
Hash identifier:          xSQDSZzuGyzo2OA1Ra1D6Jsr0xRuX8+WyktMGRzyAIM=
Subject key identifier:   58:97:17:A6:C8:27:95:8C:94:0A:18:B4:AB:4F:05:11:EF:C2:FA:26
Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78
Certificate issuer:       /CN=CBED8B77145C146C6E2002637F70D52E41B65B78
Certificate serial:       19F8B30233F8A8035D73323A7F8888300CB9A179
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
Manifest number:          0346
Signing time:             Wed 24 Dec 2025 10:05:41 +0000
Manifest this update:     Wed 24 Dec 2025 10:00:41 +0000
Manifest next update:     Thu 25 Dec 2025 10:42:41 +0000
Files and hashes:         1: CBED8B77145C146C6E2002637F70D52E41B65B78.crl (hash: CWLOpnkckYhkTv2k5RNyPGb5UuvxOxqdzTZZT2rrxpg=)
                          2: 323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (hash: u3QX0Sw01r5zWK9SI7e/zZteNQlDp6bzw/sy4KdIv84=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl
                          rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 10:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f8:b3:02:33:f8:a8:03:5d:73:32:3a:7f:88:88:30:0c:b9:a1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78
        Validity
            Not Before: Dec 24 10:00:41 2025 GMT
            Not After : Dec 25 10:42:41 2025 GMT
        Subject: CN=589717A6C827958C940A18B4AB4F0511EFC2FA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:61:11:36:21:9e:f7:f4:fe:f2:14:3e:8c:
                    92:ab:bf:97:6a:43:82:9c:cc:b1:ab:03:12:47:1f:
                    d2:1c:33:36:c3:15:3d:5d:b6:3f:22:a2:29:f8:f3:
                    07:4c:e2:ce:5f:6f:35:67:a9:0e:78:ed:36:b9:5e:
                    6d:99:53:e1:ce:6d:b4:52:65:68:5b:f5:3a:86:7b:
                    ca:7e:0c:69:28:d1:64:a8:7e:d4:f6:86:5b:fa:85:
                    55:4c:f0:c5:65:75:e4:ee:4a:73:62:91:3f:67:54:
                    ed:7b:6c:fa:1c:78:43:d9:f1:d7:dd:b8:a8:f7:d7:
                    db:3b:24:18:50:50:1c:3e:2d:8c:a7:1f:62:8d:5a:
                    b4:d7:1b:40:3c:a9:58:df:23:07:3b:b6:19:35:0a:
                    b4:55:39:88:0c:75:a3:53:6c:ae:fa:6c:c6:59:f2:
                    26:8e:b5:55:21:ea:6a:72:c3:7e:15:12:b6:3c:af:
                    fd:92:78:34:01:d4:c8:22:93:9a:ac:70:62:25:b8:
                    71:d2:ad:3a:4a:e6:ee:30:9d:95:ae:2d:6a:fd:2f:
                    ab:f7:ac:52:a9:d8:2f:f0:30:26:bc:d4:af:47:98:
                    1d:bc:b4:47:27:26:96:a7:c0:bf:96:32:5a:19:4f:
                    7f:b2:75:13:a9:b6:bf:60:b5:cc:61:94:d1:07:cf:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:17:A6:C8:27:95:8C:94:0A:18:B4:AB:4F:05:11:EF:C2:FA:26
            X509v3 Authority Key Identifier:
                keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:19:b7:5f:4f:38:cd:fc:5b:a4:66:d3:66:7a:5d:ef:48:29:
         f6:0f:84:5f:9c:a4:88:26:41:2f:1c:be:ce:e4:b6:12:5c:ad:
         02:17:1f:1b:6e:40:c8:a0:33:4a:f4:01:25:2e:d1:6d:a8:11:
         c9:76:eb:3f:2b:16:dc:fd:b3:39:1e:a2:dd:1e:5d:14:e1:e9:
         29:a9:3f:c4:9f:ce:60:12:69:da:ee:7c:38:eb:f5:e5:f2:a1:
         55:7a:f4:94:b3:f9:be:9c:c5:44:9c:52:6b:0f:ad:9e:f4:4f:
         b7:ad:ca:46:f5:3a:8d:34:bb:89:80:03:1b:ec:7a:8a:20:a1:
         5c:4d:1d:ac:90:26:02:30:1f:60:67:ab:34:99:ee:3c:33:73:
         d2:63:c8:ed:5a:7b:f3:46:8a:e9:d0:c1:4a:6c:2c:aa:c7:57:
         ce:f3:0a:77:23:c6:35:68:c4:b8:d8:22:70:23:e5:61:4a:e5:
         37:de:0a:a5:5c:82:fe:4d:d7:12:ad:c4:9d:ed:0c:92:2b:d2:
         f2:eb:0f:04:82:07:33:4a:24:f5:1d:5b:c1:2b:d8:38:b8:f8:
         ad:52:6b:09:44:e9:6b:4f:2e:e9:3f:7a:a7:6b:7b:bc:d6:ab:
         98:37:68:06:c9:0a:0f:8d:55:f7:49:8b:9c:2e:d5:81:e3:aa:
         18:7f:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----