This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
File:                     D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft (raw, json)
Hash identifier:          HV7/4Ikz5yrJ19uqP16iqnepgFL2JEGdE6maffjrxlw=
Subject key identifier:   F3:76:46:EB:33:BA:0E:50:DE:05:C3:2A:F8:A5:DD:31:FF:F3:8D:9E
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Certificate issuer:       /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial:       49598341364CB2F62B72C6DD5C4F87C5CC758D42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
Manifest number:          012F
Signing time:             Sun 21 Dec 2025 21:28:27 +0000
Manifest this update:     Sun 21 Dec 2025 21:23:27 +0000
Manifest next update:     Mon 22 Dec 2025 23:54:27 +0000
Files and hashes:         1: 3230302e33362e3231322e302f32322d3234203d3e20323731333833.roa (hash: uYfQM6YKSgvOOW9mte5IfDz0qPNh0BQj/v17JCn1X+c=)
                          2: D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl (hash: wAKYrB3ZGlO9iwBN1NmNOyGMXe6Uyvs8bdliY/0oahM=)
                          3: 323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (hash: vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Dec 2025 23:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:83:41:36:4c:b2:f6:2b:72:c6:dd:5c:4f:87:c5:cc:75:8d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
        Validity
            Not Before: Dec 21 21:23:27 2025 GMT
            Not After : Dec 22 23:54:27 2025 GMT
        Subject: CN=F37646EB33BA0E50DE05C32AF8A5DD31FFF38D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:9b:62:e2:11:e5:aa:94:4b:f6:13:f0:67:
                    40:6d:82:87:13:49:84:d2:89:73:86:16:ec:a1:2f:
                    7f:d7:69:98:21:2e:77:31:d5:cf:88:9c:f8:8b:e7:
                    63:b7:9a:6f:73:e3:b9:c7:b4:b0:e0:60:55:6d:5e:
                    66:f9:8c:5e:fc:0d:78:63:d3:dd:5b:2f:34:f9:9c:
                    17:96:a6:47:90:04:58:8a:42:0e:9a:8b:7e:03:3d:
                    ab:d7:20:c0:e1:96:4d:5f:55:59:8d:2c:6d:68:3e:
                    eb:b5:37:42:13:ca:95:43:d8:42:60:66:18:a2:d4:
                    dd:dd:82:f5:90:d5:86:ff:ef:86:7d:8b:1d:4c:dd:
                    aa:cd:5f:84:7e:f1:95:fc:1e:51:2f:9a:ba:92:da:
                    47:3e:c3:57:b5:8f:ed:6d:92:06:dc:f1:2d:3a:b5:
                    88:85:8f:f7:7b:07:0d:de:de:0e:06:cd:76:8e:c9:
                    d7:4e:a3:f2:54:57:68:91:f5:3c:4c:2e:10:c9:7f:
                    df:c4:0a:a3:2c:7b:82:1b:7f:72:b0:75:89:de:a2:
                    5b:5c:12:d6:58:0b:12:80:86:c0:0a:fd:f8:39:c0:
                    b6:50:37:09:b4:cb:02:91:48:03:e4:5a:4f:9f:3e:
                    f4:39:00:53:48:cc:d0:88:1d:10:09:0e:82:c5:c9:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:76:46:EB:33:BA:0E:50:DE:05:C3:2A:F8:A5:DD:31:FF:F3:8D:9E
            X509v3 Authority Key Identifier:
                keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:5b:69:25:ea:5e:ea:50:a4:68:b1:e0:6e:c1:1a:74:73:
         1f:81:51:6d:87:fb:0c:38:12:57:c2:a2:60:26:f8:4c:95:90:
         2e:99:e3:86:da:94:b9:22:97:6c:03:9e:1c:ee:c3:2f:ad:7e:
         48:65:ff:40:b9:2a:b0:05:9c:90:23:e5:21:88:7f:e0:4b:b0:
         df:27:62:f9:bb:78:14:af:72:47:58:31:bb:e4:6b:b7:d8:66:
         9f:ae:5d:9f:d6:a8:34:65:e8:88:9d:60:68:27:22:d5:b4:1a:
         10:d8:35:af:30:1a:59:7f:60:78:2f:34:04:d9:9f:e9:f6:16:
         25:28:07:c4:95:d5:2b:f0:54:35:0f:ab:8e:38:1d:02:3d:a9:
         4a:2a:86:c8:3b:c0:76:b3:b8:fa:66:a6:84:fd:0b:68:90:51:
         4a:10:46:22:98:ab:d7:bf:c8:19:cf:d1:bf:37:92:85:3f:62:
         15:3f:82:51:b1:69:26:0e:83:b2:a9:30:a9:8e:6e:f8:77:40:
         60:3e:30:c2:c4:22:59:ff:5a:6e:a6:e8:bc:ec:6f:d1:8f:20:
         79:aa:c8:d0:44:9f:01:e0:0a:28:d0:04:55:0b:7b:32:42:c5:
         cd:83:f2:0e:62:ae:b4:d3:02:db:ae:88:f0:50:6e:8b:57:ce:
         f1:2c:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:55:32 2025 by rpki-client