This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft
File:                     D01D2EC076BDA62D438B972886851503EED04B2F.mft (raw, json)
Hash identifier:          YF9bmzyBFe7c5O5Gnmnd2wc7gtkHGDz3XFifJ/oO/ko=
Subject key identifier:   D2:64:83:84:AE:79:AC:76:EB:61:AC:A5:A7:A2:0C:C7:69:37:07:09
Authority key identifier: D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F
Certificate issuer:       /CN=D01D2EC076BDA62D438B972886851503EED04B2F
Certificate serial:       1322FC4F6C3E8920FC83A47F82E667479B00D4DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft
Manifest number:          52
Signing time:             Sat 22 Nov 2025 06:34:58 +0000
Manifest this update:     Sat 22 Nov 2025 06:29:58 +0000
Manifest next update:     Sun 23 Nov 2025 09:11:58 +0000
Files and hashes:         1: 34352e3233372e3230342e302f32322d3234203d3e2030.roa (hash: kUcj68eyBC5ukf19L72YnNZ7Sd6sAZ16sWy9SBGoI10=)
                          2: 323830343a346565383a3a2f33322d3438203d3e2030.roa (hash: 2sP6uFKh/qzEQUnmI2XBkO1+/mEh+lqAHdRmfXyf1Vc=)
                          3: D01D2EC076BDA62D438B972886851503EED04B2F.crl (hash: WPZ5LwQHND5B+TrhF1ht84J6tywOZIO7rWgRfBWMnzY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl
                          rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Nov 2025 09:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:22:fc:4f:6c:3e:89:20:fc:83:a4:7f:82:e6:67:47:9b:00:d4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D01D2EC076BDA62D438B972886851503EED04B2F
        Validity
            Not Before: Nov 22 06:29:58 2025 GMT
            Not After : Nov 23 09:11:58 2025 GMT
        Subject: CN=D2648384AE79AC76EB61ACA5A7A20CC769370709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:af:15:03:aa:fa:48:35:03:58:e5:eb:4c:
                    dd:93:e5:f6:46:2b:15:b3:19:26:2f:dd:7f:90:bb:
                    c5:5f:21:bb:81:e3:c7:c9:fb:9d:1b:bb:28:c2:53:
                    a7:25:ea:92:31:0c:51:16:1b:fb:08:01:77:97:23:
                    48:63:e3:ed:fd:d4:49:06:62:50:33:fd:43:e1:1b:
                    d3:1a:d9:a3:4c:2a:d1:df:b8:99:fa:89:a7:fb:a2:
                    0c:a9:90:c3:3d:99:8a:bc:60:53:7d:0f:8d:e4:71:
                    25:ab:87:ce:4f:7a:07:30:da:f4:39:03:9b:55:2d:
                    aa:b1:fa:03:ca:64:f7:98:a4:46:84:9a:47:9f:56:
                    9b:5b:d8:85:84:4b:cd:35:41:19:8c:7c:34:1e:a7:
                    7c:bb:c1:63:09:1b:8b:5e:70:b4:89:76:92:d2:c4:
                    4c:d3:e5:47:da:c1:b8:50:06:1f:83:84:5d:bd:dd:
                    42:b3:d8:ca:be:00:ae:33:64:02:9e:33:37:99:74:
                    b2:53:4e:0e:52:a4:39:38:41:c0:8e:69:c6:44:5d:
                    bc:f9:89:d9:27:47:39:57:b1:d4:03:8d:c6:45:2f:
                    26:59:59:70:bf:fd:b2:9b:3b:6d:39:16:4d:83:c5:
                    7b:08:8e:50:a4:2d:d6:13:f7:a7:bf:0d:e8:37:e9:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:64:83:84:AE:79:AC:76:EB:61:AC:A5:A7:A2:0C:C7:69:37:07:09
            X509v3 Authority Key Identifier:
                keyid:D0:1D:2E:C0:76:BD:A6:2D:43:8B:97:28:86:85:15:03:EE:D0:4B:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01D2EC076BDA62D438B972886851503EED04B2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4APLWhihknPUvKicrFo2yQLbgZ4cxLHXYwkPUB6enb3b/0/D01D2EC076BDA62D438B972886851503EED04B2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:21:2e:fd:52:50:6c:54:d9:bf:10:89:02:67:21:17:b3:
         2d:60:ad:3c:b9:1a:90:bf:8a:8d:9d:15:43:bb:a1:10:c1:83:
         c7:be:e3:04:4c:76:0a:6e:eb:eb:99:f0:f0:76:cc:2e:1b:9f:
         09:30:76:54:27:0e:29:e4:55:e8:5a:49:87:cb:49:a3:c8:2a:
         0b:3a:91:b4:d5:5d:9c:f4:46:14:0a:80:a9:30:af:f7:25:21:
         16:41:72:39:d4:40:10:08:c8:69:43:d7:74:e7:89:0b:fb:39:
         05:b2:0f:50:3d:8f:e8:84:d2:ad:98:68:7c:46:d9:81:49:d6:
         6c:87:55:41:35:5b:54:1c:6e:ba:81:ad:e6:e1:fb:c3:5e:f5:
         a0:26:0a:92:25:20:bf:35:f8:fe:10:05:4d:2f:33:73:0f:bd:
         1b:af:9a:a8:1f:9d:94:dd:df:1c:d5:6f:ab:9d:6b:d0:7d:8b:
         a7:f6:e8:a6:84:fa:31:09:a2:e5:48:d1:84:2e:10:63:d0:a5:
         b8:d5:eb:08:65:52:05:73:67:ac:89:3f:bc:ed:cf:db:63:60:
         52:c8:ea:aa:04:0d:37:fc:96:3b:e3:5c:01:f1:d5:41:a9:96:
         3f:51:d9:58:6c:1a:67:0e:d6:0f:e7:9f:cb:54:a5:64:c9:c9:
         91:37:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:50:20 2025 by rpki-client