This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft
File:                     60492EF363CCBEBD72926A28053650F83D65CC29.mft (raw, json)
Hash identifier:          kXy2s3a5ohkkZRERsQeRnFy4x+TdePxDHL5VtO3p01I=
Subject key identifier:   3B:E4:61:30:87:FA:E8:EC:E8:94:44:18:7B:B8:A5:FE:BD:32:EA:7E
Authority key identifier: 60:49:2E:F3:63:CC:BE:BD:72:92:6A:28:05:36:50:F8:3D:65:CC:29
Certificate issuer:       /CN=60492EF363CCBEBD72926A28053650F83D65CC29
Certificate serial:       308859C06F8409F6E5FCBE154355492B2A777EF3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft
Manifest number:          20
Signing time:             Wed 24 Dec 2025 05:01:41 +0000
Manifest this update:     Wed 24 Dec 2025 04:56:41 +0000
Manifest next update:     Thu 25 Dec 2025 07:09:41 +0000
Files and hashes:         1: 60492EF363CCBEBD72926A28053650F83D65CC29.crl (hash: 3Y3qhbd00aptntmJvAS3MofKuUtXPvUja+AyV9tyzak=)
                          2: 3133382e35392e3138342e302f32322d3234203d3e20323634313034.roa (hash: QmbkinWQi/GNH5CidG00v3VRx+2pXb7DZfVmk7nfc+A=)
                          3: 323830343a323237633a3a2f33322d313238203d3e20323634313034.roa (hash: J7vcvUAbjcaB6WId8GEyEmQ1+qn02r20n+JNM4O4ock=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.crl
                          rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 25 Dec 2025 07:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:88:59:c0:6f:84:09:f6:e5:fc:be:15:43:55:49:2b:2a:77:7e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60492EF363CCBEBD72926A28053650F83D65CC29
        Validity
            Not Before: Dec 24 04:56:41 2025 GMT
            Not After : Dec 25 07:09:41 2025 GMT
        Subject: CN=3BE4613087FAE8ECE89444187BB8A5FEBD32EA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:66:8c:9f:f3:83:db:85:2b:cf:f0:7c:4e:
                    7e:c4:bc:8e:2e:88:3d:d0:39:18:85:cf:81:2e:31:
                    c1:eb:8c:19:74:35:57:cf:ac:b3:f8:60:e3:6d:ef:
                    6f:1a:3b:a8:21:67:56:eb:0f:60:b8:4a:0b:72:a1:
                    c4:0c:98:4e:9a:ac:93:26:95:56:ca:39:e4:34:ee:
                    5c:1b:ff:23:91:a6:71:c0:3d:e6:ab:be:7b:5b:da:
                    7c:fb:08:aa:60:95:cf:c7:c3:32:c7:3f:09:4e:5f:
                    16:c0:86:ec:51:1c:3f:45:e7:1e:df:da:cb:fc:d2:
                    46:12:0f:eb:e4:8d:4d:39:57:46:1f:05:99:b3:98:
                    87:0c:81:96:95:f6:a5:ca:8f:0f:60:fe:33:47:91:
                    1e:28:0c:ca:e7:67:c5:01:72:d1:00:98:77:f5:e9:
                    83:da:c3:fa:18:41:12:63:22:fa:89:96:a6:7b:f9:
                    94:12:83:d9:97:e3:87:6d:45:83:bb:38:66:e0:70:
                    99:ed:1d:41:2e:e3:fd:33:01:61:da:b8:20:ad:0b:
                    0c:b8:5a:97:bf:6c:4b:75:ab:a2:82:06:9b:ab:b7:
                    ff:a4:b9:eb:8c:1b:1e:07:27:dd:fb:cc:27:6c:10:
                    ea:90:97:46:e3:81:ff:d7:df:2f:60:95:39:93:97:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:61:30:87:FA:E8:EC:E8:94:44:18:7B:B8:A5:FE:BD:32:EA:7E
            X509v3 Authority Key Identifier:
                keyid:60:49:2E:F3:63:CC:BE:BD:72:92:6A:28:05:36:50:F8:3D:65:CC:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60492EF363CCBEBD72926A28053650F83D65CC29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nnrsZCMu8fwsJkaZDVSWBPeDT2nUVapoVrC2j7JT2TC/0/60492EF363CCBEBD72926A28053650F83D65CC29.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:d8:7d:e7:66:9b:cb:b1:ba:9f:14:c3:8f:36:79:b7:a9:
         91:67:4e:89:8a:44:00:81:a2:3e:65:87:4e:d9:8d:2a:5a:02:
         af:11:95:f1:60:ab:5f:ab:46:98:38:e7:c0:c7:65:89:c9:83:
         cd:0a:14:d9:61:d3:60:eb:44:d1:cc:cf:a2:fb:a1:2a:6d:21:
         29:ec:0b:36:97:41:b7:0e:53:1d:bc:81:44:6c:1f:3d:41:10:
         0e:80:15:58:56:b9:28:cc:4c:1c:f8:2c:27:1f:bd:de:06:0e:
         35:87:d9:ef:fc:20:a6:54:6e:95:3a:1d:45:3c:11:0a:4d:9a:
         2b:5a:ab:cf:28:c4:a6:8e:01:7a:12:5b:8f:23:44:0f:13:4e:
         d4:f1:12:e3:d0:69:f9:5f:3d:17:a3:0c:e3:f2:d1:34:76:51:
         21:b7:f9:ed:9c:55:c5:da:e6:ad:47:67:78:b9:9f:ad:d9:67:
         56:60:76:20:e5:c7:de:e4:02:47:db:dd:04:ef:c9:6e:bd:e2:
         35:de:db:d3:19:62:72:55:32:0a:d2:54:cc:71:60:26:6b:b2:
         3b:0d:2d:c1:05:e4:f1:bd:d3:66:df:ab:9f:6c:66:df:b3:b1:
         e4:fc:48:b3:76:16:14:99:da:d7:6f:36:b6:05:d0:35:71:cd:
         5a:f2:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:33 2025 by rpki-client