This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.mft
File:                     82570D137F4A2CB963DFFC57F5D09035250E3A33.mft (raw, json)
Hash identifier:          MzZIbD+kAivBdc7zQzlwBBHGha3e0aHzzZe+slu1oMM=
Subject key identifier:   A4:68:CA:E0:74:13:BC:D6:32:D1:67:AB:17:99:D4:57:F3:A6:A6:1C
Authority key identifier: 82:57:0D:13:7F:4A:2C:B9:63:DF:FC:57:F5:D0:90:35:25:0E:3A:33
Certificate issuer:       /CN=82570D137F4A2CB963DFFC57F5D09035250E3A33
Certificate serial:       7E85A0C493759F57EB4326911C452C16D60A5F36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.mft
Manifest number:          033B
Signing time:             Mon 22 Dec 2025 06:25:39 +0000
Manifest this update:     Mon 22 Dec 2025 06:20:39 +0000
Manifest next update:     Tue 23 Dec 2025 07:53:39 +0000
Files and hashes:         1: 82570D137F4A2CB963DFFC57F5D09035250E3A33.crl (hash: xKZyyhNX5+jWPxo6DxE4IjojGzRCFDLBpvKoFYJTMg8=)
                          2: 323830343a313034383a3a2f33322d3438203d3e20323633363238.roa (hash: 2qzFzOA/eotFj3IwpDIUHX+er3Br0v/kka8FrDSUIoU=)
                          3: 3137372e3230302e31362e302f32302d3234203d3e20323633363238.roa (hash: Irsj3VIanba/xlFn4Wjpcl0GCgkNl3aRx2R2Zc29u+4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.crl
                          rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 07:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:85:a0:c4:93:75:9f:57:eb:43:26:91:1c:45:2c:16:d6:0a:5f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82570D137F4A2CB963DFFC57F5D09035250E3A33
        Validity
            Not Before: Dec 22 06:20:39 2025 GMT
            Not After : Dec 23 07:53:39 2025 GMT
        Subject: CN=A468CAE07413BCD632D167AB1799D457F3A6A61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:d5:dc:63:0f:7b:22:b7:14:eb:e8:d3:6b:
                    fc:3d:67:89:85:f8:e9:fa:d4:17:5a:51:c9:05:be:
                    ff:61:bb:85:15:e9:99:49:c1:b0:7d:29:82:61:7b:
                    6a:2d:4c:b2:d0:9b:5e:dc:08:6f:5e:60:55:eb:e5:
                    f2:43:a7:78:f6:bd:de:9b:50:01:46:17:6d:ef:29:
                    b7:d2:c5:0d:8a:88:ef:4f:36:78:ee:3f:0d:28:9a:
                    e5:12:78:12:fe:4b:d5:3d:3f:3c:0d:13:be:ea:e7:
                    be:1c:de:d1:c2:89:2d:82:f4:9b:01:0e:97:24:0a:
                    80:73:6b:cf:ee:2e:82:8d:53:73:b1:6d:7c:05:b4:
                    86:62:75:1b:55:7a:b5:0a:19:b2:bf:84:eb:2b:54:
                    22:61:c3:e3:ae:00:97:81:88:94:f4:9a:cb:bc:84:
                    e6:33:d1:3b:50:84:94:eb:c3:39:0b:b4:6b:50:3d:
                    72:2b:f2:65:09:e4:35:f8:e4:d9:dc:21:10:84:4b:
                    d1:79:a8:5e:59:f3:f6:83:ea:61:06:d0:94:d5:92:
                    fb:d4:22:60:53:87:f3:96:42:7b:a4:e1:a3:93:64:
                    6f:71:70:4f:6e:6e:3e:eb:25:da:6f:32:b6:ad:b9:
                    79:19:9b:31:d6:5a:27:92:ef:5d:81:76:79:ea:10:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:68:CA:E0:74:13:BC:D6:32:D1:67:AB:17:99:D4:57:F3:A6:A6:1C
            X509v3 Authority Key Identifier:
                keyid:82:57:0D:13:7F:4A:2C:B9:63:DF:FC:57:F5:D0:90:35:25:0E:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:c7:86:4c:23:2d:75:3c:81:c9:26:ae:33:32:53:43:e5:
         36:28:07:2a:aa:e1:d0:fe:39:8b:b5:de:84:1a:d0:f1:a3:69:
         6f:08:af:4c:9b:a6:3a:dd:3e:c7:b5:35:c6:39:96:d3:d6:f3:
         69:bf:2e:77:7a:ac:44:17:83:29:38:1f:7c:bd:9c:e1:c0:e9:
         f7:43:34:08:d7:67:76:d4:3a:36:55:89:3a:44:c1:fa:83:87:
         1e:f4:64:5b:f3:20:4c:7b:ed:51:bf:5b:42:86:2e:17:44:43:
         9a:65:9c:4a:08:7c:e5:81:90:82:9a:91:05:58:8c:90:01:a6:
         be:76:c1:c3:0c:4d:b2:c4:a7:dd:f1:4e:06:bd:51:2e:ea:82:
         6a:c8:64:c6:aa:3f:e6:7f:26:2f:c7:83:0e:70:9f:41:d8:89:
         b4:ed:f2:37:04:8e:8b:37:51:a4:8b:7c:75:16:2c:bf:91:e7:
         52:a3:e9:6b:1a:af:16:0c:48:bb:fa:bc:0d:56:10:3a:54:54:
         72:94:90:a9:d7:03:34:b4:f7:3b:f8:dc:18:69:f7:fa:bb:03:
         6a:3d:b1:0e:68:3f:98:07:ce:19:59:12:ec:ff:e8:95:fd:0a:
         14:f8:f9:b7:a9:72:15:1d:33:c1:2c:63:50:c4:97:20:1a:0d:
         17:38:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:32:52 2025 by rpki-client